Mon, Aug 17 · 07:16 PM CDTCVE-2026-66792
9.9/10 · Must read/watchNVDvuln
Summary
A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription with specific, crafted annotations. Successful exploitation grants the attacker the ability to deploy resources into any namespace with the e
CVECVE-2026-66792
SeverityCRITICAL
TypeUPDATED
PublishedMon, Aug 17 · 07:16 PM CDT
ModifiedMon, Sep 21 · 11:17 AM CDT
CVE-2026-72733
9.9/10 · Must read/watchNVDvuln
Summary
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the backup.restoreBackupWithLogs tRPC subscription builds database restore shell pipelines from the user-controlled databaseName and backupFile fields without safely separating them from shell syntax. packages/server/src/utils/restore/util
CVECVE-2026-72733
SeverityCRITICAL
TypeUPDATED
PublishedMon, Aug 10 · 06:18 PM CDT
ModifiedMon, Sep 21 · 07:17 PM CDT
CVE-2024-40766
9.8/10 · Must read/watchNVDvuln
Summary
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS
CVECVE-2024-40766
SeverityCRITICAL
TypeUPDATED
PublishedFri, Aug 23 · 07:15 AM CDT
ModifiedMon, Sep 21 · 09:17 PM CDT
CVE-2025-39682
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - one non-DATA record If the next record has different type than what has already been processed we brea
CVECVE-2025-39682
SeverityCRITICAL
TypeUPDATED
PublishedFri, Sep 05 · 06:15 PM CDT
ModifiedMon, Sep 21 · 12:00 PM CDT
CVE-2026-2771
9.8/10 · Must read/watchNVDvuln
Summary
Undefined behavior in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVECVE-2026-2771
SeverityCRITICAL
TypeUPDATED
PublishedTue, Feb 24 · 02:16 PM CST
ModifiedMon, Sep 21 · 08:17 PM CDT
CVE-2026-72355
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix barriering when walking subrequest list Fix the barriering used when walking the subrequest list in retry as there's a possibility of seeing a subreq that's just been added by the application thread.
CVECVE-2026-72355
SeverityCRITICAL
TypeUPDATED
PublishedSat, Aug 15 · 06:22 AM CDT
ModifiedMon, Sep 21 · 02:17 PM CDT
CVE-2026-72494
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Replace waitqueue and flag with completion The driver previously used a waitqueue along with an explicit request_done flag, but without proper barriers around request_done. An earlier patch by Gui-Dong Han attempted to fix this by adding th
CVECVE-2026-72494
SeverityCRITICAL
TypeUPDATED
PublishedSat, Aug 15 · 06:22 AM CDT
ModifiedMon, Sep 21 · 02:17 PM CDT
CVE-2026-74269
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: bnxt: fix head underflow on XDP head-grow The xdp.py test test_xdp_native_adjst_head_grow_data crashes when run on a bnxt machine (and also crashes in NIPA). It seems that the bug is an underflow in bnxt_rx_multi_page_skb, which builds the skb head: na
CVECVE-2026-74269
SeverityCRITICAL
TypeUPDATED
PublishedSat, Aug 15 · 06:22 AM CDT
ModifiedMon, Sep 21 · 02:17 PM CDT
CVE-2026-12564
9.6/10 · Must read/watchNVDvuln
Summary
A flaw was found in the AAP Controller's HashiCorp Vault credential plugin. The kubernetes_auth() function in awx_plugins/credentials/hashivault.py reads the controller pod's Kubernetes service account token and sends it to an attacker-controlled URL when a HashiCorp Vault Secret Lookup credential with kubernetes_role
CVECVE-2026-12564
SeverityCRITICAL
TypeUPDATED
PublishedTue, Aug 18 · 04:17 PM CDT
ModifiedMon, Sep 21 · 11:17 AM CDT
CVE-2026-72496
9.2/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Proper rollback if the ioremap fails bnxt_qplib_alloc_dpi returns success even if ioremap fails. Add the proper rollback when the ioremap fails and return -ENOMEM status.
CVECVE-2026-72496
SeverityCRITICAL
TypeUPDATED
PublishedSat, Aug 15 · 06:22 AM CDT
ModifiedMon, Sep 21 · 02:17 PM CDT
CVE-2026-74521
9.1/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: ksmbd: use memcmp() to compare ClientGUIDs ClientGUID is a fixed-size binary value and can contain embedded NUL bytes. strncmp() stops comparing at the first NUL byte, so different ClientGUID values can incorrectly be treated as equal. Use memcmp() in
CVECVE-2026-74521
SeverityCRITICAL
TypeUPDATED
PublishedSat, Aug 15 · 01:17 PM CDT
ModifiedMon, Sep 21 · 02:17 PM CDT
CVE-2025-12548
9.0/10 · Must read/watchNVDvuln
Summary
A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration (SSH keys, tokens, etc.) from other users' Developer Workspace containers, via an unauthenticated JSON-RPC / websocket API exposed on TCP port 3333.
CVECVE-2025-12548
SeverityCRITICAL
TypeUPDATED
PublishedTue, Jan 13 · 04:15 PM CST
ModifiedMon, Sep 21 · 05:17 PM CDT
CVE-2023-43000
8.8/10 · Worth your timeNVDvuln
Summary
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.
