CVE-2026-30963: Improper Input Validation

Capsule is a multi-tenancy and policy-based framework for Kubernetes. To defend against namespace hijacking achieved through update/patch operations on namespaces, Capsule uses a webhook to validate update requests targeting namespaces. However, in Kubernetes, the namespace/finalize and...

Apache Airflow 安全漏洞

Apache Airflow is an open-source platform developed by the Apache Foundation in the United States. It allows for the creation, management, and monitoring of workflows. This platform features scalability and dynamic monitoring capabilities. However, Apache Airflow has security vulnerabilities. The...

CVE-2026-42253

creationtimestamp| type| source ---|---|--- 2026-05-31 17:48:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mn64rdw2aa26...

CVE-2026-10206

creationtimestamp| type| source ---|---|--- 2026-05-31 06:47:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116667844603803875 2026-05-31 11:01:02+00:00| seen| https://infosec.exchange/users/dragonjar/statuses/116668842757514975 2026-05-31 16:16:47+00:00| seen|...

CVE-2026-10161

A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20. This affects the function formResetStatistic of the file /goform/formResetStatistic. Performing a manipulation of the argument statusstatistic results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is...

CVE-2026-10192

creationtimestamp| type| source ---|---|--- 2026-05-30 17:04:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116664608498253097 2026-05-31 19:04:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn6b26y72e2s 2026-05-31 23:04:21+00:00| seen|...

CVE-2026-10183

creationtimestamp| type| source ---|---|--- 2026-05-30 16:37:24+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116664502304851453 2026-05-31 16:02:18+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mn5wtvtac62j 2026-05-31 16:49:38+00:00| seen|...

CVE-2026-10162

creationtimestamp| type| source ---|---|--- 2026-05-30 11:14:14+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116663232233376212 2026-05-31 03:00:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mn4l5tcb7b2k 2026-05-31 03:00:29+00:00| seen|...

CVE-2026-10165

creationtimestamp| type| source ---|---|--- 2026-05-30 07:52:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116662437600071464 2026-05-31 04:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/116667306745449211 2026-05-31 04:30:26+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-49214

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Versions prior to 2.10.2 did not reject ASCII control characters, whitespace, or DEL in...

Sparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection

Summary AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection. Details Autoupdate/AppInstaller.m's shouldAcceptNewConnection: only enforces SUCodeSigningVerifier validateConnection: before stage 1 completes. After...

CVE-2026-49372

In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible...

CVE-2026-49372

In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible...

CVE-2026-49372

In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible...

EUVD-2026-33380

In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible...

CVE-2026-49372

CVE-2026-49372 affects JetBrains TeamCity prior to 2026.1, with an unauthenticated SSRF via build status disclosed (noted as of 2025.11.5). The available sources confirm the vulnerability class (SSRF) and the affected product/version window, but do not provide patch details or remediation steps i...

CVE-2026-49372

In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible...

Protection Mechanism Failure

Overview org.webjars.npm:vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Protection Mechanism Failure through the NodeVM builtin wildcard expansion in lib/builtin.js. An attacker can load Node’s private...

CVE-2026-10101

ACM/MCE assisted-service writes raw referenced pull-secret contents into InfraEnv.status.conditions.message when pull-secret validation fails. A namespace principal with the stock view ClusterRole cannot directly read Secrets, but can read InfraEnv objects and recover the referenced Secret's...

RLSA-2026:19054 Important: tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Apache Tomcat: Certificate revocation bypass due to improper OCSP response validation CVE-2026-24734 For more details about the security issues, including the impact, a CVSS...