ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 274/275 feeds/APIs · 469/469 docs · 8/9 advisories · checked 12:06 UTC Customize Public modeDiscuss ChangeIntel on Discord
CVE-2026-84445ImportantRevised 4 Nov

gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers

MSRC advisory NVD CVE.org

Assessment

Severity
Important
CVSS base score
Not published
Impact
Not stated
Exploitation detected
Unknown: not stated by MSRC
Exploitability
Not assessed
Publicly disclosed
Unknown: not stated by MSRC
EPSS · 30-day forecast
No EPSS score collected
Customer action
Required: follow the MSRC remediation guidance
More details
Public detection template
No Nuclei template is listed in the current collected catalog
Component
Mariner
Weakness
CWE-129: Improper Validation of Array Index
Issued by
GitHub_M
Published
16 Sep 2026 · September 2026
Last revised
4 Nov 2026Information published.

Updates that fix it

0 KBs

No KB listed

No KB update is listed in the collected MSRC record. Check the MSRC advisory for product releases and other remedies.

Affected products

Open Source Software
47 affected products
  • azl3 azcopy 10.25.1-8 on Azure Linux 3.0
  • azl3 azurelinux-image-tools 1.6.0-2 on Azure Linux 3.0
  • azl3 cert-manager 1.12.15-12 on Azure Linux 3.0
  • azl3 cf-cli 8.7.11-8 on Azure Linux 3.0
  • azl3 cloud-provider-kubevirt 0.5.1-7 on Azure Linux 3.0
  • azl3 containerd2 2.2.4-8 on Azure Linux 3.0
  • azl3 containerd2 2.3.4-1 on Azure Linux 3.0
  • azl3 containerized-data-importer 1.62.0-7 on Azure Linux 3.0
  • azl3 coredns 1.11.4-20 on Azure Linux 3.0
  • azl3 cri-tools 1.32.0-10 on Azure Linux 3.0
  • azl3 cri-tools 1.32.0-7 on Azure Linux 3.0
  • azl3 cri-tools 1.32.0-8 on Azure Linux 3.0
  • azl3 docker-buildx 0.14.0-16 on Azure Linux 3.0
  • azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0
  • azl3 docker-buildx 0.14.0-19 on Azure Linux 3.0
  • azl3 docker-compose 2.27.0-13 on Azure Linux 3.0
  • azl3 docker-compose 2.27.0-14 on Azure Linux 3.0
  • azl3 etcd 3.5.33-1 on Azure Linux 3.0
  • azl3 flannel 0.24.2-31 on Azure Linux 3.0
  • azl3 flannel 0.24.2-32 on Azure Linux 3.0
  • azl3 gh 2.98.0-1 on Azure Linux 3.0
  • azl3 influxdb 2.7.5-20 on Azure Linux 3.0
  • azl3 kata-containers 3.32.0.kata0-5 on Azure Linux 3.0
  • azl3 kata-containers-cc 3.15.0.aks0-20 on Azure Linux 3.0
  • azl3 keda 2.14.1-18 on Azure Linux 3.0
  • azl3 keda 2.14.1-19 on Azure Linux 3.0
  • azl3 kube-vip-cloud-provider 0.0.10-8 on Azure Linux 3.0
  • azl3 kubernetes 1.30.10-29 on Azure Linux 3.0
  • azl3 kubernetes 1.30.10-30 on Azure Linux 3.0
  • azl3 kubevirt 1.8.4-1 on Azure Linux 3.0
  • azl3 kubevirt 1.8.4-2 on Azure Linux 3.0
  • azl3 moby-containerd-cc 1.7.7-16 on Azure Linux 3.0
  • azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0
  • azl3 moby-containerd-cc 1.7.7-19 on Azure Linux 3.0
  • azl3 moby-engine 25.0.3-20 on Azure Linux 3.0
  • azl3 multus 4.0.2-10 on Azure Linux 3.0
  • azl3 multus 4.0.2-11 on Azure Linux 3.0
  • azl3 multus 4.0.2-12 on Azure Linux 3.0
  • azl3 packer 1.9.5-20 on Azure Linux 3.0
  • azl3 packer 1.9.5-21 on Azure Linux 3.0
  • azl3 packer 1.9.5-23 on Azure Linux 3.0
  • azl3 prometheus-adapter 0.12.0-10 on Azure Linux 3.0
  • azl3 prometheus-adapter 0.12.0-9 on Azure Linux 3.0
  • azl3 skopeo 1.14.4-12 on Azure Linux 3.0
  • azl3 sriov-network-device-plugin 3.7.0-7 on Azure Linux 3.0
  • azl3 telegraf 1.31.0-31 on Azure Linux 3.0
  • azl3 vitess 19.0.4-13 on Azure Linux 3.0

