CVE Explorer

Exact snapshot results

353,537 CVE records

CVE ID descending · no relevance ranking

CVE-2026-35048

The Piwigo installer in versions 16.3.0 and earlier accepts POST parameters for database configuration and writes them directly into a PHP configuration file without proper sanitization. On PHP 8+, the `addslashes()` protection is bypassed because it checks for `get_magic_quotes_gpc()`, a function removed in PHP 8.0. This allows raw user input to be interpolated directly into PHP source code. An unauthenticated attacker can inject arbitrary PHP code through POST parameters (prefix, dbpasswd, dbh

PUBLISHED

Vendor: Piwigo
Product: Piwigo
Provider severity: CRITICAL
Conflicts: 0

CVE-2026-35047

Brave CMS is an open-source CMS. Prior to 2.0.6, an Unrestricted File Upload vulnerability in the CKEditor endpoint allows attackers to upload arbitrary files, including executable scripts. This may lead to Remote Code Execution (RCE) on the server, potentially resulting in full system compromise, data exfiltration, or service disruption. All users running affected versions of BraveCMS are impacted. This vulnerability is fixed in 2.0.6.

PUBLISHED

Vendor: Ajax30
Product: BraveCMS-2.0
Provider severity: CRITICAL
Conflicts: 0

CVE-2026-35046

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.4, Tandoor Recipes allows authenticated users to inject arbitrary <style> tags into recipe step instructions. The bleach.clean() sanitizer explicitly whitelists the <style> tag, causing the backend to persist and serve unsanitized CSS payloads via the API. Any client consuming instructions_markdown from the API and rendering it as HTML without additional sanitization will execute att

PUBLISHED

Vendor: TandoorRecipes
Product: recipes
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-35045

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.4, the PUT /api/recipe/batch_update/ endpoint in Tandoor Recipes allows any authenticated user within a Space to modify any recipe in that Space, including recipes marked as private by other users. This bypasses all object-level authorization checks enforced on standard single-recipe endpoints (PUT /api/recipe/{id}/), enabling forced exposure of private recipes, unauthorized self-gra

PUBLISHED

Vendor: TandoorRecipes
Product: recipes
Provider severity: HIGH
Conflicts: 0

CVE-2026-35044

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.38, the Dockerfile generation function generate_containerfile() in src/bentoml/_internal/container/generate.py uses an unsandboxed jinja2.Environment with the jinja2.ext.do extension to render user-provided dockerfile_template files. When a victim imports a malicious bento archive and runs bentoml containerize, attacker-controlled Jinja2 template code executes arbitrary Python

PUBLISHED

Vendor: bentoml
Product: BentoML
Provider severity: HIGH
Conflicts: 0

CVE-2026-35043

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.38, the cloud deployment path in src/bentoml/_internal/cloud/deployment.py was not included in the fix for CVE-2026-33744. Line 1648 interpolates system_packages directly into a shell command using an f-string without any quoting. The generated script is uploaded to BentoCloud as setup.sh and executed on the cloud build infrastructure during deployment, making this a remote cod

PUBLISHED

Vendor: bentoml
Product: BentoML
Provider severity: HIGH
Conflicts: 0

CVE-2026-35042

fast-jwt provides fast JSON Web Token (JWT) implementation. In 6.1.0 and earlier, fast-jwt does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing extensions that fast-jwt does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC.

PUBLISHED

Vendor: nearform
Product: fast-jwt
Provider severity: HIGH
Conflicts: 1

CVE-2026-35041

fast-jwt provides fast JSON Web Token (JWT) implementation. From 5.0.0 to 6.2.0, a denial-of-service condition exists in fast-jwt when the allowedAud verification option is configured using a regular expression. Because the aud claim is attacker-controlled and the library evaluates it against the supplied RegExp, a crafted JWT can trigger catastrophic backtracking in the JavaScript regex engine, resulting in significant CPU consumption during verification. This vulnerability is fixed in 6.2.1.

PUBLISHED

Vendor: nearform
Product: fast-jwt
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-35040

fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.2.1, using certain modifiers on RegExp objects in the allowedAud, allowedIss, allowedSub, allowedJti, or allowedNonce options in verify functions can cause certain unintended behaviours. This is because some modifiers are stateful and will cause failures in every second verification attempt regardless of the validity of the token provided. Such modifiers are /g (global matching) and /y (sticky matching). This does NOT allow i

PUBLISHED

Vendor: nearform
Product: fast-jwt
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-3504

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.1 via the '/dokan/v1/stores/{id}/reviews' REST API endpoint. This is due to the 'prepare_reviews_for_response' method including reviewer email addresses, usernames, and user IDs in the API response. This makes it possible for unauthenticated attackers to extract email addresses, usernames, and user IDs of all customers w

PUBLISHED

Vendor: dokaninc
Product: Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-35039

fast-jwt provides fast JSON Web Token (JWT) implementation. From 0.0.1 to before 6.2.0, setting up a custom cacheKeyBuilder method which does not properly create unique keys for different tokens can lead to cache collisions. This could cause tokens to be mis-identified during the verification process leading to valid tokens returning claims from different valid tokens and users being mis-identified as other users based on the wrong token. Version 6.2.0 contains a patch.

PUBLISHED

Vendor: nearform
Product: fast-jwt
Provider severity: CRITICAL
Conflicts: 1

CVE-2026-35038

Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.24.0, there is an arbitrary prototype read vulnerability via `from` field bypass. This vulnerability allows a low-privileged authenticated user to bypass prototype boundary filtering to extract internal functions and properties from the global prototype object this violates data isolation and lets a user read more than they should. This issue has been patched in version 2.24.0.

