Articles
Newsflash
14 Oct 2026 DevOps
OpenShift: OS command injection in NooBaa component

In the NooBaa component for OpenShift earlier versions a high severity vulnerability CVE-2026-86330 was detected. This vulnerability allows attackers to execute arbitrary OS commands. To address this issue, users should upgrade OpenShift to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-86330.

Read more
Developer Tools
14 Oct 2026 DevOps
Rancher: Cross-tenant authorization issue in Fleet

In Fleet component for Rancher versions before 0.12.19 a high severity vulnerability CVE-2026-93538 was detected. This vulnerability allows an attacker to apply unauthorized labels to a cluster object during registration. To address this issue, users should upgrade Fleet to version 0.12.19 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-93538.

Read more
Developer Tools
14 Oct 2026 DevOps
Kubernetes: Path Traversal Vulnerability in kubectl cp on Windows

In affected versions of Kubernetes a medium severity vulnerability CVE-2026-19444 was detected. This vulnerability allows an attacker to write files to arbitrary paths on the user’s machine. To address this issue, users should upgrade Kubernetes to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-19444.

Read more
Developer Tools
14 Oct 2026 DevOps
Apache ActiveMQ: Unsafe Reflection Vulnerability

In Apache ActiveMQ versions before 2.34.0 a high severity vulnerability CVE-2026-101292 was detected. This vulnerability allows a remote attacker to run arbitrary shell commands. To address this issue, users should upgrade Apache ActiveMQ to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-101292.

Read more
Developer Tools
14 Oct 2026 Infrastructure and Network
Keycloak: Vulnerability in Micrometer user-event metrics listener

In Keycloak affected versions a low severity vulnerability CVE-2026-101333 was detected. This vulnerability allows an unauthenticated attacker to cause excessive memory consumption, potentially leading to a denial of service. To address this issue, users should upgrade Keycloak to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-101333.

Read more
Security
13 Oct 2026 Business and Enterprise Solutions
Joomla: CSRF in image upload in Event Gallery

In Event Gallery component for Joomla versions 6.5.0 and earlier a medium severity vulnerability CVE-2026-100747 was detected. This vulnerability allows a third-party site to upload files to an event and overwrite existing files. To address this issue, users should upgrade Event Gallery to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-100747.

Read more
CMS
Case Studies