Vulnerabilidades

Vulnerabilidades críticas que el gate ya conoce.

Cada seis horas Attestkeep descarga la Trivy vulnerability database, la misma que el scanner lee dentro de su cluster. Estas son las entradas que la database calificó como críticas esta semana, y cuándo. No cuándo salió la noticia: cuándo lo supo el gate.

IDVulnerabilidadCalificada desdePublicada
CVE-2026-98857
alta
kernel: ipvs: bound LBLCR and LBLC cache growthbuild de las 01:25 UTC
CVE-2026-98853
alta
kernel: net: gso: limit recursive IP-in-IP segmentationbuild de las 01:25 UTC
CVE-2026-98769
alta
kernel: usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmdbuild de las 01:25 UTC
CVE-2026-98725
alta
kernel: nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()build de las 01:25 UTC
CVE-2026-98718
alta
kernel: KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV statebuild de las 01:25 UTC
CVE-2026-98715
alta
kernel: KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUNbuild de las 01:25 UTC
CVE-2026-98639
alta
kernel: KVM: riscv: Fix NACL hfence entry update orderbuild de las 01:25 UTC
CVE-2026-98621
alta
kernel: net: gue: reject invalid REMCSUM offsetsbuild de las 01:25 UTC
CVE-2026-98614
alta
kernel: sctp: avoid livelock while updating retransmit pathbuild de las 01:25 UTC
CVE-2026-98466
alta
kernel: KVM: arm64: Transfer the hyp stack pages out of the host stage-2build de las 01:25 UTC
CVE-2026-110752
alta
perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via excessive memory allocation in fragment selectorbuild de las 01:25 UTC
CVE-2026-92262
alta
mariadb: MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.build de las 01:25 UTC
CVE-2026-85746
alta
mariadb: MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollectionsbuild de las 01:25 UTC
CVE-2026-104715
alta
cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypassbuild de las 01:25 UTC
CVE-2026-98417
alta
kernel: net: xfrm: reject unrepresentable espintcp transport headersbuild de las 01:25 UTC
CVE-2026-86476
alta
gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated GstVideoMeta plane extents in gst_video_frame_map_id and video_meta_deserializebuild de las 01:25 UTC
CVE-2026-106062
alta
gimp: GIMP: heap buffer overflow in DDS loader on crafted DirectDraw Surface filebuild de las 01:25 UTC
CVE-2019-25777
alta
perl-yaml: perl-yaml: Arbitrary code execution via unrestricted package variable assignmentbuild de las 01:25 UTC
CVE-2017-20285
alta
perl-yaml: perl-yaml: Arbitrary destructor method execution via crafted YAML documentbuild de las 01:25 UTC
CVE-2026-103226
alta
ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font databuild de las 01:25 UTC
CVE-2026-109411
alta
samba: Access control bypass via vfs_ceph_rgw case-insensitive openbuild de las 01:25 UTC
GHSA-qpg5-fx6p-8cq3
alta
Using port forwarding silently enables server access to the local SSH agentbuild de las 01:25 UTC
GHSA-vxj5-fg65-x765
alta
net-ssh - SSH host-certificate authentication bypass — @cert-authority verifier skips valid_principals / validity window / cert type / critical options, so any CA-signed cert impersonates any host trusting that CA (CWE-295)build de las 01:25 UTC
CVE-2026-116191
alta
github.com/rclone/rclone: rclone: Arbitrary file modification via path traversal in WebDAV servicebuild de las 19:14 UTC
CVE-2026-116189
alta
github.com/rclone/rclone: rclone: Arbitrary code execution via self-update signature verification bypassbuild de las 19:14 UTC
CVE-2026-68476
alta
kernel: ipvs: reload ip header after head reallocationbuild de las 19:14 UTC
CVE-2026-14803
alta
Mojo::JSON: Mojo::JSON: Denial of Service via unbounded recursion in JSON decoderbuild de las 19:14 UTC
GHSA-h7x6-9mqf-vgmx
alta
Global Avo.configuration.locale mutation via params[:set_locale] (process-wide state poisoning)build de las 19:14 UTC
GHSA-vxc9-rm8f-p56j
alta
Ransack has a memory-exhaustion DoS via unbounded attribute position field in query paramsbuild de las 19:14 UTC
openSUSE-SU-2026:12261-1
alta
git-bug-0.11.0-3.1 on GA mediabuild de las 19:14 UTC
openSUSE-SU-2026:12262-1
alta
istioctl-1.31.3-1.1 on GA mediabuild de las 19:14 UTC
openSUSE-SU-2026:12264-1
alta
okteto-3.24.1-1.1 on GA mediabuild de las 19:14 UTC
openSUSE-SU-2026:22158-1
alta
Security update for dockerbuild de las 19:14 UTC
openSUSE-SU-2026:22159-1
alta
Security update for mozilla-nss, MozillaFirefoxbuild de las 19:14 UTC
openSUSE-SU-2026:22167-1
alta
Security update for the Linux Kernelbuild de las 19:14 UTC
CVE-2026-116179
alta
vllm: vLLM: Denial of Service via video frame limit bypassbuild de las 07:15 UTC
CVE-2026-116177
alta
vllm: vllm: Denial of Service via unconstrained image decompressionbuild de las 07:15 UTC
CVE-2026-116176
alta
vllm: vllm: Information disclosure via SSRF in X-Request-Id headerbuild de las 07:15 UTC
CVE-2026-116149
alta
ImageMagick: ImageMagick: Memory corruption via crafted bzip2 compressed imagesbuild de las 07:15 UTC
CVE-2026-97206
alta
NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contain ...build de las 01:20 UTC
CVE-2026-108985
alta
ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-boun ...build de las 01:20 UTC
CVE-2026-99064
alta
kernel: cipso: adjust cached option offsets when removing CIPSObuild de las 19:10 UTC
CVE-2026-99056
alta
kernel: strparser: make sure __strp_recv isn't running before tearing down the parserbuild de las 19:10 UTC
CVE-2026-99032
alta
In the Linux kernel, the following vulnerability has been resolved: n ...build de las 19:10 UTC
CVE-2026-99030
alta
In the Linux kernel, the following vulnerability has been resolved: n ...build de las 19:10 UTC
CVE-2026-99018
alta
In the Linux kernel, the following vulnerability has been resolved: r ...build de las 19:10 UTC
CVE-2026-99013
alta
In the Linux kernel, the following vulnerability has been resolved: B ...build de las 19:10 UTC
CVE-2026-99012
alta
In the Linux kernel, the following vulnerability has been resolved: B ...build de las 19:10 UTC
CVE-2026-99006
alta
In the Linux kernel, the following vulnerability has been resolved: d ...build de las 19:10 UTC
CVE-2026-98982
alta
In the Linux kernel, the following vulnerability has been resolved: n ...build de las 19:10 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.