Attestkeep
Sprache: Deutsch
Loslegen
Schwachstellen

Kritische Schwachstellen, die das Gate schon kennt.

Alle sechs Stunden holt Attestkeep die Trivy Vulnerability Database, dieselbe, die der Scanner in Ihrem Cluster liest. Das sind die Einträge, die die Database diese Woche als kritisch eingestuft hat, und wann. Nicht, wann die Nachricht kam: wann das Gate es wusste.

Database zuletzt aktualisiert27. Okt. 2026, 13:12 UTC
23kritisch, letzte 7 Tage298hoch, letzte 7 Tage633mittel, letzte 7 Tage139niedrig, letzte 7 Tage
IDSchwachstelleEingestuft seitVeröffentlicht
CVE-2026-116260
hoch		libimobiledevice: libimobiledevice: Denial of Service via double free in service_receiveBuild 07:13 UTC
CVE-2026-104849
hoch		tinypool: Tinypool: Prototype Pollution Gadget to RCE in run() optionsBuild 07:13 UTC
CVE-2024-8928
hoch		Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-8928: php: Erroneous pBuild 07:13 UTC
CVE-2026-116124
hoch		libgsf: libgsf: Arbitrary code execution via heap-based buffer overflow in OLE2 parserBuild 01:25 UTC
CVE-2026-105483
hoch		nodejs: nodejs: TLS certificate hostname bypass via fullwidth-digit IP hostnamesBuild 01:25 UTC
CVE-2026-55888
hoch		xdg-desktop-portal: xdg-desktop-portal: Unauthorized host file access via unvalidated FileChooser filenamesBuild 01:25 UTC
CVE-2026-110354
hoch		haproxy: haproxy: Denial of Service via specially crafted HTTP/1.1 chunked requestBuild 01:25 UTC
CVE-2026-110353
hoch		haproxy: HAProxy: Denial of Service via truncated HTTP/2 PING frameBuild 01:25 UTC
CVE-2026-98869
hoch		kernel: bpf: Infer zext_dst based on static register liveness analysisBuild 01:25 UTC
CVE-2023-7356
hoch		kernel: Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUIDBuild 01:25 UTC
CVE-2026-111943
hoch		crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificatesBuild 01:25 UTC
CVE-2026-113812
hoch		perl-mozilla-ca: Mozilla::CA: TLS server impersonation via compromised intermediate certificatesBuild 01:25 UTC
CVE-2025-71436
hoch		raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handlingBuild 01:25 UTC
CVE-2026-112396
hoch		pillow: pillow: arbitrary code execution via heap use-after-free during TIFF encodingBuild 01:25 UTC
CVE-2026-112258
hoch		gimp: gimp: use-after-free in XCF loader via PROP_LINKED and PROP_SELECTION on channelsBuild 01:25 UTC
CVE-2026-112395
hoch		pillow: pillow: Information disclosure via crafted tiled TIFF imageBuild 01:25 UTC
CVE-2026-112394
hoch		pillow: pillow: Information disclosure via out-of-bounds read in raw decodersBuild 01:25 UTC
CVE-2026-98857
hoch		kernel: ipvs: bound LBLCR and LBLC cache growthBuild 01:25 UTC
CVE-2026-98853
hoch		kernel: net: gso: limit recursive IP-in-IP segmentationBuild 01:25 UTC
CVE-2026-98769
hoch		kernel: usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmdBuild 01:25 UTC
CVE-2026-98725
hoch		kernel: nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()Build 01:25 UTC
CVE-2026-98718
hoch		kernel: KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV stateBuild 01:25 UTC
CVE-2026-98715
hoch		kernel: KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUNBuild 01:25 UTC
CVE-2026-98639
hoch		kernel: KVM: riscv: Fix NACL hfence entry update orderBuild 01:25 UTC
CVE-2026-98621
hoch		kernel: net: gue: reject invalid REMCSUM offsetsBuild 01:25 UTC
CVE-2026-98614
hoch		kernel: sctp: avoid livelock while updating retransmit pathBuild 01:25 UTC
CVE-2026-98466
hoch		kernel: KVM: arm64: Transfer the hyp stack pages out of the host stage-2Build 01:25 UTC
CVE-2026-110752
hoch		perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via excessive memory allocation in fragment selectorBuild 01:25 UTC
CVE-2026-92262
hoch		mariadb: MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.Build 01:25 UTC
CVE-2026-85746
hoch		mariadb: MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollectionsBuild 01:25 UTC
CVE-2026-104715
hoch		cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypassBuild 01:25 UTC
CVE-2026-98417
hoch		kernel: net: xfrm: reject unrepresentable espintcp transport headersBuild 01:25 UTC
CVE-2026-86476
hoch		gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated GstVideoMeta plane extents in gst_video_frame_map_id and video_meta_deserializeBuild 01:25 UTC
CVE-2026-106062
hoch		gimp: GIMP: heap buffer overflow in DDS loader on crafted DirectDraw Surface fileBuild 01:25 UTC
CVE-2019-25777
hoch		perl-yaml: perl-yaml: Arbitrary code execution via unrestricted package variable assignmentBuild 01:25 UTC
CVE-2017-20285
hoch		perl-yaml: perl-yaml: Arbitrary destructor method execution via crafted YAML documentBuild 01:25 UTC
CVE-2026-103226
hoch		ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font dataBuild 01:25 UTC
CVE-2026-109411
hoch		samba: Access control bypass via vfs_ceph_rgw case-insensitive openBuild 01:25 UTC
GHSA-qpg5-fx6p-8cq3
hoch		Using port forwarding silently enables server access to the local SSH agentBuild 01:25 UTC
GHSA-vxj5-fg65-x765
hoch		net-ssh - SSH host-certificate authentication bypass — @cert-authority verifier skips valid_principals / validity window / cert type / critical options, so any CA-signed cert impersonates any host trusting that CA (CWE-295)Build 01:25 UTC
CVE-2026-116191
hoch		github.com/rclone/rclone: rclone: Arbitrary file modification via path traversal in WebDAV serviceBuild 19:14 UTC
CVE-2026-116189
hoch		github.com/rclone/rclone: rclone: Arbitrary code execution via self-update signature verification bypassBuild 19:14 UTC
CVE-2026-68476
hoch		kernel: ipvs: reload ip header after head reallocationBuild 19:14 UTC
CVE-2026-14803
hoch		Mojo::JSON: Mojo::JSON: Denial of Service via unbounded recursion in JSON decoderBuild 19:14 UTC
GHSA-h7x6-9mqf-vgmx
hoch		Global Avo.configuration.locale mutation via params[:set_locale] (process-wide state poisoning)Build 19:14 UTC
GHSA-vxc9-rm8f-p56j
hoch		Ransack has a memory-exhaustion DoS via unbounded attribute position field in query paramsBuild 19:14 UTC
openSUSE-SU-2026:12261-1
hoch		git-bug-0.11.0-3.1 on GA mediaBuild 19:14 UTC
openSUSE-SU-2026:12262-1
hoch		istioctl-1.31.3-1.1 on GA mediaBuild 19:14 UTC
openSUSE-SU-2026:12264-1
hoch		okteto-3.24.1-1.1 on GA mediaBuild 19:14 UTC
openSUSE-SU-2026:22158-1
hoch		Security update for dockerBuild 19:14 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.