PUBLISHED

Vendor: SignalK
Product: signalk-server
Provider severity: LOW
Conflicts: 1

CVE-2026-35037

Ech0 is an open-source, self-hosted publishing platform for personal idea sharing. Prior to 4.2.8, the GET /api/website/title endpoint accepts an arbitrary URL via the website_url query parameter and makes a server-side HTTP request to it without any validation of the target host or IP address. The endpoint requires no authentication. An attacker can use this to reach internal network services, cloud metadata endpoints (169.254.169.254), and localhost-bound services, with partial response data e

PUBLISHED

Vendor: lin-snow
Product: Ech0
Provider severity: HIGH
Conflicts: 0

CVE-2026-35036

Ech0 is an open-source, self-hosted publishing platform for personal idea sharing. Prior to 4.2.8, Ech0 implements link preview (editor fetches a page title) through GET /api/website/title. That is legitimate product behavior, but the implementation is unsafe: the route is unauthenticated, accepts a fully attacker-controlled URL, performs a server-side GET, reads the entire response body into memory (io.ReadAll). There is no host allowlist, no SSRF filter, and InsecureSkipVerify: true on the out

PUBLISHED

Vendor: lin-snow
Product: Ech0
Provider severity: HIGH
Conflicts: 0

CVE-2026-35035

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to 0.31.2.0, the application fails to properly sanitize user-controlled input within System Settings – Company Information. Several administrative configuration fields accept attacker-controlled input that is stored server-side and later rendered without proper output encoding. These values are persisted in the database and rendered unsafely on publi

PUBLISHED

Vendor: ci4-cms-erp
Product: ci4ms
Provider severity: HIGH
Conflicts: 0

CVE-2026-35034

Jellyfin is an open source self hosted media server. Versions prior to 10.11.7 contain a denial of service vulnerability in the SyncPlay group creation endpoint (POST /SyncPlay/New), where an authenticated user can create groups with names of unlimited size due to insufficient input validation. By sending large payloads combined with arbitrary group IDs, an attacker can lock out the endpoint for other clients attempting to join SyncPlay groups and significantly increase the memory usage of the J

PUBLISHED

Vendor: jellyfin
Product: jellyfin
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-35033

Jellyfin is an open source self hosted media server. Versions prior to 10.11.7 contain an unauthenticated arbitrary file read vulnerability via ffmpeg argument injection through the StreamOptions query parameter parsing mechanism. The ParseStreamOptions method in StreamingHelpers.cs adds any lowercase query parameter to a dictionary without validation, bypassing the RegularExpression attribute on the level controller parameter, and the unsanitized value is concatenated directly into the ffmpeg c

PUBLISHED

Vendor: jellyfin
Product: jellyfin
Provider severity: CRITICAL
Conflicts: 1

CVE-2026-35032

Jellyfin is an open source self hosted media server. Versions prior to 10.11.7 contain a vulnerability chain in the LiveTV M3U tuner endpoint (POST /LiveTv/TunerHosts), where the tuner URL is not validated, allowing local file read via non-HTTP paths and Server-Side Request Forgery (SSRF) via HTTP URLs. This is exploitable by any authenticated user because the EnableLiveTvManagement permission defaults to true for all new users. An attacker can chain these vulnerabilities by adding an M3U tuner

PUBLISHED

Vendor: jellyfin
Product: jellyfin
Provider severity: HIGH
Conflicts: 1

CVE-2026-35031

Jellyfin is an open source self hosted media server. Versions prior to 10.11.7 contain a vulnerability chain in the subtitle upload endpoint (POST /Videos/{itemId}/Subtitles), where the Format field is not validated, allowing path traversal via the file extension and enabling arbitrary file write. This arbitrary file write can be chained into arbitrary file read via .strm files, database extraction, admin privilege escalation, and ultimately remote code execution as root via ld.so.preload. Explo

PUBLISHED

Vendor: jellyfin
Product: jellyfin
Provider severity: CRITICAL
Conflicts: 1

CVE-2026-35030

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, when JWT authentication is enabled (enable_jwt_auth: true), the OIDC userinfo cache uses token[:20] as the cache key. JWT headers produced by the same signing algorithm generate identical first 20 characters. This configuration option is not enabled by default. Most instances are not affected. An unauthenticated attacker can craft a token whose first 20 characters match a legitimate user's cach

PUBLISHED

Vendor: Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, BerriAI
Product: Red Hat Ansible Automation Platform 2.6, Lightspeed Core, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift AI 3.3, Red Hat OpenShift AI 2.25, litellm
Provider severity: CRITICAL
Conflicts: 3

CVE-2026-3503

Protection mechanism failure in wolfCrypt post-quantum implementations (ML-KEM and ML-DSA) in wolfSSL on ARM Cortex-M microcontrollers allows a physical attacker to compromise key material and/or cryptographic outcomes via induced transient faults that corrupt or redirect seed/pointer values during Keccak-based expansion. This issue affects wolfSSL (wolfCrypt): commit hash d86575c766e6e67ef93545fa69c04d6eb49400c6.