CVECVE-2023-43000
SeverityHIGH
TypeUPDATED
PublishedWed, Nov 05 · 07:15 PM CST
ModifiedMon, Sep 21 · 06:17 PM CDT
CVE-2025-2843
8.8/10 · Worth your timeNVDvuln
Summary
A flaw was found in the Observability Operator. The Operator creates a ServiceAccount with *ClusterRole* upon deployment of the *Namespace-Scoped* Custom Resource MonitorStack. This issue allows an adversarial Kubernetes Account with only namespaced-level roles, for example, a tenant controlling a namespace, to create
CVECVE-2025-2843
SeverityHIGH
TypeUPDATED
PublishedWed, Nov 12 · 05:15 PM CST
ModifiedMon, Sep 21 · 05:17 PM CDT
CVE-2025-31277
8.8/10 · Worth your timeNVDvuln
Summary
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.
CVECVE-2025-31277
SeverityHIGH
TypeUPDATED
PublishedWed, Jul 30 · 12:15 AM CDT
ModifiedMon, Sep 21 · 05:17 PM CDT
CVE-2026-13622
8.8/10 · Worth your timeNVDvuln
Summary
A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc/ /root/ paths using net.Dial() without symlink protection. These socket paths reside in qemu-owned directories writable by the virt
CVECVE-2026-13622
SeverityHIGH
TypeUPDATED
PublishedWed, Aug 12 · 09:17 PM CDT
ModifiedMon, Sep 21 · 05:17 PM CDT
CVE-2026-18617
8.8/10 · Worth your timeNVDvuln
Summary
A flaw was found in the Data Science Pipelines Operator (DSPO). A namespace editor can exploit a vulnerability in the spec.database.customExtraParams field, which allows for the injection of dangerous parameters into the MySQL Data Source Name (DSN) string. By manipulating these parameters, an attacker can enable LOCAL
CVECVE-2026-18617
SeverityHIGH
TypeUPDATED
PublishedMon, Aug 10 · 09:17 PM CDT
ModifiedMon, Sep 21 · 11:17 AM CDT
CVE-2026-18951
8.8/10 · Worth your timeNVDvuln
Summary
A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator. The RHOAI overlay incorrectly aggregates `trainjobs` management permissions into the native Kubernetes `edit ClusterRole`. This allows any user with `edit ClusterRole` permissions in a namespace to create, modify, and delete `TrainJ
CVECVE-2026-18951
SeverityHIGH
TypeUPDATED
PublishedMon, Aug 10 · 09:17 PM CDT
ModifiedMon, Sep 21 · 11:17 AM CDT
CVE-2026-18982
8.8/10 · Worth your timeNVDvuln
Summary
A flaw was found in the RHOAI training-operator. This vulnerability allows a user with standard edit or admin roles in any Kubernetes namespace to escalate their privileges. Through the creation of training jobs, an attacker can impersonate service accounts, access the host filesystem, and potentially execute arbitrary
CVECVE-2026-18982
SeverityHIGH
TypeUPDATED
PublishedMon, Aug 10 · 09:17 PM CDT
ModifiedMon, Sep 21 · 11:17 AM CDT
CVE-2026-26731
8.8/10 · Worth your timeNVDvuln
Summary
TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the routernamer`parameter in the formDnsv6 function.
CVECVE-2026-26731
SeverityHIGH
TypeUPDATED
PublishedTue, Feb 17 · 07:21 PM CST
ModifiedMon, Sep 21 · 08:17 PM CDT
CVE-2026-5883
8.8/10 · Worth your timeNVDvuln
Summary
Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVECVE-2026-5883
SeverityHIGH
TypeUPDATED
PublishedWed, Apr 08 · 10:16 PM CDT
ModifiedMon, Sep 21 · 08:17 PM CDT
CVE-2026-72334
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix malformed ISO_END/CONT handling Core specification (Part C vol 4 sec 5.4.5) does not exclude empty ISO_CONT, ISO_END packets. We currently reject them if they are last. If controller sends malformed sequence ISO_START -> rx_len = 4,
CVECVE-2026-72334
SeverityHIGH
TypeUPDATED
PublishedSat, Aug 15 · 06:22 AM CDT
ModifiedMon, Sep 21 · 02:17 PM CDT
CVE-2026-7273
8.8/10 · Worth your timeNVDvuln
Summary
A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.
CVECVE-2026-7273
SeverityHIGH
TypeUPDATED
PublishedTue, Jun 16 · 03:16 AM CDT
ModifiedTue, Sep 22 · 10:45 AM CDT
CVE-2026-74407
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cancel SSR work items during PCI shutdown A reboot can crash the kernel if it overlaps with WLAN firmware crash recovery (SSR). The crash is a NULL pointer dereference in the MHI teardown path while freeing DMA-backed MHI contexts. Simpli
CVECVE-2026-74407
SeverityHIGH
TypeUPDATED
PublishedSat, Aug 15 · 06:22 AM CDT
ModifiedMon, Sep 21 · 02:17 PM CDT
CVE-2026-18608
8.7/10 · Worth your timeNVDvuln
Summary
A flaw was found in the Data Science Pipelines Operator (DSPO). The operator's ClusterRole, which defines its permissions, includes extensive privileges beyond what is necessary for its operation. These excessive permissions, such as the ability to execute commands within pods and manage cluster-wide roles, could be ex
CVECVE-2026-18608
SeverityHIGH
TypeUPDATED
PublishedMon, Aug 10 · 09:17 PM CDT
ModifiedMon, Sep 21 · 11:17 AM CDT
