آخرین آسیب‌پذیری‌ها

keys: Avoid the owner account dereference in named keyring lookup

keys: Check the authorization payload in process keyring searches

keys: Protect the type name while describing a key

keys: make keyring indexes independent of kernel addresses

keys: Protect the read method check against type removal

keys/trusted_keys: return immediately after TPM unseal failure

asymmetric_keys: reject trust keys without IDs

ftrace: Initialize modname and offset in print_rec()

coredump: hold RCU while releasing parked threads

Rancher meta proxy allowlist bypass leading to server-side request forgery

Krill treats a "local parent" as already-authenticated, letting a CA operator act as any child of any CA on the same server

Krill users restricted to one CA can make any other CA delegate its prefixes and publish ROAs for them via bulk import

Krill login-session tokens reuse their encryption nonce across restarts, so any user who can log in can forge an "admin" token

CVE-2026-16306

An Otter Wiki 2.20.1 before 2.26.2 Repository File Disclosure via DataTable src

An Otter Wiki before 2.26.2 Stored XSS via Math Code Block

Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller

XSS in wrensec-commons CREST framework HTTP binding via _mimeType parameter

Control Web Panel (CWP) < 1.29 OS Command Injection via valid_token

Control Web Panel (CWP) < 1.29 Blind SQL Injection via user Parameter

Control Web Panel (CWP) < 1.16 OS Command Injection via /newpass/

Control Web Panel (CWP) < 1.16 SQL Injection via access_token() API

Control Web Panel (CWP) < 1.29 OS Command Injection via restoredatabase API

Control Web Panel (CWP) < 1.29 Unauthenticated Loopback API Root Access

Control Web Panel (CWP) < 1.16 OS Command Injection via protected_directory