PUBLISHED

Vendor: wolfSSL Inc.
Product: wolfSSL (wolfCrypt)
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-35029

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, the /config/update endpoint does not enforce admin role authorization. A user who is already authenticated into the platform can then use this endpoint to modify proxy configuration and environment variables, register custom pass-through endpoint handlers pointing to attacker-controlled Python code, achieving remote code execution, read arbitrary server files by setting UI_LOGO_PATH and fetchin

PUBLISHED

Vendor: BerriAI, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat
Product: litellm, Red Hat OpenShift AI (RHOAI), Red Hat Ansible Automation Platform 2.6, Red Hat OpenShift AI 2.25, Lightspeed Core, Red Hat OpenShift AI 3.3
Provider severity: HIGH
Conflicts: 3

CVE-2026-35025

ProFTPD through 1.3.9b and 1.3.10rc2 contains an access control bypass vulnerability that allows authenticated FTP users to circumvent Directory ACL restrictions by prefixing paths with /proc/self/root in the RNFR command handler. Attackers can exploit the unresolved symlink components in dir_canonical_path() to cause dir_check() to perform lexical path comparisons that match no configured Directory block, enabling rename operations on files in DenyAll-protected directories and subsequent retrie

PUBLISHED

Vendor: ProFTPD Project
Product: ProFTPD
Provider severity: HIGH
Conflicts: 1

CVE-2026-35023

Wimi Teamwork On-Premises versions prior to 8.2.0 contain an insecure direct object reference vulnerability in the preview.php endpoint where the item_id parameter lacks proper authorization checks. Attackers can enumerate sequential item_id values to access and retrieve image previews from other users' private or group conversations, resulting in unauthorized disclosure of sensitive information.

PUBLISHED

Vendor: Cloud Solutions SAS
Product: Wimi Teamwork
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-3502

TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.

PUBLISHEDCISA KEV

Vendor: TrueConf
Product: TrueConf Client
Provider severity: HIGH
Conflicts: 0

CVE-2026-35019

NetComm NF20MESH routers running firmware R6B031 and earlier contain an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by exploiting a hardcoded AES-256 key used to encrypt session cookies for the web management interface. Attackers can forge a valid encrypted session cookie using the shared hardcoded key and bypass authentication checks to obtain full administrative control of the management interface while any legitimate administrator se

PUBLISHED

Vendor: NetComm Wireless Pty Ltd
Product: NF20MESH
Provider severity: CRITICAL, HIGH
Conflicts: 1

CVE-2026-35018

NetComm NF20MESH routers running firmware R6B031 and earlier contain an authenticated remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands as root by injecting shell metacharacters into the username JSON parameter processed by the dalStorage_addUserAccount function. Attackers can exploit the unsafe concatenation of user-supplied input into a shell command string passed to rut_doSystemAction without sanitization to achieve full root-level command e

PUBLISHED

Vendor: NetComm Wireless Pty Ltd
Product: NF20MESH
Provider severity: HIGH
Conflicts: 1

CVE-2026-35016

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in search.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the frm_query POST parameter directly into an HTML input field VALUE attribute. Attackers can craft a malicious request containing a JavaScript payload in the frm_query parameter that executes in the victim's browser when submitted.

PUBLISHED

Vendor: openises
Product: tickets
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-35015

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in do_unit_mail.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the the_ticket GET parameter directly into a JavaScript variable assignment. Attackers can craft a malicious URL containing a JavaScript payload in the the_ticket parameter that executes in the victim's browser when the URL is visited.

PUBLISHED

Vendor: openises
Product: tickets
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-35014

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in routes_nm.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticket_id GET parameter directly into a hidden input field VALUE attribute. Attackers can craft a malicious URL containing a JavaScript payload in the ticket_id parameter that executes in the victim's browser when the URL is visited.

PUBLISHED

Vendor: openises
Product: tickets
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-35013

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in street_view.php that allows authenticated attackers to inject arbitrary JavaScript by passing unsanitized values through the thelat and thelng GET parameters directly into JavaScript variable assignments. Attackers can craft a malicious URL containing a JavaScript payload in either parameter that executes in the victim's browser when the URL is visited.

PUBLISHED

Vendor: openises
Product: tickets
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-35012

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_facnote.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticket_id GET parameter directly into a hidden input field VALUE attribute. Attackers can craft a malicious URL containing a JavaScript payload in the ticket_id parameter that executes in the victim's browser when the URL is visited.

PUBLISHED

Vendor: openises
Product: tickets
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-35011

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in opena.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the frm_call GET parameter directly into page output. Attackers can craft a malicious URL containing a JavaScript payload in the frm_call parameter that executes in the victim's browser when the URL is visited.

PUBLISHED

Vendor: openises
Product: tickets
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-35010

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in patient_JF.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticket_id GET parameter directly into a JavaScript variable assignment. Attackers can craft a malicious URL containing a JavaScript payload in the ticket_id parameter that executes in the victim's browser when the URL is visited.

PUBLISHED

Vendor: openises
Product: tickets
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-35009

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_note.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticket_id GET parameter directly into a hidden input field VALUE attribute. Attackers can craft a malicious URL containing a JavaScript payload in the ticket_id parameter that executes in the victim's browser when the URL is visited.

PUBLISHED

Vendor: openises
Product: tickets
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-35008

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in single.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticket_id GET parameter directly into an HTML attribute. Attackers can craft a malicious URL containing a JavaScript payload in the id parameter that executes in the victim's browser when the URL is visited.

PUBLISHED

Vendor: openises
Product: tickets
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-35007

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in single_unit.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the id GET parameter directly into an HTML attribute. Attackers can craft a malicious URL containing a JavaScript payload in the id parameter that executes in the victim's browser when the URL is visited.

PUBLISHED

Vendor: openises
Product: tickets
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-35002

Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component that allows attackers to execute arbitrary Python code by manipulating the field_type parameter passed to eval(). Attackers can influence the field_type value in a FunctionCall to achieve remote code execution.

PUBLISHED

Vendor: Agno
Product: Agno
Provider severity: CRITICAL
Conflicts: 0

CVE-2026-35000

ChangeDetection.io versions prior to 0.54.7 contain a protection bypass vulnerability in the SafeXPath3Parser implementation that allows attackers to read arbitrary local files by using unblocked XPath 3.0/3.1 functions such as json-doc() and similar file-access primitives. Attackers can exploit the incomplete blocklist of dangerous XPath functions to access sensitive data from the local filesystem.

