Schwachstellen

Kritische Schwachstellen, die das Gate schon kennt.

Alle sechs Stunden holt Attestkeep die Trivy Vulnerability Database, dieselbe, die der Scanner in Ihrem Cluster liest. Das sind die Einträge, die die Database diese Woche als kritisch eingestuft hat, und wann. Nicht, wann die Nachricht kam: wann das Gate es wusste.

Database zuletzt aktualisiert27. Okt. 2026, 19:17 UTC

29kritisch, letzte 7 Tage 411hoch, letzte 7 Tage 649mittel, letzte 7 Tage 145niedrig, letzte 7 Tage

ID	Schwachstelle	Eingestuft seit	Veröffentlicht
CVE-2026-98857 hoch	kernel: ipvs: bound LBLCR and LBLC cache growth	27. Okt. 2026Build 01:25 UTC	18. Okt. 2026
CVE-2026-98853 hoch	kernel: net: gso: limit recursive IP-in-IP segmentation	27. Okt. 2026Build 01:25 UTC	18. Okt. 2026
CVE-2026-98769 hoch	kernel: usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd	27. Okt. 2026Build 01:25 UTC	18. Okt. 2026
CVE-2026-98725 hoch	kernel: nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()	27. Okt. 2026Build 01:25 UTC	18. Okt. 2026
CVE-2026-98718 hoch	kernel: KVM: SEV: Do cache maintenance on the source VM before clearing SEV state	27. Okt. 2026Build 01:25 UTC	18. Okt. 2026
CVE-2026-98715 hoch	kernel: KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN	27. Okt. 2026Build 01:25 UTC	18. Okt. 2026
CVE-2026-98639 hoch	kernel: KVM: riscv: Fix NACL hfence entry update order	27. Okt. 2026Build 01:25 UTC	18. Okt. 2026
CVE-2026-98621 hoch	kernel: net: gue: reject invalid REMCSUM offsets	27. Okt. 2026Build 01:25 UTC	18. Okt. 2026
CVE-2026-98614 hoch	kernel: sctp: avoid livelock while updating retransmit path	27. Okt. 2026Build 01:25 UTC	18. Okt. 2026
CVE-2026-98466 hoch	kernel: KVM: arm64: Transfer the hyp stack pages out of the host stage-2	27. Okt. 2026Build 01:25 UTC	18. Okt. 2026
CVE-2026-110752 hoch	perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via excessive memory allocation in fragment selector	27. Okt. 2026Build 01:25 UTC	16. Okt. 2026
CVE-2026-92262 hoch	mariadb: MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.	27. Okt. 2026Build 01:25 UTC	16. Okt. 2026
CVE-2026-85746 hoch	mariadb: MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections	27. Okt. 2026Build 01:25 UTC	16. Okt. 2026
CVE-2026-104715 hoch	cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass	27. Okt. 2026Build 01:25 UTC	16. Okt. 2026
CVE-2026-98417 hoch	kernel: net: xfrm: reject unrepresentable espintcp transport headers	27. Okt. 2026Build 01:25 UTC	14. Okt. 2026
CVE-2026-86476 hoch	gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated GstVideoMeta plane extents in gst_video_frame_map_id and video_meta_deserialize	27. Okt. 2026Build 01:25 UTC	14. Okt. 2026
CVE-2026-106062 hoch	gimp: GIMP: heap buffer overflow in DDS loader on crafted DirectDraw Surface file	27. Okt. 2026Build 01:25 UTC	6. Okt. 2026
CVE-2019-25777 hoch	perl-yaml: perl-yaml: Arbitrary code execution via unrestricted package variable assignment	27. Okt. 2026Build 01:25 UTC	5. Okt. 2026
CVE-2017-20285 hoch	perl-yaml: perl-yaml: Arbitrary destructor method execution via crafted YAML document	27. Okt. 2026Build 01:25 UTC	5. Okt. 2026
CVE-2026-103226 hoch	ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data	27. Okt. 2026Build 01:25 UTC	30. Sept. 2026
CVE-2026-109411 hoch	samba: Access control bypass via vfs_ceph_rgw case-insensitive open	27. Okt. 2026Build 01:25 UTC
GHSA-qpg5-fx6p-8cq3 hoch	Using port forwarding silently enables server access to the local SSH agent	27. Okt. 2026Build 01:25 UTC
GHSA-vxj5-fg65-x765 hoch	net-ssh - SSH host-certificate authentication bypass — @cert-authority verifier skips valid_principals / validity window / cert type / critical options, so any CA-signed cert impersonates any host trusting that CA (CWE-295)	27. Okt. 2026Build 01:25 UTC
