GO-2025-3828 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, kubeflow-katib...

GO-2026-4829 vulnerabilities

Vulnerabilities for packages: nats-top, k3s, nats, kine...

GO-2026-6000 vulnerabilities

Vulnerabilities for packages: datadog-operator, kubernetes-dns-node-cache, datadog-agent, vitess...

GO-2025-3660 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, witness, kots, spire-server, cosign, conftest, tfsec, policy-controller, trivy...

GO-2026-5746 vulnerabilities

Vulnerabilities for packages: aws-otel-collector, kpt, nuclei, grafana-alloy, kots, trivy-operator, docker-credential-gcr, portieris, grafana, amazon-cloudwatch-agent, podman, opentelemetry-operator, rancher-machine, spire-server, datadog-agent, ko, zot, trivy, nerdctl, envoy-gateway, skopeo,...

GO-2026-4550 vulnerabilities

Vulnerabilities for packages: gitsign, flux, kots, crossplane-provider-aws-eks, trivy-operator, grafana, flux-notification-controller, k9s, crossplane-provider-aws-dynamodb, kubescape, gomplate, crossplane-provider-keycloak, zot, crossplane-provider-family-aws, crossplane-provider-aws-ec2, ksops,...

GO-2026-4341 vulnerabilities

Vulnerabilities for packages: chisel, kbld, k3d, terraform-provider-time, wuzz, metacontroller, mods, docker-credential-gcr, azcopy, wave, nats-top, flux-notification-controller, pguser, croc, kapp, dask-gateway, steampipe, dynamic-localpv-provisioner, opensearch-k8s-operator, aws-privateca-issue...

PT-2026-72055

Name of the Vulnerable Software and Affected Versions Tenable Security Center affected versions not specified Description A remote code execution issue exists in the report generation functionality. An authenticated, non-administrative user can exploit this by providing specially crafted input th...

CVE-2026-19626: Improper Neutralization of Directives in Dynamically Evaluated Code

A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in...

MINI-GRJ7-P3HH-QV6R

Bulletin has no description...

CVE-2026-73575

creationtimestamp| type| source ---|---|--- 2026-08-13 16:50:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2ep36ij3vbet4...

CVE-2026-54249

creationtimestamp| type| source ---|---|--- 2026-08-13 16:32:36+00:00| seen| https://gist.github.com/alon710/d833b9431a8f61aeff2a0496f83968ee...

Frappe Prepared Report / Query Report bypass subject, owner and row-level permission checks to read other users' report data

Frappe Prepared Report / Query Report Bypass Permission Checks to Read Other Users' Report Data Vulnerability Overview Query Report in Frappe Framework supports background pre-generation Prepared Report: the query is executed with the initiating user's privileges and the result is persisted for...

EUVD-2026-57884

Unauthenticated Broken Authentication in Cartify = 1.3.0.1 versions...

CVE-2026-63293

creationtimestamp| type| source ---|---|--- 2026-08-13 13:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msxqbydnxy2e...

CVE-2026-19004

creationtimestamp| type| source ---|---|--- 2026-08-13 12:45:03+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-2...

CVE-2026-58230

creationtimestamp| type| source ---|---|--- 2026-08-13 08:48:42+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...

CVE-2026-66761

creationtimestamp| type| source ---|---|--- 2026-08-13 08:48:28+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...

CVE-2026-18706

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:48+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...

ATOBench: Tracing How Autonomous Penetration-Testing Agents Verify Vulnerabilities When Target Evidence Lies

Autonomous penetration-testing agents rely on target responses. These responses guide both subsequent actions and the final report. A deceptive response can therefore redirect both the attack trajectory and the agent's verification process. However, final reports reveal little about how an agent...