PUBLISHED

Vendor: dgtlmoon
Product: ChangeDetection.io
Provider severity: HIGH, MEDIUM
Conflicts: 1

CVE-2026-34999

OpenViking versions 0.2.5 prior to 0.2.14 contain a missing authentication vulnerability in the bot proxy router that allows remote unauthenticated attackers to access protected bot proxy functionality by sending requests to the POST /bot/v1/chat and POST /bot/v1/chat/stream endpoints. Attackers can bypass authentication checks and interact directly with the upstream bot backend through the OpenViking proxy without providing valid credentials.

PUBLISHED

Vendor: Volcengine
Product: OpenViking
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-34993

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the `CookieJar.load()` function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicious code on the affected system. This issue is most likely to occur in applications that allow attacker-controlled files to be loaded.

PUBLISHED

Vendor: Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, aio-libs, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat
Product: Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI 2.25, Red Hat Ansible Automation Platform 2, Red Hat Ansible Automation Platform 2, Red Hat AI Inference Server, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift AI (RHOAI), Red Hat OpenShift AI (RHOAI), Red Hat Ansible Automation Platform 2, Red Hat OpenShift AI 2.25, Red Hat OpenShift AI 2.25, Red Hat OpenShift AI 3.4, Lightspeed Core, Red Hat Ansible Automation Platform 2, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI 2.25, Red Hat AI Inference Server, Red Hat Ansible Automation Platform 2, Red Hat Ansible Automation Platform 2, Red Hat OpenShift AI 3.4, Exploit Intelligence, Red Hat Ansible Automation Platform 2, Red Hat OpenShift AI (RHOAI), Red Hat Ansible Automation Platform 2, Red Hat Ansible Automation Platform 2, Red Hat OpenShift AI 2.25, Red Hat OpenShift AI 3.4, Red Hat OpenShift AI (RHOAI), Red Hat Ansible Automation Platform 2, Red Hat Ansible Automation Platform 2, Red Hat Ansible Automation Platform 2, Red Hat Ansible Automation Platform Ansible Core 2, Red Hat AI Inference Server, Red Hat Ansible Automation Platform 2, Red Hat OpenShift AI (RHOAI), Red Hat AI Inference Server, Red Hat Ansible Automation Platform Ansible Core 2, Red Hat OpenShift AI (RHOAI), Red Hat AI Inference Server, Red Hat OpenShift AI (RHOAI), Red Hat Satellite 6, Red Hat OpenShift AI 2.25, Red Hat Satellite 6, Red Hat OpenShift AI 3.4, Red Hat Ansible Automation Platform 2, OpenShift Lightspeed, Red Hat OpenShift AI 3.3, Red Hat Satellite 6, Red Hat Ansible Automation Platform 2, Red Hat AI Inference Server, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat Update Infrastructure 4 for Cloud Providers, Red Hat Ansible Automation Platform 2, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift AI (RHOAI), Red Hat OpenShift AI (RHOAI), Red Hat OpenShift AI (RHOAI), Red Hat OpenShift AI 3.4, Red Hat Satellite 6, Red Hat AI Inference Server, Red Hat OpenShift AI 3.4, Red Hat Discovery 2, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI), Red Hat Ansible Automation Platform 2, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift AI (RHOAI), Red Hat OpenShift AI (RHOAI), Red Hat Ansible Automation Platform 2, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI), Red Hat Ansible Automation Platform 2, Red Hat AI Inference Server, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift AI 3.4, Red Hat Ansible Automation Platform 2, Red Hat Ansible Automation Platform 2, Red Hat OpenShift AI (RHOAI), Red Hat AI Inference Server, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift AI (RHOAI), Red Hat OpenShift AI 3.4, Red Hat OpenShift AI 3.4, aiohttp, Red Hat AI Inference Server, OpenShift Lightspeed, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift AI 2.25, Red Hat Ansible Automation Platform 2, Red Hat Migration Toolkit for Applications 8.2, Red Hat AI Inference Server, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat AI Inference Server, Red Hat OpenShift AI 3.4, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift AI 2.25, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift AI (RHOAI), Red Hat OpenShift AI 3.3, Red Hat OpenShift AI (RHOAI), Red Hat Ansible Automation Platform Ansible Core 2, Red Hat Ansible Automation Platform Ansible Core 2, Red Hat OpenShift AI (RHOAI), Red Hat AI Inference Server, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift AI (RHOAI), Red Hat OpenShift AI (RHOAI), Red Hat OpenShift AI (RHOAI), Red Hat OpenShift AI (RHOAI), Red Hat Ansible Automation Platform 2, Red Hat OpenShift AI (RHOAI), Red Hat Ansible Automation Platform 2, OpenShift Lightspeed, Red Hat Hardened Images, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift AI (RHOAI), Red Hat AI Inference Server, Red Hat OpenShift AI (RHOAI), Red Hat Ansible Automation Platform 2, Red Hat OpenShift AI (RHOAI), Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift AI (RHOAI), Red Hat AI Inference Server
Provider severity: HIGH, MEDIUM
Conflicts: 3

CVE-2026-34992

Antrea is a Kubernetes networking solution intended to be Kubernetes native. Prior to 2.4.5 and 2.5.2, a missing encryption vulnerability affects inter-Node Pod traffic. In Antrea clusters configured for dual-stack networking with IPsec encryption enabled (trafficEncryptionMode: ipsec), Antrea fails to apply encryption for IPv6 Pod traffic. While the IPv4 traffic is correctly encrypted via ESP (Encapsulating Security Payload), traffic using IPv6 is transmitted in plaintext. This occurs because t

PUBLISHED

Vendor: antrea-io
Product: antrea
Provider severity: HIGH
Conflicts: 0

CVE-2026-34990

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a local unprivileged user can coerce cupsd into authenticating to an attacker-controlled localhost IPP service with a reusable Authorization: Local ... token. That token is enough to drive /admin/ requests on localhost, and the attacker can combine CUPS-Create-Local-Printer with printer-is-shared=true to persist a file:///... queue even though the normal FileDevice p

