GHSA-RQ77-P4H8-4CRW vulnerabilities

Vulnerabilities for packages: harbor, tailscale...

GHSA-RQ77-P4H8-4CRW vulnerabilities

Vulnerabilities for packages: harbor, harbor-fips, tailscale, zitadel...

CVE-2025-24358 vulnerabilities

Vulnerabilities for packages: harbor, harbor-fips, tailscale, zitadel...

CVE-2025-29266

Unraid 7.0.0 before 7.0.1 allows remote users to access the Unraid WebGUI and web console as root without authentication if a container is running in Host networking mode with Use Tailscale enabled...

CVE-2025-29266

Unraid 7.0.0 before 7.0.1 allows remote users to access the Unraid WebGUI and web console as root without authentication if a container is running in Host networking mode with Use Tailscale enabled...

CVE-2025-29266

CVE-2025-29266 affects Unraid OS 7.0.0 prior to 7.0.1. The issue allows remote users to access the Unraid WebGUI and web console as root without authentication when a container runs in Host networking mode with Use Tailscale enabled, enabling total compromise of the web interface. The root cause ...

PT-2025-13694 · Lime Technology · Unraid

Name of the Vulnerable Software and Affected Versions: Unraid versions 7.0.0 through 7.0.0 Description: The issue allows remote users to access the Unraid WebGUI and web console as root without authentication if a container is running in Host networking mode with Use Tailscale enabled. This can...

CVE-2025-29266

Unraid 7.0.0 before 7.0.1 allows remote users to access the Unraid WebGUI and web console as root without authentication if a container is running in Host networking mode with Use Tailscale enabled...

CVE-2025-29266

Unraid 7.0.0 before 7.0.1 allows remote users to access the Unraid WebGUI and web console as root without authentication if a container is running in Host networking mode with Use Tailscale enabled...

CVE-2025-29266

Unraid 7.0.0 before 7.0.1 allows remote users to access the Unraid WebGUI and web console as root without authentication if a container is running in Host networking mode with Use Tailscale enabled...

tailscale-1.80.3-2.1 on GA media (moderate)

tailscale-1.80.3-2.1 on GA media Announcement ID: openSUSE-SU-2025:14887-1 Rating: moderate Cross-References: CVE-2025-22869 CVSS scores: CVE-2025-22869 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-22869 SUSE : 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:...

OPENSUSE-SU-2025:14887-1 tailscale-1.80.3-2.1 on GA media

These are all security issues fixed in the tailscale-1.80.3-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2022-41924

A vulnerability identified in the Tailscale Windows client allows a malicious website to reconfigure the Tailscale daemon tailscaled, which can then be used to remotely execute code. In the Tailscale Windows client, the local API was bound to a local TCP socket, and communicated with the Windows...

tailscale-1.78.3-2.1 on GA media (moderate)

tailscale-1.78.3-2.1 on GA media Announcement ID: openSUSE-SU-2024:14602-1 Rating: moderate Cross-References: CVE-2024-45337 CVSS scores: CVE-2024-45337 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now b...

OPENSUSE-SU-2024:14602-1 tailscale-1.78.3-2.1 on GA media

These are all security issues fixed in the tailscale-1.78.3-2.1 package on the GA media of openSUSE Tumbleweed...

GO-2022-1119 Tailscale daemon is vulnerable to information disclosure via CSRF in tailscale.com

Tailscale daemon is vulnerable to information disclosure via CSRF in tailscale.com...

GO-2022-1120 Tailscale Windows daemon is vulnerable to RCE via CSRF in tailscale.com

Tailscale Windows daemon is vulnerable to RCE via CSRF in tailscale.com...

GO-2023-1671 Non-interactive Tailscale SSH sessions on FreeBSD may use the effective group ID of the tailscaled process in tailscale.com

Non-interactive Tailscale SSH sessions on FreeBSD may use the effective group ID of the tailscaled process in tailscale.com...

China-Backed Earth Baku Expands Cyber Attacks to Europe, Middle East, and Africa

The China-backed threat actor known as Earth Baku has diversified its targeting footprint beyond the Indo-Pacific region to include Europe, the Middle East, and Africa starting in late 2022. Newly targeted countries as part of the activity include Italy, Germany, the U.A.E., and Qatar, with...

FreeBSD : tailscale -- Insufficient inbound packet filtering in subnet routers and exit nodes (ee6936da-0ddd-11ef-9c21-901b0e9408dc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ee6936da-0ddd-11ef-9c21-901b0e9408dc advisory. - Tailscale team reports: In Tailscale versions earlier than 1.66.0, exit nodes, subnet routers, and ap...