What changed

  1. Detection template: Unknown: detection-template evidence is incomplete or retained → No Nuclei template listed
  2. Detection template: No Nuclei template listed → Unknown: detection-template evidence is incomplete or retained
  3. Affected products: azl3 azcopy 10.25.1-8 on Azure Linux 3.0, azl3 azurelinux-image-tools 1.6.0-2 on Azure Linux 3.0, azl3 cert-manager 1.12.15-12 on Azure Linux 3.0, azl3 cf-cli 8.7.11-8 on Azure Linux 3.0, azl3 cloud-provider-kubevirt 0.5.1-7 on Azure Linux 3.0, azl3 containerd2 2.2.4-8 on Azure Linux 3.0, azl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-7 on Azure Linux 3.0, azl3 coredns 1.11.4-20 on Azure Linux 3.0, azl3 cri-tools 1.32.0-10 on Azure Linux 3.0, azl3 cri-tools 1.32.0-7 on Azure Linux 3.0, azl3 cri-tools 1.32.0-8 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-16 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-19 on Azure Linux 3.0, azl3 docker-compose 2.27.0-13 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 etcd 3.5.33-1 on Azure Linux 3.0, azl3 flannel 0.24.2-31 on Azure Linux 3.0, azl3 flannel 0.24.2-32 on Azure Linux 3.0, azl3 gh 2.98.0-1 on Azure Linux 3.0, azl3 influxdb 2.7.5-20 on Azure Linux 3.0, azl3 kata-containers 3.32.0.kata0-5 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-20 on Azure Linux 3.0, azl3 keda 2.14.1-18 on Azure Linux 3.0, azl3 keda 2.14.1-19 on Azure Linux 3.0, azl3 kube-vip-cloud-provider 0.0.10-8 on Azure Linux 3.0, azl3 kubernetes 1.30.10-29 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-1 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 kubevirt-openvmm 1.9.0-1 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-16 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-19 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 multus 4.0.2-10 on Azure Linux 3.0, azl3 multus 4.0.2-11 on Azure Linux 3.0, azl3 multus 4.0.2-12 on Azure Linux 3.0, azl3 packer 1.9.5-20 on Azure Linux 3.0, azl3 packer 1.9.5-21 on Azure Linux 3.0, azl3 packer 1.9.5-23 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-10 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-9 on Azure Linux 3.0, azl3 skopeo 1.14.4-12 on Azure Linux 3.0, azl3 sriov-network-device-plugin 3.7.0-7 on Azure Linux 3.0, azl3 telegraf 1.31.0-31 on Azure Linux 3.0, azl3 vitess 19.0.4-13 on Azure Linux 3.0 → azl3 azcopy 10.25.1-8 on Azure Linux 3.0, azl3 azurelinux-image-tools 1.6.0-2 on Azure Linux 3.0, azl3 cert-manager 1.12.15-12 on Azure Linux 3.0, azl3 cf-cli 8.7.11-8 on Azure Linux 3.0, azl3 cloud-provider-kubevirt 0.5.1-7 on Azure Linux 3.0, azl3 containerd2 2.2.4-8 on Azure Linux 3.0, azl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-7 on Azure Linux 3.0, azl3 coredns 1.11.4-20 on Azure Linux 3.0, azl3 cri-tools 1.32.0-10 on Azure Linux 3.0, azl3 cri-tools 1.32.0-7 on Azure Linux 3.0, azl3 cri-tools 1.32.0-8 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-16 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-19 on Azure Linux 3.0, azl3 docker-compose 2.27.0-13 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 etcd 3.5.33-1 on Azure Linux 3.0, azl3 flannel 0.24.2-31 on Azure Linux 3.0, azl3 flannel 0.24.2-32 on Azure Linux 3.0, azl3 gh 2.98.0-1 on Azure Linux 3.0, azl3 influxdb 2.7.5-20 on Azure Linux 3.0, azl3 kata-containers 3.32.0.kata0-5 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-20 on Azure Linux 3.0, azl3 keda 2.14.1-18 on Azure Linux 3.0, azl3 keda 2.14.1-19 on Azure Linux 3.0, azl3 kube-vip-cloud-provider 0.0.10-8 on Azure Linux 3.0, azl3 kubernetes 1.30.10-29 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-1 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-16 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-19 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 multus 4.0.2-10 on Azure Linux 3.0, azl3 multus 4.0.2-11 on Azure Linux 3.0, azl3 multus 4.0.2-12 on Azure Linux 3.0, azl3 packer 1.9.5-20 on Azure Linux 3.0, azl3 packer 1.9.5-21 on Azure Linux 3.0, azl3 packer 1.9.5-23 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-10 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-9 on Azure Linux 3.0, azl3 skopeo 1.14.4-12 on Azure Linux 3.0, azl3 sriov-network-device-plugin 3.7.0-7 on Azure Linux 3.0, azl3 telegraf 1.31.0-31 on Azure Linux 3.0, azl3 vitess 19.0.4-13 on Azure Linux 3.0
  4. Detection template: Unknown: detection-template evidence is incomplete or retained → No Nuclei template listed
  5. Detection template: No Nuclei template listed → Unknown: detection-template evidence is incomplete or retained
  6. Affected products: azl3 azcopy 10.25.1-8 on Azure Linux 3.0, azl3 azurelinux-image-tools 1.6.0-2 on Azure Linux 3.0, azl3 cert-manager 1.12.15-12 on Azure Linux 3.0, azl3 cf-cli 8.7.11-8 on Azure Linux 3.0, azl3 cloud-provider-kubevirt 0.5.1-7 on Azure Linux 3.0, azl3 containerd2 2.2.4-8 on Azure Linux 3.0, azl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-7 on Azure Linux 3.0, azl3 coredns 1.11.4-20 on Azure Linux 3.0, azl3 cri-tools 1.32.0-7 on Azure Linux 3.0, azl3 cri-tools 1.32.0-8 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-16 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0, azl3 docker-compose 2.27.0-13 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 etcd 3.5.33-1 on Azure Linux 3.0, azl3 flannel 0.24.2-31 on Azure Linux 3.0, azl3 flannel 0.24.2-32 on Azure Linux 3.0, azl3 gh 2.98.0-1 on Azure Linux 3.0, azl3 influxdb 2.7.5-20 on Azure Linux 3.0, azl3 kata-containers 3.32.0.kata0-5 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-20 on Azure Linux 3.0, azl3 keda 2.14.1-18 on Azure Linux 3.0, azl3 keda 2.14.1-19 on Azure Linux 3.0, azl3 kube-vip-cloud-provider 0.0.10-8 on Azure Linux 3.0, azl3 kubernetes 1.30.10-29 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-1 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 kubevirt-openvmm 1.9.0-1 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-16 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 multus 4.0.2-10 on Azure Linux 3.0, azl3 multus 4.0.2-11 on Azure Linux 3.0, azl3 packer 1.9.5-20 on Azure Linux 3.0, azl3 packer 1.9.5-21 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-10 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-9 on Azure Linux 3.0, azl3 skopeo 1.14.4-12 on Azure Linux 3.0, azl3 sriov-network-device-plugin 3.7.0-7 on Azure Linux 3.0, azl3 telegraf 1.31.0-31 on Azure Linux 3.0, azl3 vitess 19.0.4-13 on Azure Linux 3.0 → azl3 azcopy 10.25.1-8 on Azure Linux 3.0, azl3 azurelinux-image-tools 1.6.0-2 on Azure Linux 3.0, azl3 cert-manager 1.12.15-12 on Azure Linux 3.0, azl3 cf-cli 8.7.11-8 on Azure Linux 3.0, azl3 cloud-provider-kubevirt 0.5.1-7 on Azure Linux 3.0, azl3 containerd2 2.2.4-8 on Azure Linux 3.0, azl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-7 on Azure Linux 3.0, azl3 coredns 1.11.4-20 on Azure Linux 3.0, azl3 cri-tools 1.32.0-10 on Azure Linux 3.0, azl3 cri-tools 1.32.0-7 on Azure Linux 3.0, azl3 cri-tools 1.32.0-8 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-16 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-19 on Azure Linux 3.0, azl3 docker-compose 2.27.0-13 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 etcd 3.5.33-1 on Azure Linux 3.0, azl3 flannel 0.24.2-31 on Azure Linux 3.0, azl3 flannel 0.24.2-32 on Azure Linux 3.0, azl3 gh 2.98.0-1 on Azure Linux 3.0, azl3 influxdb 2.7.5-20 on Azure Linux 3.0, azl3 kata-containers 3.32.0.kata0-5 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-20 on Azure Linux 3.0, azl3 keda 2.14.1-18 on Azure Linux 3.0, azl3 keda 2.14.1-19 on Azure Linux 3.0, azl3 kube-vip-cloud-provider 0.0.10-8 on Azure Linux 3.0, azl3 kubernetes 1.30.10-29 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-1 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 kubevirt-openvmm 1.9.0-1 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-16 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-19 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 multus 4.0.2-10 on Azure Linux 3.0, azl3 multus 4.0.2-11 on Azure Linux 3.0, azl3 multus 4.0.2-12 on Azure Linux 3.0, azl3 packer 1.9.5-20 on Azure Linux 3.0, azl3 packer 1.9.5-21 on Azure Linux 3.0, azl3 packer 1.9.5-23 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-10 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-9 on Azure Linux 3.0, azl3 skopeo 1.14.4-12 on Azure Linux 3.0, azl3 sriov-network-device-plugin 3.7.0-7 on Azure Linux 3.0, azl3 telegraf 1.31.0-31 on Azure Linux 3.0, azl3 vitess 19.0.4-13 on Azure Linux 3.0
  7. Affected products: azl3 azcopy 10.25.1-8 on Azure Linux 3.0, azl3 azurelinux-image-tools 1.6.0-2 on Azure Linux 3.0, azl3 cert-manager 1.12.15-12 on Azure Linux 3.0, azl3 cf-cli 8.7.11-8 on Azure Linux 3.0, azl3 cloud-provider-kubevirt 0.5.1-7 on Azure Linux 3.0, azl3 containerd2 2.2.4-8 on Azure Linux 3.0, azl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-7 on Azure Linux 3.0, azl3 coredns 1.11.4-20 on Azure Linux 3.0, azl3 cri-tools 1.32.0-7 on Azure Linux 3.0, azl3 cri-tools 1.32.0-8 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-16 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0, azl3 docker-compose 2.27.0-13 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 etcd 3.5.33-1 on Azure Linux 3.0, azl3 flannel 0.24.2-31 on Azure Linux 3.0, azl3 flannel 0.24.2-32 on Azure Linux 3.0, azl3 gh 2.98.0-1 on Azure Linux 3.0, azl3 influxdb 2.7.5-20 on Azure Linux 3.0, azl3 kata-containers 3.32.0.kata0-5 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-20 on Azure Linux 3.0, azl3 keda 2.14.1-18 on Azure Linux 3.0, azl3 keda 2.14.1-19 on Azure Linux 3.0, azl3 kube-vip-cloud-provider 0.0.10-8 on Azure Linux 3.0, azl3 kubernetes 1.30.10-29 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-1 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-16 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 multus 4.0.2-10 on Azure Linux 3.0, azl3 multus 4.0.2-11 on Azure Linux 3.0, azl3 packer 1.9.5-20 on Azure Linux 3.0, azl3 packer 1.9.5-21 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-10 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-9 on Azure Linux 3.0, azl3 skopeo 1.14.4-12 on Azure Linux 3.0, azl3 sriov-network-device-plugin 3.7.0-7 on Azure Linux 3.0, azl3 telegraf 1.31.0-31 on Azure Linux 3.0, azl3 vitess 19.0.4-13 on Azure Linux 3.0 → azl3 azcopy 10.25.1-8 on Azure Linux 3.0, azl3 azurelinux-image-tools 1.6.0-2 on Azure Linux 3.0, azl3 cert-manager 1.12.15-12 on Azure Linux 3.0, azl3 cf-cli 8.7.11-8 on Azure Linux 3.0, azl3 cloud-provider-kubevirt 0.5.1-7 on Azure Linux 3.0, azl3 containerd2 2.2.4-8 on Azure Linux 3.0, azl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-7 on Azure Linux 3.0, azl3 coredns 1.11.4-20 on Azure Linux 3.0, azl3 cri-tools 1.32.0-7 on Azure Linux 3.0, azl3 cri-tools 1.32.0-8 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-16 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0, azl3 docker-compose 2.27.0-13 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 etcd 3.5.33-1 on Azure Linux 3.0, azl3 flannel 0.24.2-31 on Azure Linux 3.0, azl3 flannel 0.24.2-32 on Azure Linux 3.0, azl3 gh 2.98.0-1 on Azure Linux 3.0, azl3 influxdb 2.7.5-20 on Azure Linux 3.0, azl3 kata-containers 3.32.0.kata0-5 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-20 on Azure Linux 3.0, azl3 keda 2.14.1-18 on Azure Linux 3.0, azl3 keda 2.14.1-19 on Azure Linux 3.0, azl3 kube-vip-cloud-provider 0.0.10-8 on Azure Linux 3.0, azl3 kubernetes 1.30.10-29 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-1 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 kubevirt-openvmm 1.9.0-1 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-16 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 multus 4.0.2-10 on Azure Linux 3.0, azl3 multus 4.0.2-11 on Azure Linux 3.0, azl3 packer 1.9.5-20 on Azure Linux 3.0, azl3 packer 1.9.5-21 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-10 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-9 on Azure Linux 3.0, azl3 skopeo 1.14.4-12 on Azure Linux 3.0, azl3 sriov-network-device-plugin 3.7.0-7 on Azure Linux 3.0, azl3 telegraf 1.31.0-31 on Azure Linux 3.0, azl3 vitess 19.0.4-13 on Azure Linux 3.0
  8. Detection template: No Nuclei template listed · Customer action: Required: apply the update → Required: follow the MSRC remediation guidance · Public disclosure: No → Unknown: not stated by MSRC · Exploitation detected: Not reported by MSRC → Unknown: not stated by MSRC
  9. Detection template: Unknown: exploit-code evidence is incomplete or retained → No Nuclei template listed · CISA KEV: Unknown: catalog evidence is incomplete or retained → Not listed in the collected catalog
  10. Detection template: No Nuclei template listed → Unknown: exploit-code evidence is incomplete or retained · CISA KEV: Not listed in the collected catalog → Unknown: catalog evidence is incomplete or retained
  11. Affected products: azl3 azcopy 10.25.1-8 on Azure Linux 3.0, azl3 azurelinux-image-tools 1.6.0-2 on Azure Linux 3.0, azl3 cert-manager 1.12.15-12 on Azure Linux 3.0, azl3 cf-cli 8.7.11-8 on Azure Linux 3.0, azl3 cf-cli 8.7.11-9 on Azure Linux 3.0, azl3 cloud-provider-kubevirt 0.5.1-7 on Azure Linux 3.0, azl3 containerd2 2.2.4-8 on Azure Linux 3.0, azl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-7 on Azure Linux 3.0, azl3 coredns 1.11.4-20 on Azure Linux 3.0, azl3 cri-tools 1.32.0-7 on Azure Linux 3.0, azl3 cri-tools 1.32.0-8 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-16 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0, azl3 docker-compose 2.27.0-13 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 etcd 3.5.33-1 on Azure Linux 3.0, azl3 flannel 0.24.2-31 on Azure Linux 3.0, azl3 flannel 0.24.2-32 on Azure Linux 3.0, azl3 gh 2.98.0-1 on Azure Linux 3.0, azl3 influxdb 2.7.5-20 on Azure Linux 3.0, azl3 kata-containers 3.32.0.kata0-5 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-20 on Azure Linux 3.0, azl3 keda 2.14.1-18 on Azure Linux 3.0, azl3 keda 2.14.1-19 on Azure Linux 3.0, azl3 kube-vip-cloud-provider 0.0.10-8 on Azure Linux 3.0, azl3 kubernetes 1.30.10-29 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-1 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-16 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 multus 4.0.2-10 on Azure Linux 3.0, azl3 multus 4.0.2-11 on Azure Linux 3.0, azl3 packer 1.9.5-20 on Azure Linux 3.0, azl3 packer 1.9.5-21 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-10 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-9 on Azure Linux 3.0, azl3 skopeo 1.14.4-12 on Azure Linux 3.0, azl3 sriov-network-device-plugin 3.7.0-7 on Azure Linux 3.0, azl3 telegraf 1.31.0-31 on Azure Linux 3.0, azl3 vitess 19.0.4-13 on Azure Linux 3.0 → azl3 azcopy 10.25.1-8 on Azure Linux 3.0, azl3 azurelinux-image-tools 1.6.0-2 on Azure Linux 3.0, azl3 cert-manager 1.12.15-12 on Azure Linux 3.0, azl3 cf-cli 8.7.11-8 on Azure Linux 3.0, azl3 cloud-provider-kubevirt 0.5.1-7 on Azure Linux 3.0, azl3 containerd2 2.2.4-8 on Azure Linux 3.0, azl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-7 on Azure Linux 3.0, azl3 coredns 1.11.4-20 on Azure Linux 3.0, azl3 cri-tools 1.32.0-7 on Azure Linux 3.0, azl3 cri-tools 1.32.0-8 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-16 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0, azl3 docker-compose 2.27.0-13 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 etcd 3.5.33-1 on Azure Linux 3.0, azl3 flannel 0.24.2-31 on Azure Linux 3.0, azl3 flannel 0.24.2-32 on Azure Linux 3.0, azl3 gh 2.98.0-1 on Azure Linux 3.0, azl3 influxdb 2.7.5-20 on Azure Linux 3.0, azl3 kata-containers 3.32.0.kata0-5 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-20 on Azure Linux 3.0, azl3 keda 2.14.1-18 on Azure Linux 3.0, azl3 keda 2.14.1-19 on Azure Linux 3.0, azl3 kube-vip-cloud-provider 0.0.10-8 on Azure Linux 3.0, azl3 kubernetes 1.30.10-29 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-1 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-16 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 multus 4.0.2-10 on Azure Linux 3.0, azl3 multus 4.0.2-11 on Azure Linux 3.0, azl3 packer 1.9.5-20 on Azure Linux 3.0, azl3 packer 1.9.5-21 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-10 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-9 on Azure Linux 3.0, azl3 skopeo 1.14.4-12 on Azure Linux 3.0, azl3 sriov-network-device-plugin 3.7.0-7 on Azure Linux 3.0, azl3 telegraf 1.31.0-31 on Azure Linux 3.0, azl3 vitess 19.0.4-13 on Azure Linux 3.0
Page history

Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.