PUBLISHED

Vendor: OpenPrinting
Product: cups
Provider severity: HIGH, MEDIUM
Conflicts: 1

CVE-2026-3499

The Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 13.4.6 through 13.5.2.1. This is due to missing or incorrect nonce validation on the ajax_migrate_to_custom_post_type, ajax_adt_clear_custom_attributes_product_meta_keys, ajax_update_file_url_to_lower_case, ajax_use_legacy_filters_and_rules, and ajax_fix_duplicate_feed functions. This makes it possible for unauthenticated attackers to trigg

PUBLISHED

Vendor: jkohlbach
Product: Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce
Provider severity: HIGH
Conflicts: 0

CVE-2026-34989

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to 31.0.0.0, the application fails to properly sanitize user-controlled input when users update their profile name (e.g., full name / username). An attacker can inject a malicious JavaScript payload into their profile name, which is then stored server-side. This stored payload is later rendered unsafely in multiple application views without proper ou

PUBLISHED

Vendor: ci4-cms-erp
Product: ci4ms
Provider severity: CRITICAL
Conflicts: 0

CVE-2026-34988

Wasmtime is a runtime for WebAssembly. From 28.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's implementation of its pooling allocator contains a bug where in certain configurations the contents of linear memory can be leaked from one instance to the next. The implementation of resetting the virtual memory permissions for linear memory used the wrong predicate to determine if resetting was necessary, where the compilation process used a different predicate. This divergence meant that the po

PUBLISHED

Vendor: bytecodealliance
Product: wasmtime
Provider severity: LOW
Conflicts: 0

CVE-2026-34987

Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime with its Winch (baseline) non-default compiler backend may allow properly constructed guest Wasm to access host memory outside of its linear-memory sandbox. This vulnerability requires use of the Winch compiler (-Ccompiler=winch). By default, Wasmtime uses its Cranelift backend, not Winch. With Winch, the same incorrect assumption is present in theory on both aarch64 and x86-64. The aarch64 case has

PUBLISHED

Vendor: bytecodealliance
Product: wasmtime
Provider severity: CRITICAL
Conflicts: 1

CVE-2026-34986

A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.

