Attestkeep
Sprache: Deutsch
Loslegen
Schwachstellen

Kritische Schwachstellen, die das Gate schon kennt.

Alle sechs Stunden holt Attestkeep die Trivy Vulnerability Database, dieselbe, die der Scanner in Ihrem Cluster liest. Das sind die Einträge, die die Database diese Woche als kritisch eingestuft hat, und wann. Nicht, wann die Nachricht kam: wann das Gate es wusste.

Database zuletzt aktualisiert27. Okt. 2026, 19:17 UTC
29kritisch, letzte 7 Tage411hoch, letzte 7 Tage649mittel, letzte 7 Tage145niedrig, letzte 7 Tage
IDSchwachstelleEingestuft seitVeröffentlicht
CVE-2026-98904
mittel		kernel: mailbox: imx: Use devm_pm_runtime_enable()Build 19:17 UTC
CVE-2026-114610
mittel		fpdf2 is a PDF creation library for Python. From 2.5.0 until 2.8.8, fp ...Build 19:17 UTC
CVE-2026-114609
mittel		fpdf2 is a PDF creation library for Python. Prior to 2.8.8, fpdf2's sh ...Build 19:17 UTC
CVE-2026-108360
mittel		PhpSpreadsheet: SSRF whitelist bypass via unre-validated HTTP redirect in Drawing::setPath external image loadingBuild 19:17 UTC
CVE-2026-114501
mittel		pillow: Pillow: Information disclosure via improper memory alignment during Arrow exportBuild 19:17 UTC
CVE-2026-96643
mittel		pillow: pillow: Denial of Service via repeated EXIF headersBuild 19:17 UTC
CVE-2026-112897
mittel		pillow: pillow: Information disclosure via uninitialized buffer in TIFF decodingBuild 19:17 UTC
CVE-2026-106414
mittel		chromium-browser: Improper input validation in MobileBuild 19:17 UTC
CVE-2026-103288
mittel		Ghost: Authorization Bypass in Comment Like FeatureBuild 19:17 UTC
CVE-2026-94545
mittel		Satori-generated SVG has improper escapingBuild 19:17 UTC
CVE-2026-98148
mittel		kernel: drm/gud: validate GUD_ROTATION_0 is present in supported rotationsBuild 19:17 UTC
CVE-2026-98147
mittel		kernel: printk: Don't WARN on kthread_run failureBuild 19:17 UTC
CVE-2026-60083
mittel		SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace filesBuild 19:17 UTC
CVE-2026-72207
mittel		kernel: ntfs: not change 0-byte $DATA attribute to non-residentBuild 19:17 UTC
CVE-2026-64601
mittel		kernel: ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on each resubmissionBuild 19:17 UTC
CVE-2026-64580
mittel		kernel: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()Build 19:17 UTC
CVE-2024-8928
mittel		Amazon Linux 2023 - ALAS2023-2025-845: Medium priority package update for php8.1Build 19:17 UTC
SUSE-SU-2026:4906-1
mittel		Security update for krb5Build 19:17 UTC
openSUSE-SU-2026:12267-1
mittel		amazon-cloudwatch-agent-1.300073.2-2.1 on GA mediaBuild 19:17 UTC
openSUSE-SU-2026:12269-1
mittel		dlib-devel-20.0.1-1.1 on GA mediaBuild 19:17 UTC
openSUSE-SU-2026:12270-1
mittel		flannel-0.28.10-1.1 on GA mediaBuild 19:17 UTC
openSUSE-SU-2026:12272-1
mittel		liblldpctl4-1.0.23-1.1 on GA mediaBuild 19:17 UTC
openSUSE-SU-2026:12273-1
mittel		benchdnn-3.14-1.1 on GA mediaBuild 19:17 UTC
openSUSE-SU-2026:12274-1
mittel		libonnxruntime1-1.31.0-1.1 on GA mediaBuild 19:17 UTC
openSUSE-SU-2026:12275-1
mittel		perl-Plack-1.0057-1.1 on GA mediaBuild 19:17 UTC
openSUSE-SU-2026:12276-1
mittel		perl-Starman-0.4019-1.1 on GA mediaBuild 19:17 UTC
openSUSE-SU-2026:12277-1
mittel		python313-djangorestframework-3.18.2-1.1 on GA mediaBuild 19:17 UTC
openSUSE-SU-2026:12278-1
mittel		python313-fpdf2-2.8.9-2.1 on GA mediaBuild 19:17 UTC
openSUSE-SU-2026:12279-1
mittel		python313-langgraph-sdk-0.4.9-1.1 on GA mediaBuild 19:17 UTC
openSUSE-SU-2026:12280-1
mittel		python313-nltk-3.10.4-1.1 on GA mediaBuild 19:17 UTC
openSUSE-SU-2026:12281-1
mittel		traefik-3.7.16-1.1 on GA mediaBuild 19:17 UTC
CVE-2026-107080
mittel		openjpeg2: openjpeg2: Denial of Service via out-of-bounds memory access in opj_dwt_encode_and_deinterleave_vBuild 07:13 UTC
CVE-2026-92171
mittel		infinispan-operator: Infinispan Operator: Sensitive information disclosure due pod args storeBuild 07:13 UTC
CVE-2026-116497
mittel		gssproxy: gssproxy: NULL pointer dereference in GSSX_INIT_SEC_CONTEXT crashes daemonBuild 07:13 UTC
CVE-2026-116262
mittel		libimobiledevice: libimobiledevice: Denial of Service via heap-based buffer overflow in Web InspectorBuild 07:13 UTC
CVE-2026-115718
mittel		builder: Frappe Builder: Unauthorized resource consumption via missing authorization in improve_promptBuild 07:13 UTC
CVE-2026-115717
mittel		builder: builder: Information disclosure via Server-Side Request Forgery in convert_to_webpBuild 07:13 UTC
CVE-2026-99082
mittel		kernel: KVM: x86: Use active memslots for the per-vCPU MMIO cacheBuild 07:13 UTC
CVE-2026-99081
mittel		kernel: bnxt_en: fix DMA mapping length for padded small packetsBuild 07:13 UTC
CVE-2026-99079
mittel		kernel: net/mlx5e: Prevent stale XSK buffer release on refill retryBuild 07:13 UTC
CVE-2026-99074
mittel		kernel: ipv4: stop PMTU walk when nexthop group shrinksBuild 07:13 UTC
CVE-2026-99073
mittel		kernel: ipv4: stop exception dump when nexthop group shrinksBuild 07:13 UTC
CVE-2026-98903
mittel		kernel: mailbox: imx: Add a channel shutdown fieldBuild 07:13 UTC
CVE-2026-98902
mittel		kernel: md/raid5: let stripe batch bm_seq comparison wrap-safeBuild 07:13 UTC
CVE-2026-98900
mittel		kernel: xen/gntalloc: validate grant count before allocationBuild 07:13 UTC
CVE-2026-98898
mittel		kernel: drm/amd/pm/si: Don't schedule thermal work when queue isn't initializedBuild 07:13 UTC
CVE-2026-98897
mittel		kernel: ksmbd: don't hold ci->m_lock while waiting for a lease break ackBuild 07:13 UTC
CVE-2026-98896
mittel		kernel: thunderbolt: Keep the domain reference while processing hotplugBuild 07:13 UTC
CVE-2026-98895
mittel		kernel: net/mlx5: HWS, Handle destroying table that has a miss tableBuild 07:13 UTC
CVE-2026-98894
mittel		kernel: drm/amd/ras: reset CPER ring on corrupt entry sizeBuild 07:13 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.