Cite this version
Field-level log (43)

Up to 100 recent field edits are shown; older edits may be outside retention.

  1. 6 Nov 2026 · 17:32:22 UTC Public detection templateUnknown: detection-template evidence is incomplete or retained → No Nuclei template listed
  2. 6 Nov 2026 · 17:32:22 UTC Source coverage: public-exploit-codeIncomplete → Current
  3. 6 Nov 2026 · 17:32:22 UTC Source coverage: first-epssIncomplete → Current
  4. 6 Nov 2026 · 17:32:22 UTC Source coverage: msrc-cvrfIncomplete → Current
  5. 6 Nov 2026 · 16:31:02 UTC Public detection templateNo Nuclei template listed → Unknown: detection-template evidence is incomplete or retained
  6. 6 Nov 2026 · 16:31:02 UTC Source coverage: public-exploit-codeCurrent → Incomplete
  7. 6 Nov 2026 · 16:31:02 UTC Source coverage: first-epssCurrent → Incomplete
  8. 6 Nov 2026 · 16:31:02 UTC Source coverage: msrc-cvrfCurrent → Incomplete
  9. 4 Nov 2026 · 08:19:44 UTC Last revised2 Nov 2026 01:45 UTC → 4 Nov 2026 01:46 UTC
  10. 4 Nov 2026 · 08:19:44 UTC Affected productsazl3 azcopy 10.25.1-8 on Azure Linux 3.0, azl3 azurelinux-image-tools 1.6.0-2 on Azure Linux 3.0, azl3 cert-manager 1.12.15-12 on Azure Linux 3.0, azl3 cf-cli 8.7.11-8 on Azure Linux 3.0, azl3 cloud-provider-kubevirt 0.5.1-7 on Azure Linux 3.0, azl3 containerd2 2.2.4-8 on Azure Linux 3.0, azl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-7 on Azure Linux 3.0, azl3 coredns 1.11.4-20 on Azure Linux 3.0, azl3 cri-tools 1.32.0-10 on Azure Linux 3.0, azl3 cri-tools 1.32.0-7 on Azure Linux 3.0, azl3 cri-tools 1.32.0-8 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-16 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-19 on Azure Linux 3.0, azl3 docker-compose 2.27.0-13 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 etcd 3.5.33-1 on Azure Linux 3.0, azl3 flannel 0.24.2-31 on Azure Linux 3.0, azl3 flannel 0.24.2-32 on Azure Linux 3.0, azl3 gh 2.98.0-1 on Azure Linux 3.0, azl3 influxdb 2.7.5-20 on Azure Linux 3.0, azl3 kata-containers 3.32.0.kata0-5 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-20 on Azure Linux 3.0, azl3 keda 2.14.1-18 on Azure Linux 3.0, azl3 keda 2.14.1-19 on Azure Linux 3.0, azl3 kube-vip-cloud-provider 0.0.10-8 on Azure Linux 3.0, azl3 kubernetes 1.30.10-29 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-1 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 kubevirt-openvmm 1.9.0-1 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-16 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-19 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 multus 4.0.2-10 on Azure Linux 3.0, azl3 multus 4.0.2-11 on Azure Linux 3.0, azl3 multus 4.0.2-12 on Azure Linux 3.0, azl3 packer 1.9.5-20 on Azure Linux 3.0, azl3 packer 1.9.5-21 on Azure Linux 3.0, azl3 packer 1.9.5-23 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-10 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-9 on Azure Linux 3.0, azl3 skopeo 1.14.4-12 on Azure Linux 3.0, azl3 sriov-network-device-plugin 3.7.0-7 on Azure Linux 3.0, azl3 telegraf 1.31.0-31 on Azure Linux 3.0, azl3 vitess 19.0.4-13 on Azure Linux 3.0 → azl3 azcopy 10.25.1-8 on Azure Linux 3.0, azl3 azurelinux-image-tools 1.6.0-2 on Azure Linux 3.0, azl3 cert-manager 1.12.15-12 on Azure Linux 3.0, azl3 cf-cli 8.7.11-8 on Azure Linux 3.0, azl3 cloud-provider-kubevirt 0.5.1-7 on Azure Linux 3.0, azl3 containerd2 2.2.4-8 on Azure Linux 3.0, azl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-7 on Azure Linux 3.0, azl3 coredns 1.11.4-20 on Azure Linux 3.0, azl3 cri-tools 1.32.0-10 on Azure Linux 3.0, azl3 cri-tools 1.32.0-7 on Azure Linux 3.0, azl3 cri-tools 1.32.0-8 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-16 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-19 on Azure Linux 3.0, azl3 docker-compose 2.27.0-13 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 etcd 3.5.33-1 on Azure Linux 3.0, azl3 flannel 0.24.2-31 on Azure Linux 3.0, azl3 flannel 0.24.2-32 on Azure Linux 3.0, azl3 gh 2.98.0-1 on Azure Linux 3.0, azl3 influxdb 2.7.5-20 on Azure Linux 3.0, azl3 kata-containers 3.32.0.kata0-5 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-20 on Azure Linux 3.0, azl3 keda 2.14.1-18 on Azure Linux 3.0, azl3 keda 2.14.1-19 on Azure Linux 3.0, azl3 kube-vip-cloud-provider 0.0.10-8 on Azure Linux 3.0, azl3 kubernetes 1.30.10-29 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-1 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-16 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-19 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 multus 4.0.2-10 on Azure Linux 3.0, azl3 multus 4.0.2-11 on Azure Linux 3.0, azl3 multus 4.0.2-12 on Azure Linux 3.0, azl3 packer 1.9.5-20 on Azure Linux 3.0, azl3 packer 1.9.5-21 on Azure Linux 3.0, azl3 packer 1.9.5-23 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-10 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-9 on Azure Linux 3.0, azl3 skopeo 1.14.4-12 on Azure Linux 3.0, azl3 sriov-network-device-plugin 3.7.0-7 on Azure Linux 3.0, azl3 telegraf 1.31.0-31 on Azure Linux 3.0, azl3 vitess 19.0.4-13 on Azure Linux 3.0
  11. 2 Nov 2026 · 17:30:39 UTC Public detection templateUnknown: detection-template evidence is incomplete or retained → No Nuclei template listed
  12. 2 Nov 2026 · 17:30:39 UTC Source coverage: public-exploit-codeIncomplete → Current
  13. 2 Nov 2026 · 17:30:39 UTC Source coverage: first-epssIncomplete → Current
  14. 2 Nov 2026 · 17:30:39 UTC Source coverage: msrc-cvrfIncomplete → Current
  15. 2 Nov 2026 · 16:27:39 UTC Public detection templateNo Nuclei template listed → Unknown: detection-template evidence is incomplete or retained
  16. 2 Nov 2026 · 16:27:39 UTC Source coverage: public-exploit-codeCurrent → Incomplete
  17. 2 Nov 2026 · 16:27:39 UTC Source coverage: first-epssCurrent → Incomplete
  18. 2 Nov 2026 · 16:27:39 UTC Source coverage: msrc-cvrfCurrent → Incomplete
  19. 2 Nov 2026 · 09:04:36 UTC Last revised31 Oct 2026 01:02 UTC → 2 Nov 2026 01:45 UTC
  20. 2 Nov 2026 · 09:04:36 UTC Affected productsazl3 azcopy 10.25.1-8 on Azure Linux 3.0, azl3 azurelinux-image-tools 1.6.0-2 on Azure Linux 3.0, azl3 cert-manager 1.12.15-12 on Azure Linux 3.0, azl3 cf-cli 8.7.11-8 on Azure Linux 3.0, azl3 cloud-provider-kubevirt 0.5.1-7 on Azure Linux 3.0, azl3 containerd2 2.2.4-8 on Azure Linux 3.0, azl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-7 on Azure Linux 3.0, azl3 coredns 1.11.4-20 on Azure Linux 3.0, azl3 cri-tools 1.32.0-7 on Azure Linux 3.0, azl3 cri-tools 1.32.0-8 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-16 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0, azl3 docker-compose 2.27.0-13 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 etcd 3.5.33-1 on Azure Linux 3.0, azl3 flannel 0.24.2-31 on Azure Linux 3.0, azl3 flannel 0.24.2-32 on Azure Linux 3.0, azl3 gh 2.98.0-1 on Azure Linux 3.0, azl3 influxdb 2.7.5-20 on Azure Linux 3.0, azl3 kata-containers 3.32.0.kata0-5 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-20 on Azure Linux 3.0, azl3 keda 2.14.1-18 on Azure Linux 3.0, azl3 keda 2.14.1-19 on Azure Linux 3.0, azl3 kube-vip-cloud-provider 0.0.10-8 on Azure Linux 3.0, azl3 kubernetes 1.30.10-29 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-1 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 kubevirt-openvmm 1.9.0-1 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-16 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 multus 4.0.2-10 on Azure Linux 3.0, azl3 multus 4.0.2-11 on Azure Linux 3.0, azl3 packer 1.9.5-20 on Azure Linux 3.0, azl3 packer 1.9.5-21 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-10 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-9 on Azure Linux 3.0, azl3 skopeo 1.14.4-12 on Azure Linux 3.0, azl3 sriov-network-device-plugin 3.7.0-7 on Azure Linux 3.0, azl3 telegraf 1.31.0-31 on Azure Linux 3.0, azl3 vitess 19.0.4-13 on Azure Linux 3.0 → azl3 azcopy 10.25.1-8 on Azure Linux 3.0, azl3 azurelinux-image-tools 1.6.0-2 on Azure Linux 3.0, azl3 cert-manager 1.12.15-12 on Azure Linux 3.0, azl3 cf-cli 8.7.11-8 on Azure Linux 3.0, azl3 cloud-provider-kubevirt 0.5.1-7 on Azure Linux 3.0, azl3 containerd2 2.2.4-8 on Azure Linux 3.0, azl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-7 on Azure Linux 3.0, azl3 coredns 1.11.4-20 on Azure Linux 3.0, azl3 cri-tools 1.32.0-10 on Azure Linux 3.0, azl3 cri-tools 1.32.0-7 on Azure Linux 3.0, azl3 cri-tools 1.32.0-8 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-16 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-19 on Azure Linux 3.0, azl3 docker-compose 2.27.0-13 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 etcd 3.5.33-1 on Azure Linux 3.0, azl3 flannel 0.24.2-31 on Azure Linux 3.0, azl3 flannel 0.24.2-32 on Azure Linux 3.0, azl3 gh 2.98.0-1 on Azure Linux 3.0, azl3 influxdb 2.7.5-20 on Azure Linux 3.0, azl3 kata-containers 3.32.0.kata0-5 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-20 on Azure Linux 3.0, azl3 keda 2.14.1-18 on Azure Linux 3.0, azl3 keda 2.14.1-19 on Azure Linux 3.0, azl3 kube-vip-cloud-provider 0.0.10-8 on Azure Linux 3.0, azl3 kubernetes 1.30.10-29 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-1 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 kubevirt-openvmm 1.9.0-1 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-16 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-19 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 multus 4.0.2-10 on Azure Linux 3.0, azl3 multus 4.0.2-11 on Azure Linux 3.0, azl3 multus 4.0.2-12 on Azure Linux 3.0, azl3 packer 1.9.5-20 on Azure Linux 3.0, azl3 packer 1.9.5-21 on Azure Linux 3.0, azl3 packer 1.9.5-23 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-10 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-9 on Azure Linux 3.0, azl3 skopeo 1.14.4-12 on Azure Linux 3.0, azl3 sriov-network-device-plugin 3.7.0-7 on Azure Linux 3.0, azl3 telegraf 1.31.0-31 on Azure Linux 3.0, azl3 vitess 19.0.4-13 on Azure Linux 3.0
