Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-53941 | not reported | — | No | Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF... | 2026-09-30 |
| CVE-2026-44300 | not reported | — | No | OpenCost provides cost monitoring for Kubernetes workloads and cloud costs. Prior to 1.121.0, the POST /serviceKey endpoint in pkg/costmodel... | 2026-09-30 |
| CVE-2026-54503 | medium | 4.3 | No | plone.app.textfield provides a zope.schema-style field type called RichText for storing a value with a related MIME type. Prior to 2.0.2, 3.... | 2026-09-30 |
| CVE-2026-53658 | not reported | — | No | Fabric CA is a Certificate Authority for Hyperledger Fabric. Prior to 1.5.21, when fabric-ca is configured with an LDAP backend, Client.GetU... | 2026-09-30 |
| CVE-2026-44778 | not reported | — | No | Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF... | 2026-09-30 |
| CVE-2026-55701 | not reported | — | No | The OpenTelemetry Collector Contrib repository contains components for the OpenTelemetry Collector. Prior to 0.151.0, the githubreceiver val... | 2026-09-30 |
| CVE-2026-59971 | critical | 10.0 | No | MySQL MCP Server is a Model Context Protocol server that enables secure interaction with MySQL databases. Prior to 0.4.2, setting MCP_TRANSP... | 2026-09-30 |
| CVE-2026-54168 | medium | 6.5 | No | Pipelines-as-Code is a CI/CD system that lets users define Tekton pipelines in source code repositories. Prior to 0.37.8, 0.39.6, 0.42.1, an... | 2026-09-30 |
| CVE-2026-54167 | high | 8.2 | No | Pipelines-as-Code is a CI/CD system that lets users define Tekton pipelines in source code repositories. Prior to 0.37.8, 0.39.6, 0.42.1, an... | 2026-09-30 |
| CVE-2026-53966 | not reported | — | No | XWiki Platform is a generic wiki platform. From 13.4-rc-1 until 16.10.17, 17.4.10, 17.10.4, and 18.1.0-rc-1, the Live Data edit REST API all... | 2026-09-30 |
| CVE-2026-52724 | not reported | — | No | Kuma is a modern Envoy-based service mesh that can run on every cloud across both Kubernetes and VMs. Prior to 2.7.26, 2.9.16, 2.11.14, 2.12... | 2026-09-30 |
| CVE-2026-50166 | not reported | — | No | Kuma is a modern Envoy-based service mesh that can run on every cloud across both Kubernetes and VMs. Prior to 2.7.26, 2.9.16, 2.11.14, 2.12... | 2026-09-30 |
| CVE-2026-48722 | medium | 5.5 | No | Nextflow is a DSL for data-driven computational pipelines. From 25.09.2-edge until 25.10.6 and 26.04.3, nextflow auth login writes Seqera Pl... | 2026-09-30 |
| CVE-2026-62280 | medium | 6.1 | No | Open Access Management (OpenAM) is an access management solution. From 13.0.0 until 16.1.2, the OAuth2 authorize endpoint's display=wap cons... | 2026-09-30 |
| CVE-2026-45794 | not reported | — | No | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the anonymous Push Notification SNS callback handled by S... | 2026-09-30 |
| CVE-2026-45052 | not reported | — | No | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the Liberty Web Services SOAP receiver permits unauthenti... | 2026-09-30 |
| CVE-2026-53719 | medium | 6.5 | No | Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and... | 2026-09-30 |
| CVE-2026-53716 | medium | 6.5 | No | Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and... | 2026-09-30 |
| CVE-2026-53714 | high | 7.4 | No | Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and... | 2026-09-30 |
| CVE-2026-53713 | critical | 9.1 | No | Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and... | 2026-09-30 |