CVE-2026-116191 hoch	github.com/rclone/rclone: rclone: Arbitrary file modification via path traversal in WebDAV service	26. Okt. 2026Build 19:14 UTC	25. Okt. 2026
CVE-2026-116189 hoch	github.com/rclone/rclone: rclone: Arbitrary code execution via self-update signature verification bypass	26. Okt. 2026Build 19:14 UTC	25. Okt. 2026
CVE-2026-68476 hoch	kernel: ipvs: reload ip header after head reallocation	26. Okt. 2026Build 19:14 UTC	15. Aug. 2026
CVE-2026-14803 hoch	Mojo::JSON: Mojo::JSON: Denial of Service via unbounded recursion in JSON decoder	26. Okt. 2026Build 19:14 UTC	6. Juli 2026
GHSA-h7x6-9mqf-vgmx hoch	Global Avo.configuration.locale mutation via params[:set_locale] (process-wide state poisoning)	26. Okt. 2026Build 19:14 UTC
GHSA-vxc9-rm8f-p56j hoch	Ransack has a memory-exhaustion DoS via unbounded attribute position field in query params	26. Okt. 2026Build 19:14 UTC
openSUSE-SU-2026:12261-1 hoch	git-bug-0.11.0-3.1 on GA media	26. Okt. 2026Build 19:14 UTC
openSUSE-SU-2026:12262-1 hoch	istioctl-1.31.3-1.1 on GA media	26. Okt. 2026Build 19:14 UTC
openSUSE-SU-2026:12264-1 hoch	okteto-3.24.1-1.1 on GA media	26. Okt. 2026Build 19:14 UTC
openSUSE-SU-2026:22158-1 hoch	Security update for docker	26. Okt. 2026Build 19:14 UTC
openSUSE-SU-2026:22159-1 hoch	Security update for mozilla-nss, MozillaFirefox	26. Okt. 2026Build 19:14 UTC
openSUSE-SU-2026:22167-1 hoch	Security update for the Linux Kernel	26. Okt. 2026Build 19:14 UTC
CVE-2026-116179 hoch	vllm: vLLM: Denial of Service via video frame limit bypass	26. Okt. 2026Build 07:15 UTC	25. Okt. 2026
CVE-2026-116177 hoch	vllm: vllm: Denial of Service via unconstrained image decompression	26. Okt. 2026Build 07:15 UTC	25. Okt. 2026
CVE-2026-116176 hoch	vllm: vllm: Information disclosure via SSRF in X-Request-Id header	26. Okt. 2026Build 07:15 UTC	25. Okt. 2026
CVE-2026-116149 hoch	ImageMagick: ImageMagick: Memory corruption via crafted bzip2 compressed images	26. Okt. 2026Build 07:15 UTC	25. Okt. 2026
CVE-2026-97206 hoch	NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contain ...	26. Okt. 2026Build 01:20 UTC	21. Okt. 2026
CVE-2026-108985 hoch	ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-boun ...	26. Okt. 2026Build 01:20 UTC	12. Okt. 2026
CVE-2026-99064 hoch	kernel: cipso: adjust cached option offsets when removing CIPSO	25. Okt. 2026Build 19:10 UTC	23. Okt. 2026
CVE-2026-99056 hoch	kernel: strparser: make sure __strp_recv isn't running before tearing down the parser	25. Okt. 2026Build 19:10 UTC	23. Okt. 2026
CVE-2026-99032 hoch	In the Linux kernel, the following vulnerability has been resolved: n ...	25. Okt. 2026Build 19:10 UTC	23. Okt. 2026
CVE-2026-99030 hoch	In the Linux kernel, the following vulnerability has been resolved: n ...	25. Okt. 2026Build 19:10 UTC	23. Okt. 2026
CVE-2026-99018 hoch	In the Linux kernel, the following vulnerability has been resolved: r ...	25. Okt. 2026Build 19:10 UTC	23. Okt. 2026
CVE-2026-99013 hoch	In the Linux kernel, the following vulnerability has been resolved: B ...	25. Okt. 2026Build 19:10 UTC	23. Okt. 2026
CVE-2026-99012 hoch	In the Linux kernel, the following vulnerability has been resolved: B ...	25. Okt. 2026Build 19:10 UTC	23. Okt. 2026
CVE-2026-99006 hoch	In the Linux kernel, the following vulnerability has been resolved: d ...	25. Okt. 2026Build 19:10 UTC	23. Okt. 2026
CVE-2026-98982 hoch	In the Linux kernel, the following vulnerability has been resolved: n ...	25. Okt. 2026Build 19:10 UTC	23. Okt. 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.