  21. 31 Oct 2026 · 08:05:42 UTC Last revised16 Oct 2026 01:44 UTC → 31 Oct 2026 01:02 UTC
  22. 31 Oct 2026 · 08:05:42 UTC Affected productsazl3 azcopy 10.25.1-8 on Azure Linux 3.0, azl3 azurelinux-image-tools 1.6.0-2 on Azure Linux 3.0, azl3 cert-manager 1.12.15-12 on Azure Linux 3.0, azl3 cf-cli 8.7.11-8 on Azure Linux 3.0, azl3 cloud-provider-kubevirt 0.5.1-7 on Azure Linux 3.0, azl3 containerd2 2.2.4-8 on Azure Linux 3.0, azl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-7 on Azure Linux 3.0, azl3 coredns 1.11.4-20 on Azure Linux 3.0, azl3 cri-tools 1.32.0-7 on Azure Linux 3.0, azl3 cri-tools 1.32.0-8 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-16 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0, azl3 docker-compose 2.27.0-13 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 etcd 3.5.33-1 on Azure Linux 3.0, azl3 flannel 0.24.2-31 on Azure Linux 3.0, azl3 flannel 0.24.2-32 on Azure Linux 3.0, azl3 gh 2.98.0-1 on Azure Linux 3.0, azl3 influxdb 2.7.5-20 on Azure Linux 3.0, azl3 kata-containers 3.32.0.kata0-5 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-20 on Azure Linux 3.0, azl3 keda 2.14.1-18 on Azure Linux 3.0, azl3 keda 2.14.1-19 on Azure Linux 3.0, azl3 kube-vip-cloud-provider 0.0.10-8 on Azure Linux 3.0, azl3 kubernetes 1.30.10-29 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-1 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-16 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 multus 4.0.2-10 on Azure Linux 3.0, azl3 multus 4.0.2-11 on Azure Linux 3.0, azl3 packer 1.9.5-20 on Azure Linux 3.0, azl3 packer 1.9.5-21 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-10 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-9 on Azure Linux 3.0, azl3 skopeo 1.14.4-12 on Azure Linux 3.0, azl3 sriov-network-device-plugin 3.7.0-7 on Azure Linux 3.0, azl3 telegraf 1.31.0-31 on Azure Linux 3.0, azl3 vitess 19.0.4-13 on Azure Linux 3.0 → azl3 azcopy 10.25.1-8 on Azure Linux 3.0, azl3 azurelinux-image-tools 1.6.0-2 on Azure Linux 3.0, azl3 cert-manager 1.12.15-12 on Azure Linux 3.0, azl3 cf-cli 8.7.11-8 on Azure Linux 3.0, azl3 cloud-provider-kubevirt 0.5.1-7 on Azure Linux 3.0, azl3 containerd2 2.2.4-8 on Azure Linux 3.0, azl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-7 on Azure Linux 3.0, azl3 coredns 1.11.4-20 on Azure Linux 3.0, azl3 cri-tools 1.32.0-7 on Azure Linux 3.0, azl3 cri-tools 1.32.0-8 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-16 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0, azl3 docker-compose 2.27.0-13 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 etcd 3.5.33-1 on Azure Linux 3.0, azl3 flannel 0.24.2-31 on Azure Linux 3.0, azl3 flannel 0.24.2-32 on Azure Linux 3.0, azl3 gh 2.98.0-1 on Azure Linux 3.0, azl3 influxdb 2.7.5-20 on Azure Linux 3.0, azl3 kata-containers 3.32.0.kata0-5 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-20 on Azure Linux 3.0, azl3 keda 2.14.1-18 on Azure Linux 3.0, azl3 keda 2.14.1-19 on Azure Linux 3.0, azl3 kube-vip-cloud-provider 0.0.10-8 on Azure Linux 3.0, azl3 kubernetes 1.30.10-29 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-1 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 kubevirt-openvmm 1.9.0-1 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-16 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 multus 4.0.2-10 on Azure Linux 3.0, azl3 multus 4.0.2-11 on Azure Linux 3.0, azl3 packer 1.9.5-20 on Azure Linux 3.0, azl3 packer 1.9.5-21 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-10 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-9 on Azure Linux 3.0, azl3 skopeo 1.14.4-12 on Azure Linux 3.0, azl3 sriov-network-device-plugin 3.7.0-7 on Azure Linux 3.0, azl3 telegraf 1.31.0-31 on Azure Linux 3.0, azl3 vitess 19.0.4-13 on Azure Linux 3.0
  23. 29 Oct 2026 · 20:19:26 UTC Public detection templateNo Nuclei template listed
  24. 29 Oct 2026 · 20:19:26 UTC EPSSNot scored → No EPSS score collected
  25. 29 Oct 2026 · 20:19:26 UTC Customer actionRequired: apply the update → Required: follow the MSRC remediation guidance
  26. 29 Oct 2026 · 20:19:26 UTC Publicly disclosedNo → Unknown: not stated by MSRC
  27. 29 Oct 2026 · 20:19:26 UTC Exploitation detectedNot reported by MSRC → Unknown: not stated by MSRC
  28. 23 Oct 2026 · 09:33:49 UTC Public exploit codeUnknown: exploit-code evidence is incomplete or retained → No Nuclei template listed
  29. 23 Oct 2026 · 09:33:49 UTC CISA KEVUnknown: catalog evidence is incomplete or retained → Not listed in the collected catalog
  30. 23 Oct 2026 · 09:33:49 UTC Source coverage: public-exploit-codeIncomplete → Current
  31. 23 Oct 2026 · 09:33:49 UTC Source coverage: first-epssIncomplete → Current
  32. 23 Oct 2026 · 09:33:49 UTC Source coverage: cisa-kevIncomplete → Current
  33. 23 Oct 2026 · 09:33:49 UTC Source coverage: msrc-cvrfIncomplete → Current
  34. 23 Oct 2026 · 08:31:50 UTC Public exploit codeNo Nuclei template listed → Unknown: exploit-code evidence is incomplete or retained
  35. 23 Oct 2026 · 08:31:50 UTC CISA KEVNot listed in the collected catalog → Unknown: catalog evidence is incomplete or retained
  36. 23 Oct 2026 · 08:31:50 UTC Source coverage: public-exploit-codeCurrent → Incomplete
  37. 23 Oct 2026 · 08:31:50 UTC Source coverage: first-epssCurrent → Incomplete
  38. 23 Oct 2026 · 08:31:50 UTC Source coverage: cisa-kevCurrent → Incomplete
  39. 23 Oct 2026 · 08:31:50 UTC Source coverage: msrc-cvrfCurrent → Incomplete
  40. 18 Oct 2026 · 14:54:30 UTC Link: September 2026/security?release=2026-Sep#cves
  41. 16 Oct 2026 · 07:41:54 UTC Last revised10 Oct 2026 01:47 UTC → 16 Oct 2026 01:44 UTC
  42. 16 Oct 2026 · 07:41:54 UTC Affected productsazl3 azcopy 10.25.1-8 on Azure Linux 3.0, azl3 azurelinux-image-tools 1.6.0-2 on Azure Linux 3.0, azl3 cert-manager 1.12.15-12 on Azure Linux 3.0, azl3 cf-cli 8.7.11-8 on Azure Linux 3.0, azl3 cf-cli 8.7.11-9 on Azure Linux 3.0, azl3 cloud-provider-kubevirt 0.5.1-7 on Azure Linux 3.0, azl3 containerd2 2.2.4-8 on Azure Linux 3.0, azl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-7 on Azure Linux 3.0, azl3 coredns 1.11.4-20 on Azure Linux 3.0, azl3 cri-tools 1.32.0-7 on Azure Linux 3.0, azl3 cri-tools 1.32.0-8 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-16 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0, azl3 docker-compose 2.27.0-13 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 etcd 3.5.33-1 on Azure Linux 3.0, azl3 flannel 0.24.2-31 on Azure Linux 3.0, azl3 flannel 0.24.2-32 on Azure Linux 3.0, azl3 gh 2.98.0-1 on Azure Linux 3.0, azl3 influxdb 2.7.5-20 on Azure Linux 3.0, azl3 kata-containers 3.32.0.kata0-5 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-20 on Azure Linux 3.0, azl3 keda 2.14.1-18 on Azure Linux 3.0, azl3 keda 2.14.1-19 on Azure Linux 3.0, azl3 kube-vip-cloud-provider 0.0.10-8 on Azure Linux 3.0, azl3 kubernetes 1.30.10-29 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-1 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-16 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 multus 4.0.2-10 on Azure Linux 3.0, azl3 multus 4.0.2-11 on Azure Linux 3.0, azl3 packer 1.9.5-20 on Azure Linux 3.0, azl3 packer 1.9.5-21 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-10 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-9 on Azure Linux 3.0, azl3 skopeo 1.14.4-12 on Azure Linux 3.0, azl3 sriov-network-device-plugin 3.7.0-7 on Azure Linux 3.0, azl3 telegraf 1.31.0-31 on Azure Linux 3.0, azl3 vitess 19.0.4-13 on Azure Linux 3.0 → azl3 azcopy 10.25.1-8 on Azure Linux 3.0, azl3 azurelinux-image-tools 1.6.0-2 on Azure Linux 3.0, azl3 cert-manager 1.12.15-12 on Azure Linux 3.0, azl3 cf-cli 8.7.11-8 on Azure Linux 3.0, azl3 cloud-provider-kubevirt 0.5.1-7 on Azure Linux 3.0, azl3 containerd2 2.2.4-8 on Azure Linux 3.0, azl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-7 on Azure Linux 3.0, azl3 coredns 1.11.4-20 on Azure Linux 3.0, azl3 cri-tools 1.32.0-7 on Azure Linux 3.0, azl3 cri-tools 1.32.0-8 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-16 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0, azl3 docker-compose 2.27.0-13 on Azure Linux 3.0, azl3 docker-compose 2.27.0-14 on Azure Linux 3.0, azl3 etcd 3.5.33-1 on Azure Linux 3.0, azl3 flannel 0.24.2-31 on Azure Linux 3.0, azl3 flannel 0.24.2-32 on Azure Linux 3.0, azl3 gh 2.98.0-1 on Azure Linux 3.0, azl3 influxdb 2.7.5-20 on Azure Linux 3.0, azl3 kata-containers 3.32.0.kata0-5 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-20 on Azure Linux 3.0, azl3 keda 2.14.1-18 on Azure Linux 3.0, azl3 keda 2.14.1-19 on Azure Linux 3.0, azl3 kube-vip-cloud-provider 0.0.10-8 on Azure Linux 3.0, azl3 kubernetes 1.30.10-29 on Azure Linux 3.0, azl3 kubernetes 1.30.10-30 on Azure Linux 3.0, azl3 kubevirt 1.8.4-1 on Azure Linux 3.0, azl3 kubevirt 1.8.4-2 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-16 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0, azl3 moby-engine 25.0.3-20 on Azure Linux 3.0, azl3 multus 4.0.2-10 on Azure Linux 3.0, azl3 multus 4.0.2-11 on Azure Linux 3.0, azl3 packer 1.9.5-20 on Azure Linux 3.0, azl3 packer 1.9.5-21 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-10 on Azure Linux 3.0, azl3 prometheus-adapter 0.12.0-9 on Azure Linux 3.0, azl3 skopeo 1.14.4-12 on Azure Linux 3.0, azl3 sriov-network-device-plugin 3.7.0-7 on Azure Linux 3.0, azl3 telegraf 1.31.0-31 on Azure Linux 3.0, azl3 vitess 19.0.4-13 on Azure Linux 3.0
  43. 14 Oct 2026 · 11:22:42 UTC Source coverage: msrc-cvrfIncomplete → Current

Explore global source statements, affected packages and advisory history for CVE-2026-84445. The catalog has a separate collection scope from Microsoft release records.