PUBLISHED

Vendor: Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, go-jose, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat
Product: multicluster engine for Kubernetes 2.6, Red Hat Openshift Data Foundation 4.17, Red Hat Openshift Data Foundation 4.22, OpenShift Service Mesh 2, Red Hat Ansible Automation Platform 2, Red Hat Openshift Data Foundation 4.18, Red Hat OpenShift Container Platform 4.21, Red Hat OpenShift Container Platform 4, Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions, Red Hat OpenShift Container Platform 4, Red Hat OpenShift Container Platform 4.21, Red Hat Openshift Data Foundation 4.17, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat Trusted Artifact Signer, Red Hat Openshift Data Foundation 4.18, Red Hat OpenShift Container Platform 4, Red Hat OpenShift AI (RHOAI), Red Hat Openshift Data Foundation 4.2, Logging Subsystem for Red Hat OpenShift, Red Hat Enterprise Linux 8, Red Hat OpenShift Container Platform 4.21, Logging for Red Hat OpenShift 6.2, Red Hat Openshift Data Foundation 4.19, Zero Trust Workload Identity Manager - Tech Preview, Red Hat Enterprise Linux 10, External Secrets Operator for Red Hat OpenShift, Red Hat Quay 3, Red Hat multicluster global hub 1.4.4, Node HealthCheck Operator, OpenShift Pipelines, OpenShift Serverless, Red Hat OpenShift AI (RHOAI), multicluster engine for Kubernetes 2.1, Red Hat Openshift Data Foundation 4.19, Red Hat Openshift Data Foundation 4.22, multicluster engine for Kubernetes 2.7, OpenShift Service Mesh 2, Logging Subsystem for Red Hat OpenShift, Migration Toolkit for Virtualization, Custom Metric Autoscaler 2.19, Red Hat OpenShift Dev Spaces, Red Hat OpenStack Platform 18.0, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift Container Platform 4.18, Red Hat Trusted Artifact Signer 1.3, OpenShift Serverless, Red Hat OpenShift on AWS, Red Hat OpenShift Container Platform 4, OpenShift Pipelines, Logging Subsystem for Red Hat OpenShift 6.4, Red Hat OpenShift AI 3.3, Red Hat OpenShift Container Platform 4.2, Red Hat Trusted Artifact Signer 1.3, OpenShift Developer Tools and Services, OpenShift Serverless, Red Hat OpenShift AI (RHOAI), cert-manager Operator for Red Hat OpenShift, OpenShift Serverless, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift Container Platform 4, multicluster engine for Kubernetes 2.8, Red Hat Openshift Data Foundation 4.19, Logging for Red Hat OpenShift 6, Red Hat OpenShift Service Mesh 3.1, Red Hat Openshift Data Foundation 4.18, Red Hat Quay 3.14, Red Hat OpenShift AI (RHOAI), Red Hat Openshift Data Foundation 4.22, Red Hat Advanced Cluster Management for Kubernetes 2.14, Red Hat OpenShift Service Mesh 3.2, Red Hat OpenShift AI (RHOAI), Red Hat Openshift Data Foundation 4.22, Red Hat OpenShift AI (RHOAI), Logging Subsystem for Red Hat OpenShift, Red Hat Openshift Data Foundation 4.17, Red Hat OpenShift Container Platform 4.22, Red Hat OpenShift GitOps, Red Hat Trusted Artifact Signer 1.3, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift Container Platform 4.18, Red Hat OpenShift Container Platform 4, Multicluster Global Hub, Red Hat Trusted Artifact Signer 1.3, External Secrets Operator for Red Hat OpenShift, Power monitoring for Red Hat OpenShift, Red Hat Advanced Cluster Security 4, Red Hat OpenShift Pipelines 1.2, Assisted Installer for Red Hat OpenShift Container Platform 2, Red Hat OpenShift Pipelines 1.21, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift Service Mesh 3.2, Red Hat Advanced Cluster Security 4.9, Red Hat OpenShift Container Platform 4.17, Red Hat Enterprise Linux 9, OpenShift API for Data Protection 1.4, External Secrets Operator for Red Hat OpenShift, Red Hat Connectivity Link 1, OpenShift Pipelines, Red Hat Openshift Data Foundation 4.2, Red Hat OpenShift distributed tracing 3.9.2, multicluster engine for Kubernetes 2.1, Red Hat OpenShift GitOps 1.18, multicluster engine for Kubernetes 2.1, Red Hat OpenShift Container Platform 4, Red Hat Openshift Data Foundation 4.22, Multicluster Engine for Kubernetes, Red Hat Openshift Data Foundation 4.22, Red Hat Enterprise Linux 10, Red Hat OpenShift Container Platform 4.21, multicluster engine for Kubernetes 2.8, Red Hat Enterprise Linux 9.6 Extended Update Support, Assisted Installer for Red Hat OpenShift Container Platform 2, go-jose, Red Hat Openshift Data Foundation 4.17, Red Hat OpenShift Container Platform 4.2, Multicluster Global Hub 1.5.4, Red Hat OpenShift Service Mesh 2.6, Red Hat OpenShift Container Platform 4, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Openshift Data Foundation 4.2, Zero Trust Workload Identity Manager - Tech Preview, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat OpenShift AI (RHOAI), Red Hat Openshift Data Foundation 4.18, Red Hat Openshift Data Foundation 4.18, Red Hat Openshift Data Foundation 4.2, Red Hat Trusted Artifact Signer 1.3, Red Hat OpenShift Container Platform 4, Red Hat Openshift Data Foundation 4.22, Red Hat Openshift Data Foundation 4.19, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift Container Platform 4.2, Red Hat Trusted Artifact Signer, Red Hat Trusted Artifact Signer 1.3, Red Hat Openshift Data Foundation 4.17, Zero Trust Workload Identity Manager - Tech Preview, Multicluster Global Hub 1.3.4, Red Hat OpenShift Container Platform 4.2, Red Hat Quay 3.18, Red Hat Trusted Artifact Signer 1.3, Red Hat Advanced Cluster Management for Kubernetes 2, Red Hat OpenShift Container Platform 4, Red Hat OpenShift Container Platform 4.21, Red Hat Openshift Data Foundation 4.22, Network Observability Operator, Zero Trust Workload Identity Manager, Red Hat OpenShift Container Platform 4, Red Hat Enterprise Linux 9, OpenShift Serverless, Red Hat OpenShift AI (RHOAI), Red Hat Trusted Artifact Signer 1.3, Red Hat Openshift Data Foundation 4.22, Red Hat Advanced Cluster Management for Kubernetes 2, Red Hat Enterprise Linux 10, Red Hat OpenShift Container Platform 4, Red Hat Openshift Data Foundation 4.19, OpenShift Service Mesh 3, Red Hat Openshift Data Foundation 4.18, Red Hat Openshift Data Foundation 4.22, Red Hat Openshift Data Foundation 4.22, OpenShift API for Data Protection 1.5, Migration Toolkit for Containers, OpenShift Developer Tools and Services, Red Hat OpenShift Container Platform 4.21, Red Hat