Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

Database last updated27 Oct 2026, 19:17 UTC

29critical, last 7 days 411high, last 7 days 649medium, last 7 days 145low, last 7 days

ID	Vulnerability	Rated since	Published
CVE-2026-98857 high	kernel: ipvs: bound LBLCR and LBLC cache growth	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98853 high	kernel: net: gso: limit recursive IP-in-IP segmentation	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98769 high	kernel: usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98725 high	kernel: nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98718 high	kernel: KVM: SEV: Do cache maintenance on the source VM before clearing SEV state	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98715 high	kernel: KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98639 high	kernel: KVM: riscv: Fix NACL hfence entry update order	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98621 high	kernel: net: gue: reject invalid REMCSUM offsets	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98614 high	kernel: sctp: avoid livelock while updating retransmit path	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98466 high	kernel: KVM: arm64: Transfer the hyp stack pages out of the host stage-2	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-110752 high	perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via excessive memory allocation in fragment selector	27 Oct 202601:25 UTC build	16 Oct 2026
CVE-2026-92262 high	mariadb: MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.	27 Oct 202601:25 UTC build	16 Oct 2026
CVE-2026-85746 high	mariadb: MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections	27 Oct 202601:25 UTC build	16 Oct 2026
CVE-2026-104715 high	cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass	27 Oct 202601:25 UTC build	16 Oct 2026
CVE-2026-98417 high	kernel: net: xfrm: reject unrepresentable espintcp transport headers	27 Oct 202601:25 UTC build	14 Oct 2026
CVE-2026-86476 high	gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated GstVideoMeta plane extents in gst_video_frame_map_id and video_meta_deserialize	27 Oct 202601:25 UTC build	14 Oct 2026
CVE-2026-106062 high	gimp: GIMP: heap buffer overflow in DDS loader on crafted DirectDraw Surface file	27 Oct 202601:25 UTC build	6 Oct 2026
CVE-2019-25777 high	perl-yaml: perl-yaml: Arbitrary code execution via unrestricted package variable assignment	27 Oct 202601:25 UTC build	5 Oct 2026
CVE-2017-20285 high	perl-yaml: perl-yaml: Arbitrary destructor method execution via crafted YAML document	27 Oct 202601:25 UTC build	5 Oct 2026
CVE-2026-103226 high	ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data	27 Oct 202601:25 UTC build	30 Sep 2026
CVE-2026-109411 high	samba: Access control bypass via vfs_ceph_rgw case-insensitive open	27 Oct 202601:25 UTC build
GHSA-qpg5-fx6p-8cq3 high	Using port forwarding silently enables server access to the local SSH agent	27 Oct 202601:25 UTC build
GHSA-vxj5-fg65-x765 high	net-ssh - SSH host-certificate authentication bypass — @cert-authority verifier skips valid_principals / validity window / cert type / critical options, so any CA-signed cert impersonates any host trusting that CA (CWE-295)	27 Oct 202601:25 UTC build
CVE-2026-116191 high	github.com/rclone/rclone: rclone: Arbitrary file modification via path traversal in WebDAV service	26 Oct 202619:14 UTC build	25 Oct 2026
CVE-2026-116189 high	github.com/rclone/rclone: rclone: Arbitrary code execution via self-update signature verification bypass	26 Oct 202619:14 UTC build	25 Oct 2026
CVE-2026-68476 high	kernel: ipvs: reload ip header after head reallocation	26 Oct 202619:14 UTC build	15 Aug 2026
CVE-2026-14803 high	Mojo::JSON: Mojo::JSON: Denial of Service via unbounded recursion in JSON decoder	26 Oct 202619:14 UTC build	6 Jul 2026
GHSA-h7x6-9mqf-vgmx high	Global Avo.configuration.locale mutation via params[:set_locale] (process-wide state poisoning)	26 Oct 202619:14 UTC build
GHSA-vxc9-rm8f-p56j high	Ransack has a memory-exhaustion DoS via unbounded attribute position field in query params	26 Oct 202619:14 UTC build
openSUSE-SU-2026:12261-1 high	git-bug-0.11.0-3.1 on GA media	26 Oct 202619:14 UTC build
openSUSE-SU-2026:12262-1 high	istioctl-1.31.3-1.1 on GA media	26 Oct 202619:14 UTC build
openSUSE-SU-2026:12264-1 high	okteto-3.24.1-1.1 on GA media	26 Oct 202619:14 UTC build
openSUSE-SU-2026:22158-1 high	Security update for docker	26 Oct 202619:14 UTC build
openSUSE-SU-2026:22159-1 high	Security update for mozilla-nss, MozillaFirefox	26 Oct 202619:14 UTC build
openSUSE-SU-2026:22167-1 high	Security update for the Linux Kernel	26 Oct 202619:14 UTC build
CVE-2026-116179 high	vllm: vLLM: Denial of Service via video frame limit bypass	26 Oct 202607:15 UTC build	25 Oct 2026
CVE-2026-116177 high	vllm: vllm: Denial of Service via unconstrained image decompression	26 Oct 202607:15 UTC build	25 Oct 2026
CVE-2026-116176 high	vllm: vllm: Information disclosure via SSRF in X-Request-Id header	26 Oct 202607:15 UTC build	25 Oct 2026
CVE-2026-116149 high	ImageMagick: ImageMagick: Memory corruption via crafted bzip2 compressed images	26 Oct 202607:15 UTC build	25 Oct 2026
CVE-2026-97206 high	NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contain ...	26 Oct 202601:20 UTC build	21 Oct 2026
CVE-2026-108985 high	ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-boun ...	26 Oct 202601:20 UTC build	12 Oct 2026
CVE-2026-99064 high	kernel: cipso: adjust cached option offsets when removing CIPSO	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-99056 high	kernel: strparser: make sure __strp_recv isn't running before tearing down the parser	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-99032 high	In the Linux kernel, the following vulnerability has been resolved: n ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-99030 high	In the Linux kernel, the following vulnerability has been resolved: n ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-99018 high	In the Linux kernel, the following vulnerability has been resolved: r ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-99013 high	In the Linux kernel, the following vulnerability has been resolved: B ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-99012 high	In the Linux kernel, the following vulnerability has been resolved: B ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-99006 high	In the Linux kernel, the following vulnerability has been resolved: d ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-98982 high	In the Linux kernel, the following vulnerability has been resolved: n ...	25 Oct 202619:10 UTC build	23 Oct 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.