Collected exploitation and prediction evidence

Risk source coverage

CISA KEV is observed exploitation evidence. FIRST EPSS is a dated prediction of exploitation in the next 30 days. Missing scores are unknown. This collector requests predictions only for explicit CVE aliases in the public NuGet archive; Microsoft release views retain their existing prediction scope.

No collected risk observation for these identifiers. This does not establish absence of exploitation or a zero probability.

cve-program · CVE-2026-84445

Published

gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers

gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer() allow internal/transport/http2_server.go to accept an RPC containing neither the :authority header nor the Host header, while RouteAndProcess in internal/xds/server/routing.go assumes that an authority value exists and indexes the empty slice. A remote client that can complete transport connection establishment can trigger an index-out-of-bounds panic that is not recovered by the per-RPC goroutine and terminates the entire server process. In insecure or ordinary TLS deployments the request can be unauthenticated, while strict mTLS or ALTS deployments require valid transport credentials before the malformed RPC can reach the interceptor. This issue is fixed in versions 1.82.2 and 1.83.2.

Source published
14 Sep 2026 16:11:41 UTC
Source modified
14 Sep 2026 16:36:14 UTC
Observed here
23 Oct 2026 15:48:27 UTC
Source terms
CVE Program Terms of Use

Original source record · Cite this exact observation · Complete original publisher JSON

This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: cve-program · CVE Program Terms of Use. Source text is retained; field grouping and change labels are provided by ChangeIntel.

CVSS 4.0 · 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

euvd · EUVD-2026-77627

Published

gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer() allow internal/transport/http2_server.go to accept an RPC containing neither the :authority header nor the Host header, …

gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer() allow internal/transport/http2_server.go to accept an RPC containing neither the :authority header nor the Host header, while RouteAndProcess in internal/xds/server/routing.go assumes that an authority value exists and indexes the empty slice. A remote client that can complete transport connection establishment can trigger an index-out-of-bounds panic that is not recovered by the per-RPC goroutine and terminates the entire server process. In insecure or ordinary TLS deployments the request can be unauthenticated, while strict mTLS or ALTS deployments require valid transport credentials before the malformed RPC can reach the interceptor. This issue is fixed in versions 1.82.2 and 1.83.2.

EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.

Original publisher date fields

datePublished: Sep 14, 2026, 4:11:41 PM

dateUpdated: Sep 14, 2026, 4:36:14 PM

147 related source bulletins · separate from aliases

RHSA-2026:95053: Red Hat Security Advisory: OpenShift Container Platform 4.22 CNF IBU extras update

CVE-2026-84445

RHSA-2026:76752: Red Hat Security Advisory: OpenShift Security Profiles Operator bug fix and enhancement update

CVE-2025-68121 · CVE-2026-25679 · CVE-2026-27145 · CVE-2026-32280 · CVE-2026-32281 · CVE-2026-32282 · CVE-2026-32283 · CVE-2026-33186 · CVE-2026-33810 · CVE-2026-33811 · CVE-2026-33818 · CVE-2026-34986 · CVE-2026-39820 · CVE-2026-39821 · CVE-2026-39828 · CVE-2026-39829 · CVE-2026-39830 · CVE-2026-39831 · CVE-2026-39835 · CVE-2026-41178 · CVE-2026-42499 · CVE-2026-42504 · CVE-2026-46595 · CVE-2026-46597 · CVE-2026-50162 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-84445

RHSA-2026:72851: Red Hat Security Advisory: multicluster engine for Kubernetes v2.9.8 security update

CVE-2025-52881 · CVE-2026-25681 · CVE-2026-33818 · CVE-2026-39829 · CVE-2026-41178 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-59879 · CVE-2026-73500 · CVE-2026-84445

RHSA-2026:79012: Red Hat Security Advisory: rhc security update

CVE-2026-84445

openSUSE-SU-2026:21882-1: Security update for google-osconfig-agent

CVE-2026-41178 · CVE-2026-56852 · CVE-2026-56854 · CVE-2026-56855 · CVE-2026-78662 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:72395: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.20.1

CVE-2025-6170 · CVE-2026-1965 · CVE-2026-3783 · CVE-2026-5435 · CVE-2026-5928 · CVE-2026-6238 · CVE-2026-6653 · CVE-2026-8286 · CVE-2026-8458 · CVE-2026-8927 · CVE-2026-9547 · CVE-2026-11822 · CVE-2026-11824 · CVE-2026-11979 · CVE-2026-13757 · CVE-2026-14164 · CVE-2026-14456 · CVE-2026-14457 · CVE-2026-15588 · CVE-2026-16118 · CVE-2026-18798 · CVE-2026-29181 · CVE-2026-33186 · CVE-2026-39883 · CVE-2026-41989 · CVE-2026-46600 · CVE-2026-48864 · CVE-2026-54369 · CVE-2026-54370 · CVE-2026-54371 · CVE-2026-54874 · CVE-2026-56392 · CVE-2026-56852 · CVE-2026-56854 · CVE-2026-58010 · CVE-2026-58011 · CVE-2026-58012 · CVE-2026-58013 · CVE-2026-58014 · CVE-2026-58015 · CVE-2026-58016 · CVE-2026-58055 · CVE-2026-63072 · CVE-2026-63073 · CVE-2026-63074 · CVE-2026-63075 · CVE-2026-63076 · CVE-2026-63379 · CVE-2026-63381 · CVE-2026-63382 · CVE-2026-63383 · CVE-2026-63384 · CVE-2026-63385 · CVE-2026-63387 · CVE-2026-63388 · CVE-2026-81870 · CVE-2026-84445

SUSE-SU-2026:23548-1: Security update for google-osconfig-agent

CVE-2026-39821 · CVE-2026-56852 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

WID-SEC-W-2026-3605: Red Hat Enterprise Linux (rhc): Schwachstelle ermöglicht Denial of Service

CVE-2026-84445

RHSA-2026:89081: Red Hat Security Advisory: Red Hat OpenShift Builds 1.8.3

CVE-2026-46600 · CVE-2026-56851 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-97031 · CVE-2026-111943 · CVE-2026-114406

RHSA-2026:82304: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.17.2

CVE-2024-34459 · CVE-2025-5278 · CVE-2025-6170 · CVE-2025-13151 · CVE-2025-14087 · CVE-2025-14512 · CVE-2025-47911 · CVE-2025-47913 · CVE-2025-47914 · CVE-2025-58181 · CVE-2025-58190 · CVE-2026-1965 · CVE-2026-2100 · CVE-2026-2673 · CVE-2026-3783 · CVE-2026-3832 · CVE-2026-3833 · CVE-2026-4046 · CVE-2026-4424 · CVE-2026-4437 · CVE-2026-4438 · CVE-2026-4878 · CVE-2026-5121 · CVE-2026-5260 · CVE-2026-5419 · CVE-2026-5435 · CVE-2026-5450 · CVE-2026-5928 · CVE-2026-6238 · CVE-2026-6653 · CVE-2026-7383 · CVE-2026-8286 · CVE-2026-9076 · CVE-2026-9547 · CVE-2026-11822 · CVE-2026-11824 · CVE-2026-11979 · CVE-2026-13757 · CVE-2026-14164 · CVE-2026-15588 · CVE-2026-16118 · CVE-2026-25680 · CVE-2026-25681 · CVE-2026-27135 · CVE-2026-27136 · CVE-2026-28390 · CVE-2026-29111 · CVE-2026-31790 · CVE-2026-33186 · CVE-2026-33845 · CVE-2026-33846 · CVE-2026-34180 · CVE-2026-34181 · CVE-2026-34182 · CVE-2026-34183 · CVE-2026-34986 · CVE-2026-39827 · CVE-2026-39828 · CVE-2026-39829 · CVE-2026-39830 · CVE-2026-39831 · CVE-2026-39832 · CVE-2026-39833 · CVE-2026-39834 · CVE-2026-39835 · CVE-2026-40355 · CVE-2026-40356 · CVE-2026-41989 · CVE-2026-42009 · CVE-2026-42010 · CVE-2026-42011 · CVE-2026-42012 · CVE-2026-42013 · CVE-2026-42014 · CVE-2026-42015 · CVE-2026-42502 · CVE-2026-42506 · CVE-2026-42508 · CVE-2026-42764 · CVE-2026-42766 · CVE-2026-42767 · CVE-2026-42768 · CVE-2026-42769 · CVE-2026-42770 · CVE-2026-45445 · CVE-2026-45446 · CVE-2026-45447 · CVE-2026-46595 · CVE-2026-46597 · CVE-2026-46598 · CVE-2026-46600 · CVE-2026-48864 · CVE-2026-54369 · CVE-2026-54370 · CVE-2026-54371 · CVE-2026-56854 · CVE-2026-56855 · CVE-2026-58010 · CVE-2026-58011 · CVE-2026-58012 · CVE-2026-58013 · CVE-2026-58014 · CVE-2026-58015 · CVE-2026-58016 · CVE-2026-58055 · CVE-2026-78662 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:85846: Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.8.18 security and bug fix update

CVE-2026-33186 · CVE-2026-59879 · CVE-2026-69153 · CVE-2026-84445 · CVE-2026-87776 · CVE-2026-88031 · CVE-2026-90711 · CVE-2026-92599 · CVE-2026-93749

RHSA-2026:94632: Red Hat Security Advisory: Red Hat Edge Manager Version 1.2.2 Security Update

CVE-2026-84445 · CVE-2026-92615

SUSE-SU-2026:4308-1: Security update for apptainer

CVE-2026-56854 · CVE-2026-56855 · CVE-2026-78662 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:95054: Red Hat Security Advisory: OpenShift Container Platform 4.22 CNF vRAN extras topology aware lifecycle manager update