Advanced Cluster Security for Kubernetes 4.10, Multicluster Engine for Kubernetes, Red Hat Openshift Data Foundation 4.17, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift Virtualization 4, Red Hat Openshift Data Foundation 4.2, Red Hat Build of Podman Desktop - Tech Preview, Red Hat OpenShift distributed tracing 3.9.2, Red Hat Enterprise Linux 10, Red Hat OpenShift Pipelines 1.2, Red Hat Build of Podman Desktop - Tech Preview, Red Hat OpenShift Container Platform 4.2, cert-manager Operator for Red Hat OpenShift, Red Hat OpenShift Container Platform 4.21, Red Hat Openshift Data Foundation 4.2, Custom Metric Autoscaler 2.19, Red Hat OpenStack Platform 18.0, Red Hat OpenShift Container Platform 4.21, Red Hat OpenShift Container Platform 4, Red Hat Openshift Data Foundation 4.17, Red Hat Enterprise Linux 9, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift Container Platform 4.21, Red Hat OpenShift Container Platform 4, Red Hat Openshift Data Foundation 4.17, Red Hat OpenShift Container Platform 4.2, Red Hat OpenShift Container Platform 4.2, Security Profiles Operator, Red Hat Openshift Data Foundation 4.19, multicluster engine for Kubernetes 2.9, Red Hat Trusted Artifact Signer 1.3, Red Hat Ansible Automation Platform 2, Red Hat OpenShift Dev Spaces 3.27, Red Hat Openshift Data Foundation 4.18, Red Hat Openshift Data Foundation 4.18, Red Hat OpenShift Service Mesh 3.1, Red Hat Trusted Artifact Signer 1.3, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift Virtualization 4, Red Hat Quay 3.9, Red Hat Quay 3, Red Hat Openshift Data Foundation 4.19, Red Hat Trusted Artifact Signer 1.3, Zero Trust Workload Identity Manager, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9, Red Hat OpenShift Virtualization 4, Red Hat OpenShift Container Platform 4, Red Hat Openshift Data Foundation 4.2, Red Hat OpenShift Container Platform 4, OpenShift Serverless, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Advanced Cluster Security 4.9, Red Hat OpenShift Container Platform 4, Red Hat Trusted Artifact Signer, Red Hat OpenShift for Windows Containers, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift Container Platform 4.2, Red Hat Openshift Data Foundation 4.19, Red Hat Openshift Data Foundation 4.2, Red Hat Trusted Artifact Signer 1.3, cert-manager Operator for Red Hat OpenShift, multicluster engine for Kubernetes 2.8, Red Hat Trusted Artifact Signer 1.3, Red Hat Openshift Data Foundation 4.17, OpenShift Pipelines, Red Hat OpenShift Container Platform 4, Red Hat OpenShift Container Platform 4, Red Hat Openshift Data Foundation 4.22, Red Hat Openshift Data Foundation 4.22, Red Hat Openshift Data Foundation 4.22, OpenShift Serverless, Red Hat Openshift Data Foundation 4.17, Red Hat Openshift Data Foundation 4.19, Red Hat OpenShift AI (RHOAI), Red Hat Openshift Data Foundation 4.18, Red Hat multicluster global hub 1.6.0, Red Hat OpenShift Service Mesh 3.1, Red Hat OpenShift Container Platform 4.17, Red Hat OpenStack Platform 18.0, Red Hat Advanced Cluster Management for Kubernetes 2, Red Hat Openshift Data Foundation 4.18, Red Hat Advanced Cluster Security 4.9, cert-manager Operator for Red Hat OpenShift, Red Hat OpenShift Container Platform 4, Red Hat OpenShift Container Platform 4, Red Hat Trusted Artifact Signer, Red Hat Openshift Data Foundation 4.17, Zero Trust Workload Identity Manager, multicluster engine for Kubernetes 2.8, Red Hat Advanced Cluster Management for Kubernetes 2, OpenShift Service Mesh 3, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat OpenShift Dev Spaces, Red Hat OpenShift AI (RHOAI), Red Hat Quay 3.12, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat OpenShift Container Platform 4.2, Red Hat Openshift Data Foundation 4.2, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift AI (RHOAI), Red Hat Ansible Automation Platform 2, Red Hat OpenShift Container Platform 4.21, Red Hat OpenShift GitOps, Red Hat Enterprise Linux 10, OpenShift Lightspeed, Red Hat OpenShift Dev Spaces, Red Hat OpenShift Dev Spaces 3.29, multicluster engine for Kubernetes 2.8, Red Hat OpenShift Virtualization 4, Red Hat OpenShift distributed tracing 3.9.2, Red Hat Quay 3, Custom Metric Autoscaler 2.19, Migration Toolkit for Containers, Red Hat Advanced Cluster Security 4.8, Red Hat Enterprise Linux 10, Red Hat OpenShift for Windows Containers, Logging Subsystem for Red Hat OpenShift 6.4, Red Hat OpenShift GitOps, Red Hat Openshift Data Foundation 4.2, Red Hat Enterprise Linux 10, Red Hat Openshift Data Foundation 4.18, multicluster engine for Kubernetes 2.11, Confidential Compute Attestation, Red Hat OpenShift Container Platform 4, OpenShift Serverless, Red Hat Openshift Data Foundation 4.22, Red Hat OpenShift Container Platform 4.21, Red Hat Openshift Data Foundation 4.22, Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions, Red Hat Build of Kueue, Red Hat Enterprise Linux 8, Red Hat Openshift Data Foundation 4.19, Logging Subsystem for Red Hat OpenShift, Red Hat OpenShift Container Platform 4.21, Red Hat Openshift Data Foundation 4.2, Red Hat Openshift Data Foundation 4.18, Red Hat Openshift Data Foundation 4.19, multicluster engine for Kubernetes 2.6, Red Hat OpenShift Container Platform 4.21, Red Hat Openshift Data Foundation 4.2, Logical Volume Manager Storage, Red Hat OpenShift AI (RHOAI), Red Hat Openshift Data Foundation 4.22, Red Hat Advanced Cluster Security 4.8, Red Hat Trusted Artifact Signer, Red Hat Openshift Data Foundation 4.18, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift AI 3.3, Red Hat Openshift Data Foundation 4.22, Red Hat OpenShift distributed tracing 3.9.2, Red Hat OpenShift GitOps, Red Hat Openshift Data Foundation 4.18, Red Hat Enterprise Linux 10, Red Hat OpenShift Container Platform 4.19, Red Hat Openshift Data Foundation 4.22, Red Hat Openshift Data Foundation 4.22, Red Hat Openshift Data Foundation 4.17, Multicluster Engine for Kubernetes, Red Hat Openshift Data Foundation 4.2, Red Hat Quay 3, Red Hat Openshift Data Foundation 4.22, Zero Trust Workload Identity Manager - Tech Preview, OpenShift Serverless, Red Hat Openshift Data Foundation 4.22, Red Hat OpenShift Container Platform 4, Red Hat Openshift Data Foundation 4.2, Red Hat OpenShift Container Platform 4.2, Red Hat OpenShift Container Platform 