CLEANSTART-2026-KF12369 Security fix for CVE-2026-26018 applied in: kubernetes-dns-node-cache 1.23.1-r0, kubernetes-dns-node-cache 1.24.1-r1, kubernetes-dns-node-cache 1.25.0-r8, kubernetes-dns-node-cache-fips 1.26.0-r1

CVE-2026-26018 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HS50696 Security fix for CVE-2026-56865 applied in: atlantis 0.44.1-r0, atlantis 0.47.0-r1, atlantis 0.47.1-r1, atlantis-fips 0.47.1-r1, cluster-autoscaler 1.35.2-r4, cluster-autoscaler 1.36.1-r4, cosign 3.0.6-r2, cosign 3.1.3-r0, crossplane 2.3.4-r2, crossplane-provider-keycloak 3.0.1-r0, dex 2.42.1-r6, dex 2.43.1-r3, dex 2.44.0-r7, dynatrace-operator 1.10.1-r1, dynatrace-operator 1.10.2-r0, dynatrace-operator 1.8.1-r7, gitea 1.26.4-r1, gitea 1.27.2-r1, grype 0.117.0-r1, grype-fips 0.117.0-r1, kubernetes-dns-node-cache 1.23.1-r1, kubernetes-dns-node-cache 1.24.1-r2, kubernetes-dns-node-cache 1.25.0-r9, kubernetes-dns-node-cache 1.26.8-r7, kyverno 1.15.3-r3, kyverno 1.16.4-r3, kyverno 1.17.2-r3, kyverno 1.18.2-r0, mailpit 1.29.7-r1, mailpit-fips 1.29.7-r1, minio-operator 6.0.4-r7, minio-operator 7.0.1-r7, minio-operator 7.1.1-r7, ollama 0.32.11-r3, ollama-fips 0.32.11-r2, ollama-fips 0.32.12-r1, ollama-fips 0.32.13-r1, ollama-fips 0.32.14-r1, ollama-fips 0.32.15-r1, opentelemetry-collector-contrib 0.155.0-r2, opentelemetry-collector-contrib 0.156.0-r0, opentelemetry-collector-contrib 0.157.0-r0, opentelemetry-collector-contrib 0.159.0-r2, opentelemetry-collector-contrib-fips 0.158.0-r3, opentelemetry-collector-contrib-fips 0.159.0-r2, prometheus-alertmanager 0.33.0-r2, prometheus-alertmanager 0.34.0-r1, prometheus-mongodb-exporter 0.53.0-r1, prometheus-mongodb-exporter-fips 0.53.0-r1, pulumi 3.248.0-r0, rancher-agent 2.11.15-r2, rancher-agent 2.12.11-r3, rancher-agent 2.13.7-r1, rancher-agent 2.14.3-r0, rekor-backfill-index 1.2.2-r0, spire-server 1.14.7-r0, tekton-chains 0.25.2-r1, tekton-chains 0.26.5-r1, tekton-chains-fips 0.24.0-r1, tekton-chains-fips 0.25.2-r1, tekton-chains-fips 0.26.5-r1, tekton-chains-fips 0.29.1-r1, terraform 1.15.7-r0, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1, tkn 0.45.0-r1, velero 1.15.2-r7, velero 1.17.2-r8, velero 1.18.2-r7, velero-fips 1.18.2-r7, wave 011.0-r4

CVE-2026-56865 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CVE-2026-13276 Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access

IBM Verify Identity Access 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access 10.0.0 through 10.0.9.2 Interim Fix 001 and IBM Verify Identity Access Container 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access Container 10.0.0 through 10.0.9.2 Interim Fix 001...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: BPF: Using rawspinlockt in ringbuf. The function bpfringbufreserve is invoked from a tracepoint, which disables preemption. Using spinlockt in this context can lead to a “sleep in atomic” warning in the RT variant. This issue is...

DEBIAN-CVE-2026-80933

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: validate default EEPROM firmware size The default EEPROM firmware is parsed and copied as a full EEPROM without checking its length. A truncated file can make the driver read beyond the firmware buffer during...

DEBIAN-CVE-2026-19872

HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message. The wrappers and renderers that emit a form's errors interpolate the error string straight into HTML with no escaping. Two of the library's own messages,...

PT-2026-85480

SiYuan versions before v3.8.2 contain a path guard bypass vulnerability in the MCP file-access handler that uses case-sensitive matching on Linux filesystems. Attackers can read the protected publishAccess.json file by requesting case-variant paths like PublishAccess.json to disclose sensitive...

CVE-2026-76172 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter, tileserver-gl, langfuse, arangodb, yaml-language-server, unleash-fips, kibana, gitlab-rails-ce-fips, unleash, tileserver-gl-fips, opensearch-dashboards, argo-workflows, keep-fips, wazuh-dashboard, langfuse-fips, nextcloud-server,...

CLEANSTART-2026-BE65099 Security fixes in nginx-prometheus-exporter-fips 1.5.3-r1

Package nginx-prometheus-exporter-fips version 1.5.3-r1 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-YQ91884 Security fixes in fulcio-fips 1.5.1-r1

Package fulcio-fips version 1.5.1-r1 fixes 17 vulnerabilities: CVE-2026-33818, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860...

CLEANSTART-2026-FS21502 Security fixes in argo-rollouts-fips 1.9.1-r2

Package argo-rollouts-fips version 1.9.1-r2 fixes 9 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-WE39738 Security fixes in cassandra-reaper-fips 4.1.1-r1

Package cassandra-reaper-fips version 4.1.1-r1 fixes 17 vulnerabilities: CVE-2026-10532, CVE-2026-1225, CVE-2026-9828, ghsa-r7wm-3cxj-wff9, ghsa-72hv-8253-57qq...

CLEANSTART-2026-EI29741 Security fixes in argo-rollouts-fips 1.9.1-r3

Package argo-rollouts-fips version 1.9.1-r3 fixes 9 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-IA07692 Security fixes in opentelemetry-collector-contrib-fips 0.158.0-r2

Package opentelemetry-collector-contrib-fips version 0.158.0-r2 fixes 10 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818...

GHSA-6HX8-3WJJ-GR8G vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1, openstack-nova-2025.1, openstack-nova-2026.1, openstack-glance-2025.2-fips, openstack-keystone-2025.2, openstack-glance-2026.1, openstack-horizon-2025.1-fips, openstack-horizon-2026.1-fips, openstack-tempest-2025.2,...

CVE-2026-82267: Missing Authorization

Komodo through 2.3.2 discloses internal resource identifiers and writes audit entries before performing permission checks in the /execute and /execute/variant handlers. Authenticated users can guess resource names to obtain internal identifiers and insert fraudulent audit log entries...

CVE-2026-55677 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, temporal-ui-server-fips, falcosidekick-ui-fips, temporal, kube-metrics-adapter-fips, temporal-ui-server, listmonk, falcosidekick-ui, temporal-fips...

...[ More ]

This Metasploit module exploits CVE-2026-66066 in Ruby on Rails Active Storage when the application uses the Vips variant processor and accepts untrusted image uploads. A crafted MATLAB v7.3/HDF5 image uses external storage to read text files accessible to the Rails worker through a PNG...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

Intel’s microprocessor generations 6 to 8 are affected by a new Spectre variant that can bypass the retpoline mitigation mechanism in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to execute arbitrary speculative code under certain...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock. Since DMAfence objects can be shared with other subsystems, they may be accessed from the hardirq context in those drivers. We must take that into accoun...