CVE-2026-84445

RHSA-2026:72850: Red Hat Security Advisory: multicluster engine for Kubernetes v2.6.15 security update

CVE-2026-25681 · CVE-2026-33818 · CVE-2026-41178 · CVE-2026-56852 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-59879 · CVE-2026-73500 · CVE-2026-84445

RHSA-2026:92861: Red Hat Security Advisory: Satellite 6.19 security update

CVE-2026-15307 · CVE-2026-18660 · CVE-2026-19203 · CVE-2026-56853 · CVE-2026-59646 · CVE-2026-68497 · CVE-2026-73619 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-78677 · CVE-2026-84445 · CVE-2026-87819 · CVE-2026-89407 · CVE-2026-89425 · CVE-2026-94440 · CVE-2026-96640 · CVE-2026-96643 · CVE-2026-96778 · CVE-2026-97031 · CVE-2026-97687 · CVE-2026-97689 · CVE-2026-110856 · CVE-2026-110857 · CVE-2026-110858 · CVE-2026-110859 · CVE-2026-111497 · CVE-2026-111943 · CVE-2026-112390 · CVE-2026-112391 · CVE-2026-112392 · CVE-2026-112393 · CVE-2026-112397 · CVE-2026-112398 · CVE-2026-112399 · CVE-2026-112400 · CVE-2026-112402 · CVE-2026-112403 · CVE-2026-112404 · CVE-2026-112405 · CVE-2026-112406 · CVE-2026-112892 · CVE-2026-112893 · CVE-2026-112894 · CVE-2026-112895 · CVE-2026-112896 · CVE-2026-112897 · CVE-2026-114145

openSUSE-SU-2026:22134-1: Security update for gh

CVE-2026-41178 · CVE-2026-59831 · CVE-2026-63209 · CVE-2026-72924 · CVE-2026-78669 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:73105: Red Hat Security Advisory: RHACS 4.10.9 security and bug fix update

CVE-2026-84445

RHSA-2026:73915: Red Hat Security Advisory: rhc security update

CVE-2026-84445

RHSA-2026:94583: Red Hat Security Advisory: Important: Red Hat OpenShift GitOps v1.21.7 security update

CVE-2026-75838 · CVE-2026-84445 · CVE-2026-114406

SUSE-SU-2026:4178-1: Security update for google-cloud-sap-agent

CVE-2026-56852 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:92858: Red Hat Security Advisory: Satellite 6.16 EUS security update

CVE-2026-8924 · CVE-2026-18660 · CVE-2026-19203 · CVE-2026-56852 · CVE-2026-59646 · CVE-2026-63072 · CVE-2026-63076 · CVE-2026-68494 · CVE-2026-68497 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-89407 · CVE-2026-89425 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:82344: Red Hat Security Advisory: opentelemetry-collector security update

CVE-2026-84445

RHSA-2026:82342: Red Hat Security Advisory: opentelemetry-collector security update

CVE-2026-84445

RHSA-2026:92515: Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.6.2

CVE-2026-41178 · CVE-2026-42499 · CVE-2026-63209 · CVE-2026-77619 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:89031: Red Hat Security Advisory: Red Hat OpenShift Builds 1.8.3

CVE-2026-46600 · CVE-2026-56851 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:82322: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.17.2

CVE-2024-34459 · CVE-2025-5278 · CVE-2025-6170 · CVE-2025-13151 · CVE-2025-14087 · CVE-2025-14512 · CVE-2025-47911 · CVE-2025-47913 · CVE-2025-47914 · CVE-2025-58181 · CVE-2025-58190 · CVE-2026-1965 · CVE-2026-2100 · CVE-2026-2673 · CVE-2026-3783 · CVE-2026-3832 · CVE-2026-3833 · CVE-2026-4046 · CVE-2026-4424 · CVE-2026-4437 · CVE-2026-4438 · CVE-2026-4878 · CVE-2026-5121 · CVE-2026-5260 · CVE-2026-5419 · CVE-2026-5435 · CVE-2026-5450 · CVE-2026-5928 · CVE-2026-6238 · CVE-2026-6653 · CVE-2026-7383 · CVE-2026-8286 · CVE-2026-9076 · CVE-2026-9547 · CVE-2026-11822 · CVE-2026-11824 · CVE-2026-11979 · CVE-2026-13757 · CVE-2026-14164 · CVE-2026-15588 · CVE-2026-16118 · CVE-2026-25680 · CVE-2026-25681 · CVE-2026-27135 · CVE-2026-27136 · CVE-2026-28390 · CVE-2026-29111 · CVE-2026-29181 · CVE-2026-31790 · CVE-2026-33186 · CVE-2026-33845 · CVE-2026-33846 · CVE-2026-34180 · CVE-2026-34181 · CVE-2026-34182 · CVE-2026-34183 · CVE-2026-39827 · CVE-2026-39828 · CVE-2026-39829 · CVE-2026-39830 · CVE-2026-39831 · CVE-2026-39832 · CVE-2026-39833 · CVE-2026-39834 · CVE-2026-39835 · CVE-2026-40355 · CVE-2026-40356 · CVE-2026-41989 · CVE-2026-42009 · CVE-2026-42010 · CVE-2026-42011 · CVE-2026-42012 · CVE-2026-42013 · CVE-2026-42014 · CVE-2026-42015 · CVE-2026-42502 · CVE-2026-42506 · CVE-2026-42508 · CVE-2026-42764 · CVE-2026-42766 · CVE-2026-42767 · CVE-2026-42768 · CVE-2026-42769 · CVE-2026-42770 · CVE-2026-45445 · CVE-2026-45446 · CVE-2026-45447 · CVE-2026-46595 · CVE-2026-46597 · CVE-2026-46598 · CVE-2026-46600 · CVE-2026-48864 · CVE-2026-54369 · CVE-2026-54370 · CVE-2026-54371 · CVE-2026-56854 · CVE-2026-56855 · CVE-2026-58010 · CVE-2026-58011 · CVE-2026-58012 · CVE-2026-58013 · CVE-2026-58014 · CVE-2026-58015 · CVE-2026-58016 · CVE-2026-58055 · CVE-2026-78662 · CVE-2026-84304 · CVE-2026-84445

openSUSE-SU-2026:11837-1: mcphost-0.34.0-11.1 on GA media

CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:91587: Red Hat Security Advisory: osbuild-composer security update

CVE-2026-42504 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:94531: Red Hat Security Advisory: OpenShift Container Platform 5.0 NUMA resources operator extras update

CVE-2026-84445

RHSA-2026:83601: Red Hat Security Advisory: RHTAS 1.4.4 - Red Hat Trusted Artifact Signer Release

CVE-2026-41178 · CVE-2026-56854 · CVE-2026-84445

RHSA-2026:91646: Red Hat Security Advisory: osbuild-composer security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-88031 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:94608: Red Hat Security Advisory: Red Hat Edge Manager Version 1.2.2 Security Update

CVE-2026-73501 · CVE-2026-73502 · CVE-2026-77354 · CVE-2026-84445 · CVE-2026-88031 · CVE-2026-92615 · CVE-2026-102276 · CVE-2026-102278

openSUSE-SU-2026:11830-1: apptainer-1.5.3-4.1 on GA media

CVE-2026-56854 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:89041: Red Hat Security Advisory: Red Hat OpenShift Builds 1.9.2

CVE-2026-33818 · CVE-2026-39821 · CVE-2026-40161 · CVE-2026-40938 · CVE-2026-46600 · CVE-2026-56851 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84304 · CVE-2026-84445 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:91651: Red Hat Security Advisory: Red Hat Developer Hub 1.9.10 release.

CVE-2026-47683 · CVE-2026-47686 · CVE-2026-47698 · CVE-2026-84445 · CVE-2026-92934 · CVE-2026-92935 · CVE-2026-92937 · CVE-2026-92938 · CVE-2026-92939 · CVE-2026-92940 · CVE-2026-92941 · CVE-2026-92942 · CVE-2026-92944 · CVE-2026-92946 · CVE-2026-92947 · CVE-2026-92948 · CVE-2026-92950 · CVE-2026-92951 · CVE-2026-92953 · CVE-2026-92954 · CVE-2026-92955 · CVE-2026-92956 · CVE-2026-92957 · CVE-2026-92958 · CVE-2026-92959 · CVE-2026-92960 · CVE-2026-92961 · CVE-2026-93603 · CVE-2026-93604 · CVE-2026-93605 · CVE-2026-93606 · CVE-2026-111943

openSUSE-SU-2026:21801-1: Security update for trivy

CVE-2026-24122 · CVE-2026-37236 · CVE-2026-41178 · CVE-2026-50163 · CVE-2026-56854 · CVE-2026-56855 · CVE-2026-78662 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

openSUSE-SU-2026:21809-1: Security update for helm

CVE-2026-37236 · CVE-2026-41178 · CVE-2026-48978 · CVE-2026-50151 · CVE-2026-63308 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:75689: Red Hat Security Advisory: rhc-worker-script security update

CVE-2026-33818 · CVE-2026-56858 · CVE-2026-56862 · CVE-2026-84445

openSUSE-SU-2026:11713-1: trivy-0.74.0-4.1 on GA media

CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

openSUSE-SU-2026:11686-1: helm3-3.21.3-8.1 on GA media

CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

SUSE-SU-2026:23739-1: Security update for google-osconfig-agent

CVE-2026-56852 · CVE-2026-56854 · CVE-2026-56855 · CVE-2026-78662 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

openSUSE-SU-2026:21927-1: Security update for apptainer

CVE-2026-56854 · CVE-2026-56855 · CVE-2026-78662 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

openSUSE-SU-2026:12112-1: rclone-1.75.2-1.1 on GA media

CVE-2026-56857 · CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032

RHSA-2026:90321: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.31.0 Release.