4.19, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift Container Platform 4, Red Hat Openshift Data Foundation 4.17, Migration Toolkit for Virtualization, Cryostat 4 on RHEL 9, OpenShift Serverless, Red Hat OpenShift AI (RHOAI), Multicluster Engine for Kubernetes, multicluster engine for Kubernetes 2.6, Red Hat Openshift Data Foundation 4.19, Red Hat Openshift Data Foundation 4.17, Red Hat Enterprise Linux 9, Red Hat Advanced Cluster Management for Kubernetes 2, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat OpenShift Container Platform 4.21, Multicluster Engine for Kubernetes, Red Hat OpenShift Service Mesh 3.3, Red Hat Openshift Data Foundation 4.2, OpenShift Serverless, OpenShift Serverless, OpenShift Service Mesh 3, Red Hat Openshift Data Foundation 4.18, Red Hat OpenShift Container Platform 4, Red Hat OpenShift Container Platform 4, OpenShift Pipelines, Red Hat Build of Podman Desktop, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Openshift Data Foundation 4.19, Red Hat OpenShift Container Platform 4, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9, OpenShift Serverless, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift Container Platform 4, Red Hat OpenShift Container Platform 4, Red Hat Enterprise Linux 9, Red Hat Trusted Artifact Signer 1.3, Red Hat OpenShift Container Platform 4.22, Red Hat OpenShift Virtualization 4, Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions, Red Hat OpenShift AI (RHOAI), Red Hat Quay 3.1, Red Hat Openshift Data Foundation 4.17, cert-manager Operator for Red Hat OpenShift, Kernel Module Management Operator for Red Hat Openshift, Red Hat Enterprise Linux 9.6 Extended Update Support, OpenShift Pipelines, External Secrets Operator for Red Hat OpenShift, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift Container Platform 4, Red Hat Openshift Data Foundation 4.19, Red Hat Openshift Data Foundation 4.17, OpenShift Service Mesh 3, Red Hat Openshift Data Foundation 4.22, Red Hat Enterprise Linux 10, Red Hat Openshift Data Foundation 4, Red Hat OpenShift Container Platform 4, Red Hat Trusted Artifact Signer 1.3, Red Hat Openshift Data Foundation 4.2, OpenShift Serverless, Red Hat Quay 3.16, Security Profiles Operator, Red Hat Openshift Data Foundation 4.19, Red Hat OpenShift AI (RHOAI), multicluster engine for Kubernetes 2.9, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Advanced Cluster Security 4.8, Red Hat OpenShift Container Platform 4, Red Hat Openshift Data Foundation 4.17, Red Hat Openshift Data Foundation 4.22, OpenShift Developer Tools and Services, Red Hat Enterprise Linux 9.6 Extended Update Support, OpenShift Lightspeed, Red Hat Migration Toolkit 1.8, multicluster engine for Kubernetes 2.6, OpenShift Serverless, OpenShift API for Data Protection 1.5, multicluster engine for Kubernetes 2.8, Logging Subsystem for Red Hat OpenShift, Red Hat Openshift Data Foundation 4.17, Red Hat Quay 3.17, Red Hat OpenShift Container Platform 4, Logging Subsystem for Red Hat OpenShift, Red Hat Openshift Data Foundation 4.19, OpenShift Pipelines, Red Hat Openshift Data Foundation 4.2, Red Hat Openshift Data Foundation 4.18, Red Hat Openshift Data Foundation 4.2, Zero Trust Workload Identity Manager, Red Hat OpenShift Virtualization 4, Red Hat OpenShift Virtualization 4, Red Hat OpenShift AI (RHOAI), Assisted Installer for Red Hat OpenShift Container Platform 2, Red Hat Openshift Data Foundation 4.22, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift Virtualization 4, Red Hat Openshift Data Foundation 4.18, Red Hat Openshift Data Foundation 4.22, Red Hat Openshift Data Foundation 4.22, Red Hat Openshift Data Foundation 4.2, Red Hat Openshift Data Foundation 4.19, Red Hat Openshift Data Foundation 4.19, multicluster engine for Kubernetes 2.6, Red Hat OpenShift Container Platform 4.22, Red Hat Build of Podman Desktop, Red Hat OpenShift Virtualization 4, Red Hat Openshift Data Foundation 4.18, Red Hat Advanced Cluster Management for Kubernetes 2, Zero Trust Workload Identity Manager - Tech Preview, Red Hat Quay 3.15, Custom Metric Autoscaler 2.19, Red Hat Openshift Data Foundation 4.2, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Openshift Data Foundation 4.17, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat OpenShift Service Mesh 3.2, Red Hat Advanced Cluster Security 4.8, Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions, Red Hat OpenShift Cluster Manager CLI, Red Hat Openshift Data Foundation 4.19, Red Hat OpenShift Container Platform 4.2, OpenShift Developer Tools and Services, Red Hat OpenShift AI (RHOAI), Red Hat Enterprise Linux 10, Red Hat Advanced Cluster Security 4.8, Red Hat Trusted Artifact Signer 1.3, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift AI 2.25, OpenShift Pipelines, Red Hat OpenShift Container Platform 4, Red Hat Openshift Data Foundation 4.2, OpenShift Serverless, OpenShift API for Data Protection 1.4, Red Hat OpenShift Service Mesh 2.6, Red Hat Openshift Data Foundation 4.18, Red Hat OpenShift Container Platform 4, Red Hat Openshift Data Foundation 4.2, Red Hat OpenShift Container Platform 4, Red Hat Openshift Data Foundation 4.19, OpenShift Pipelines, Zero Trust Workload Identity Manager
Provider severity: HIGH
Conflicts: 2

CVE-2026-34985

LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research. From 16.1.0 to before 27.0.3 and 28.0.1, While the frontend of the media module filters files that the user should not have access to, the backend was not applying access checks and it would be possible for someone who should not have access to a file to access it if they know the filename. This vulnerability is fixed in 27.0.3 and 28.0.1.

PUBLISHED

Vendor: aces
Product: Loris
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-34984

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Versions 2.2.0 and below contain a vulnerability in runtime/template/v2/template.go where the v2 template engine removes env and expandenv from Sprig's TxtFuncMap() but leaves the getHostByName function accessible to user-controlled templates. Since ESO executes templates within the controller process, an attacker who can create or update templated ExternalSecret res

PUBLISHED

Vendor: external-secrets
Product: external-secrets
Provider severity: HIGH
Conflicts: 0