CVE-2023-54404 · CVE-2025-62718 · CVE-2026-8643 · CVE-2026-9496 · CVE-2026-12185 · CVE-2026-13697 · CVE-2026-14682 · CVE-2026-15076 · CVE-2026-16308 · CVE-2026-17106 · CVE-2026-18427 · CVE-2026-19203 · CVE-2026-19534 · CVE-2026-39820 · CVE-2026-41178 · CVE-2026-41707 · CVE-2026-42499 · CVE-2026-42502 · CVE-2026-45416 · CVE-2026-47884 · CVE-2026-47886 · CVE-2026-47888 · CVE-2026-47890 · CVE-2026-47892 · CVE-2026-50010 · CVE-2026-55831 · CVE-2026-55833 · CVE-2026-55851 · CVE-2026-56745 · CVE-2026-56746 · CVE-2026-56819 · CVE-2026-56852 · CVE-2026-56854 · CVE-2026-58062 · CVE-2026-59280 · CVE-2026-59282 · CVE-2026-59283 · CVE-2026-59296 · CVE-2026-59313 · CVE-2026-59323 · CVE-2026-59651 · CVE-2026-59887 · CVE-2026-59899 · CVE-2026-59901 · CVE-2026-62243 · CVE-2026-64607 · CVE-2026-67213 · CVE-2026-67312 · CVE-2026-67313 · CVE-2026-67314 · CVE-2026-67320 · CVE-2026-67321 · CVE-2026-68494 · CVE-2026-68497 · CVE-2026-69152 · CVE-2026-69192 · CVE-2026-71290 · CVE-2026-71324 · CVE-2026-71325 · CVE-2026-71327 · CVE-2026-73500 · CVE-2026-73508 · CVE-2026-74835 · CVE-2026-75838 · CVE-2026-75899 · CVE-2026-75931 · CVE-2026-76169 · CVE-2026-81521 · CVE-2026-82417 · CVE-2026-82562 · CVE-2026-84292 · CVE-2026-84375 · CVE-2026-84394 · CVE-2026-84428 · CVE-2026-84445 · CVE-2026-84469 · CVE-2026-84504 · CVE-2026-84961 · CVE-2026-85062 · CVE-2026-85124 · CVE-2026-85152 · CVE-2026-85595 · CVE-2026-85597 · CVE-2026-86063 · CVE-2026-87743 · CVE-2026-88004 · CVE-2026-88007 · CVE-2026-88008 · CVE-2026-88009 · CVE-2026-88011 · CVE-2026-88012 · CVE-2026-88031 · CVE-2026-88878 · CVE-2026-88879 · CVE-2026-90711 · CVE-2026-93749 · CVE-2026-100655 · CVE-2026-100656 · CVE-2026-100666 · CVE-2026-101916 · CVE-2026-102925 · CVE-2026-102930 · CVE-2026-103435 · CVE-2026-109618 · CVE-2026-109619

RHSA-2026:73987: Red Hat Security Advisory: RHOAI 3.3.7 - Red Hat OpenShift AI

CVE-2025-61726 · CVE-2025-66471 · CVE-2025-71408 · CVE-2026-1525 · CVE-2026-1526 · CVE-2026-1528 · CVE-2026-2229 · CVE-2026-5422 · CVE-2026-6321 · CVE-2026-6734 · CVE-2026-9697 · CVE-2026-11816 · CVE-2026-11822 · CVE-2026-11824 · CVE-2026-12151 · CVE-2026-13149 · CVE-2026-15154 · CVE-2026-15378 · CVE-2026-16221 · CVE-2026-16745 · CVE-2026-18951 · CVE-2026-23490 · CVE-2026-25681 · CVE-2026-27136 · CVE-2026-27489 · CVE-2026-27893 · CVE-2026-28356 · CVE-2026-28500 · CVE-2026-28684 · CVE-2026-31230 · CVE-2026-31958 · CVE-2026-32274 · CVE-2026-32286 · CVE-2026-32597 · CVE-2026-33186 · CVE-2026-33231 · CVE-2026-33245 · CVE-2026-33811 · CVE-2026-33814 · CVE-2026-33815 · CVE-2026-33816 · CVE-2026-34445 · CVE-2026-34986 · CVE-2026-34993 · CVE-2026-35397 · CVE-2026-35536 · CVE-2026-39821 · CVE-2026-39828 · CVE-2026-39829 · CVE-2026-39830 · CVE-2026-39831 · CVE-2026-39832 · CVE-2026-39835 · CVE-2026-40110 · CVE-2026-41242 · CVE-2026-42215 · CVE-2026-42294 · CVE-2026-42296 · CVE-2026-42297 · CVE-2026-42338 · CVE-2026-42502 · CVE-2026-42508 · CVE-2026-44240 · CVE-2026-44431 · CVE-2026-44432 · CVE-2026-44727 · CVE-2026-44843 · CVE-2026-45736 · CVE-2026-46595 · CVE-2026-48526 · CVE-2026-48586 · CVE-2026-48710 · CVE-2026-48746 · CVE-2026-48779 · CVE-2026-49855 · CVE-2026-53550 · CVE-2026-54058 · CVE-2026-54283 · CVE-2026-55969 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-59197 · CVE-2026-59199 · CVE-2026-59200 · CVE-2026-59204 · CVE-2026-59205 · CVE-2026-59869 · CVE-2026-59873 · CVE-2026-59874 · CVE-2026-59884 · CVE-2026-59885 · CVE-2026-59886 · CVE-2026-62384 · CVE-2026-63310 · CVE-2026-64834 · CVE-2026-64835 · CVE-2026-66036 · CVE-2026-66037 · CVE-2026-66038 · CVE-2026-66040 · CVE-2026-67322 · CVE-2026-67323 · CVE-2026-67325 · CVE-2026-68770 · CVE-2026-69152 · CVE-2026-69192 · CVE-2026-69243 · CVE-2026-69244 · CVE-2026-71281 · CVE-2026-73089 · CVE-2026-73415 · CVE-2026-73417 · CVE-2026-73627 · CVE-2026-78682 · CVE-2026-79674 · CVE-2026-79675 · CVE-2026-80205 · CVE-2026-81722 · CVE-2026-81724 · CVE-2026-81727 · CVE-2026-84375 · CVE-2026-84445

RHSA-2026:72892: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.16.6 security update

CVE-2026-41178 · CVE-2026-42151 · CVE-2026-42502 · CVE-2026-46600 · CVE-2026-56852 · CVE-2026-84445

RHSA-2026:95517: Red Hat Security Advisory: Multicluster Global Hub 1.7.4 security update

CVE-2026-14199 · CVE-2026-15815 · CVE-2026-17183 · CVE-2026-39834 · CVE-2026-42127 · CVE-2026-63209 · CVE-2026-73501 · CVE-2026-73502 · CVE-2026-76905 · CVE-2026-77354 · CVE-2026-77405 · CVE-2026-77411 · CVE-2026-84445 · CVE-2026-88031 · CVE-2026-92542 · CVE-2026-92543

RHSA-2026:95081: Red Hat Security Advisory: Cluster Observability Operator - 1.5

CVE-2026-19534 · CVE-2026-27145 · CVE-2026-33818 · CVE-2026-39821 · CVE-2026-39822 · CVE-2026-39834 · CVE-2026-42504 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-63209 · CVE-2026-75838 · CVE-2026-75899 · CVE-2026-75931 · CVE-2026-75975 · CVE-2026-76172 · CVE-2026-77301 · CVE-2026-82417 · CVE-2026-84292 · CVE-2026-84304 · CVE-2026-84375 · CVE-2026-84445 · CVE-2026-84961 · CVE-2026-85152 · CVE-2026-87018 · CVE-2026-102276 · CVE-2026-102278 · CVE-2026-109383 · CVE-2026-109829 · CVE-2026-109855 · CVE-2026-109869

openSUSE-SU-2026:11931-1: velero-1.18.4-1.1 on GA media

CVE-2026-81870 · CVE-2026-84445

RHSA-2026:74609: Red Hat Security Advisory: Cluster Observability Operator 1.5.3

CVE-2026-19534 · CVE-2026-39244 · CVE-2026-41178 · CVE-2026-42504 · CVE-2026-45623 · CVE-2026-56864 · CVE-2026-56865 · CVE-2026-59887 · CVE-2026-63199 · CVE-2026-71556 · CVE-2026-73086 · CVE-2026-75899 · CVE-2026-75931 · CVE-2026-75975 · CVE-2026-76172 · CVE-2026-84292 · CVE-2026-84394 · CVE-2026-84445 · CVE-2026-84961 · CVE-2026-92000 · CVE-2026-100690

SUSE-SU-2026:23708-1: Security update for google-cloud-sap-agent

CVE-2026-56852 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:79011: Red Hat Security Advisory: rhc security update

CVE-2026-84445

RHSA-2026:92860: Red Hat Security Advisory: Satellite 6.18 security update

CVE-2026-8924 · CVE-2026-18660 · CVE-2026-19203 · CVE-2026-56852 · CVE-2026-59646 · CVE-2026-63072 · CVE-2026-63076 · CVE-2026-68494 · CVE-2026-68497 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-89407 · CVE-2026-89425 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

SUSE-SU-2026:23852-1: Security update for distribution

CVE-2026-37236 · CVE-2026-39827 · CVE-2026-41178 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

openSUSE-SU-2026:21834-1: Security update for google-cloud-sap-agent

CVE-2026-56852 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:79010: Red Hat Security Advisory: rhc security update

CVE-2026-84445

SUSE-SU-2026:23864-1: Security update for distribution

CVE-2026-37236 · CVE-2026-39827 · CVE-2026-41178 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:95591: Red Hat Security Advisory: Cluster Observability Operator - 1.5

CVE-2026-19534 · CVE-2026-27145 · CVE-2026-33818 · CVE-2026-39821 · CVE-2026-39822 · CVE-2026-39834 · CVE-2026-42504 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-63209 · CVE-2026-75838 · CVE-2026-75899 · CVE-2026-75931 · CVE-2026-75975 · CVE-2026-76172 · CVE-2026-77301 · CVE-2026-82417 · CVE-2026-84292 · CVE-2026-84304 · CVE-2026-84375 · CVE-2026-84445 · CVE-2026-84961 · CVE-2026-85152 · CVE-2026-87018 · CVE-2026-102276 · CVE-2026-102278 · CVE-2026-109383 · CVE-2026-109829 · CVE-2026-109855 · CVE-2026-109869 · CVE-2026-116591

RHSA-2026:92859: Red Hat Security Advisory: Satellite 6.17 security update

CVE-2026-8924 · CVE-2026-18660 · CVE-2026-19203 · CVE-2026-56852 · CVE-2026-59646 · CVE-2026-63072 · CVE-2026-63076 · CVE-2026-68494 · CVE-2026-68497 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-89407 · CVE-2026-89425 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:71117: Red Hat Security Advisory: VolSync v0.16 security fixes and container updates

CVE-2026-46603 · CVE-2026-84445

RHSA-2026:86891: Red Hat Security Advisory: RHOAI 3.5.2 - Red Hat OpenShift AI

CVE-2024-14029 · CVE-2026-13697 · CVE-2026-15679 · CVE-2026-15789 · CVE-2026-18427 · CVE-2026-19534 · CVE-2026-37237 · CVE-2026-49825 · CVE-2026-49855 · CVE-2026-54284 · CVE-2026-56859 · CVE-2026-59296 · CVE-2026-59893 · CVE-2026-62243 · CVE-2026-62384 · CVE-2026-63209 · CVE-2026-63374 · CVE-2026-66007 · CVE-2026-68494 · CVE-2026-68497 · CVE-2026-69097 · CVE-2026-69112 · CVE-2026-69152 · CVE-2026-69243 · CVE-2026-69244 · CVE-2026-71281 · CVE-2026-71491 · CVE-2026-73417 · CVE-2026-73502 · CVE-2026-73508 · CVE-2026-73646 · CVE-2026-75838 · CVE-2026-75899 · CVE-2026-75931 · CVE-2026-75975 · CVE-2026-76098 · CVE-2026-76169 · CVE-2026-76172 · CVE-2026-76222 · CVE-2026-76905 · CVE-2026-77354 · CVE-2026-77874 · CVE-2026-78676 · CVE-2026-78677 · CVE-2026-78679 · CVE-2026-78682 · CVE-2026-79674 · CVE-2026-79675 · CVE-2026-80205 · CVE-2026-81722 · CVE-2026-81724 · CVE-2026-81725 · CVE-2026-81726 · CVE-2026-81727 · CVE-2026-82397 · CVE-2026-82417 · CVE-2026-84292 · CVE-2026-84375 · CVE-2026-84381 · CVE-2026-84382 · CVE-2026-84394 · CVE-2026-84428 · CVE-2026-84445 · CVE-2026-84469 · CVE-2026-84504 · CVE-2026-84782 · CVE-2026-84961 · CVE-2026-85124 · CVE-2026-85152 · CVE-2026-85525 · CVE-2026-86332 · CVE-2026-87776 · CVE-2026-87817 · CVE-2026-87819 · CVE-2026-88029 · CVE-2026-88031 · CVE-2026-89425 · CVE-2026-91990 · CVE-2026-93348 · CVE-2026-93599 · CVE-2026-93657 · CVE-2026-93749 · CVE-2026-96749 · CVE-2026-96775 · CVE-2026-102925 · CVE-2026-102930 · CVE-2026-102937 · CVE-2026-102938 · CVE-2026-102990 · CVE-2026-104851 · CVE-2026-104852 · CVE-2026-104861 · CVE-2026-104873

RHSA-2026:73538: Red Hat Security Advisory: Red Hat Lightspeed (formerly Insights) for Runtimes security update

CVE-2026-33818 · CVE-2026-39820 · CVE-2026-41178 · CVE-2026-42499 · CVE-2026-42504 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-84445

RHSA-2026:83593: Red Hat Security Advisory: RHTAS 1.0.3 - GA Release Of the Policy Controller Operator

CVE-2026-41178 · CVE-2026-56854 · CVE-2026-84445

openSUSE-SU-2026:21898-1: Security update for distribution

CVE-2026-37236 · CVE-2026-39827 · CVE-2026-41178 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:72399: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.20.1

CVE-2025-6170 · CVE-2026-1965 · CVE-2026-3783 · CVE-2026-5435 · CVE-2026-5928 · CVE-2026-6238 · CVE-2026-6653 · CVE-2026-8286 · CVE-2026-8458 · CVE-2026-8927 · CVE-2026-9547 · CVE-2026-11822 · CVE-2026-11824 · CVE-2026-11979 · CVE-2026-13757 · CVE-2026-14164 · CVE-2026-14456 · CVE-2026-14457 · CVE-2026-15588 · CVE-2026-16118 · CVE-2026-18798 · CVE-2026-41989 · CVE-2026-46600 · CVE-2026-48864 · CVE-2026-54369 · CVE-2026-54370 · CVE-2026-54371 · CVE-2026-54874 · CVE-2026-56392 · CVE-2026-56852 · CVE-2026-56854 · CVE-2026-58010 · CVE-2026-58011 · CVE-2026-58012 · CVE-2026-58013 · CVE-2026-58014 · CVE-2026-58015 · CVE-2026-58016 · CVE-2026-58055 · CVE-2026-63072 · CVE-2026-63073 · CVE-2026-63074 · CVE-2026-63075 · CVE-2026-63076 · CVE-2026-63379 · CVE-2026-63381 · CVE-2026-63382 · CVE-2026-63383 · CVE-2026-63384 · CVE-2026-63385 · CVE-2026-63387 · CVE-2026-63388 · CVE-2026-84445

RHSA-2026:83013: Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.0.17

CVE-2026-18140 · CVE-2026-25681 · CVE-2026-27136 · CVE-2026-29181 · CVE-2026-32283 · CVE-2026-32285 · CVE-2026-33186 · CVE-2026-33818 · CVE-2026-35469 · CVE-2026-41178 · CVE-2026-42151 · CVE-2026-42154 · CVE-2026-42499 · CVE-2026-42502 · CVE-2026-46600 · CVE-2026-56852 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-63209 · CVE-2026-84445

RHSA-2026:94612: Red Hat Security Advisory: Red Hat Edge Manager Version 1.2.2 Security Update

CVE-2026-73501 · CVE-2026-73502 · CVE-2026-77354 · CVE-2026-84445 · CVE-2026-88031 · CVE-2026-92615 · CVE-2026-102276 · CVE-2026-102278

SUSE-SU-2026:23688-1: Security update for helm

CVE-2026-37236 · CVE-2026-41178 · CVE-2026-48978 · CVE-2026-50151 · CVE-2026-63308 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

openSUSE-SU-2026:12114-1: alloy-1.20.1-1.1 on GA media

CVE-2026-14362 · CVE-2026-63209 · CVE-2026-81871 · CVE-2026-81872 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

SUSE-SU-2026:23730-1: Security update for helm

CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

openSUSE-SU-2026:21843-1: Security update for cadvisor

CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

openSUSE-SU-2026:21886-1: Security update for mcphost

CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:72275: Red Hat Security Advisory: rhc security update

CVE-2026-84445

RHSA-2026:72879: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.17.3 security update

CVE-2026-17106 · CVE-2026-41178 · CVE-2026-46600 · CVE-2026-56852 · CVE-2026-84445

openSUSE-SU-2026:22145-1: Security update for amazon-ecs-init

CVE-2026-84445 · CVE-2026-89090

RHSA-2026:72848: Red Hat Security Advisory: multicluster engine for Kubernetes v2.11.7 security update

CVE-2026-39830 · CVE-2026-39831 · CVE-2026-41178 · CVE-2026-46597 · CVE-2026-56858 · CVE-2026-56860 · CVE-2026-73500 · CVE-2026-75899 · CVE-2026-75931 · CVE-2026-75975 · CVE-2026-76172 · CVE-2026-84445

openSUSE-SU-2026:11743-1: google-osconfig-agent-20260908.00-1.1 on GA media

CVE-2026-84303 · CVE-2026-84445

RHSA-2026:73125: Red Hat Security Advisory: Helm CLI for Red Hat OpenShift v4.3.0 release

CVE-2026-84445

RHSA-2026:79326: Red Hat Security Advisory: Helm CLI for Red Hat OpenShift 4.3.0 container image release

CVE-2026-84445

RHSA-2026:76743: Red Hat Security Advisory: opentelemetry-collector security update

CVE-2026-84445

RHSA-2026:71116: Red Hat Security Advisory: VolSync v0.15 security fixes and container updates

CVE-2026-46603 · CVE-2026-84445

RHSA-2026:83596: Red Hat Security Advisory: RHTAS 1.4.4 - Red Hat Trusted Artifact Signer Release

CVE-2026-41178 · CVE-2026-73500 · CVE-2026-84445

openSUSE-SU-2026:12073-1: inspektor-gadget-0.57.0-1.1 on GA media

CVE-2026-84445

openSUSE-SU-2026:21841-1: Security update for hauler

CVE-2026-41888 · CVE-2026-56854 · CVE-2026-56855 · CVE-2026-78662 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:70593: Red Hat Security Advisory: Network Observability 1.12.3 for OpenShift

CVE-2026-33818 · CVE-2026-56852 · CVE-2026-56853 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-65819 · CVE-2026-67213 · CVE-2026-75899 · CVE-2026-75931 · CVE-2026-75975 · CVE-2026-76172 · CVE-2026-84292 · CVE-2026-84375 · CVE-2026-84394 · CVE-2026-84445

SUSE-SU-2026:23546-1: Security update for helm

CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

openSUSE-SU-2026:11740-1: azure-storage-azcopy-10.32.8-1.1 on GA media

CVE-2026-84304 · CVE-2026-84445

RHSA-2026:76744: Red Hat Security Advisory: opentelemetry-collector security update

CVE-2026-84445

openSUSE-SU-2026:11700-1: hauler-2.1.0-3.1 on GA media

CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

openSUSE-SU-2026:22221-1: Security update for warewulf4

CVE-2026-84303 · CVE-2026-84445

openSUSE-SU-2026:12107-1: amazon-ecs-init-1.108.0-1.1 on GA media

CVE-2026-84445 · CVE-2026-89090

SUSE-SU-2026:24265-1: Security update for amazon-ecs-init

CVE-2026-84445 · CVE-2026-89090

RHSA-2026:72476: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.20.1

CVE-2025-6170 · CVE-2026-1965 · CVE-2026-3783 · CVE-2026-5435 · CVE-2026-5928 · CVE-2026-6238 · CVE-2026-6653 · CVE-2026-8286 · CVE-2026-8458 · CVE-2026-8927 · CVE-2026-9547 · CVE-2026-11822 · CVE-2026-11824 · CVE-2026-11979 · CVE-2026-13757 · CVE-2026-14164 · CVE-2026-14456 · CVE-2026-14457 · CVE-2026-15588 · CVE-2026-16118 · CVE-2026-18798 · CVE-2026-41989 · CVE-2026-46600 · CVE-2026-48864 · CVE-2026-54369 · CVE-2026-54370 · CVE-2026-54371 · CVE-2026-54874 · CVE-2026-56392 · CVE-2026-56852 · CVE-2026-56854 · CVE-2026-58010 · CVE-2026-58011 · CVE-2026-58012 · CVE-2026-58013 · CVE-2026-58014 · CVE-2026-58015 · CVE-2026-58016 · CVE-2026-58055 · CVE-2026-63072 · CVE-2026-63073 · CVE-2026-63074 · CVE-2026-63075 · CVE-2026-63076 · CVE-2026-63379 · CVE-2026-63381 · CVE-2026-63382 · CVE-2026-63383 · CVE-2026-63384 · CVE-2026-63385 · CVE-2026-63387 · CVE-2026-63388 · CVE-2026-74860 · CVE-2026-84445 · CVE-2026-86138 · CVE-2026-86140 · CVE-2026-86142 · CVE-2026-86143 · CVE-2026-86144

RHSA-2026:92593: Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.6.2

CVE-2026-41178 · CVE-2026-42499 · CVE-2026-63209 · CVE-2026-77619 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:72854: Red Hat Security Advisory: multicluster engine for Kubernetes v2.8.11 security update

CVE-2025-22866 · CVE-2026-25681 · CVE-2026-33818 · CVE-2026-41178 · CVE-2026-56852 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-59879 · CVE-2026-73500 · CVE-2026-84445

RHSA-2026:92372: Red Hat Security Advisory: osbuild-composer security update

CVE-2026-42504 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

openSUSE-SU-2026:12163-1: gh-2.102.0-1.1 on GA media

CVE-2026-41178 · CVE-2026-59831 · CVE-2026-63209 · CVE-2026-72924 · CVE-2026-78669 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:83663: Red Hat Security Advisory: MTV RHEL9 Images

CVE-2026-50162 · CVE-2026-56852 · CVE-2026-59887 · CVE-2026-84445

openSUSE-SU-2026:22224-1: Security update for rqlite

CVE-2026-39821 · CVE-2026-63209 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445 · CVE-2026-89090

RHSA-2026:91958: Red Hat Security Advisory: osbuild-composer security update

CVE-2026-41178 · CVE-2026-42504 · CVE-2026-55677 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:92510: Red Hat Security Advisory: RHOAI 3.4.6 - Red Hat OpenShift AI

CVE-2023-54404 · CVE-2026-11822 · CVE-2026-11824 · CVE-2026-13717 · CVE-2026-16221 · CVE-2026-17106 · CVE-2026-18446 · CVE-2026-25681 · CVE-2026-26007 · CVE-2026-27136 · CVE-2026-33814 · CVE-2026-33818 · CVE-2026-39821 · CVE-2026-39834 · CVE-2026-41178 · CVE-2026-42502 · CVE-2026-45819 · CVE-2026-45820 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-57516 · CVE-2026-59951 · CVE-2026-63209 · CVE-2026-63374 · CVE-2026-65898 · CVE-2026-67312 · CVE-2026-67314 · CVE-2026-67320 · CVE-2026-67321 · CVE-2026-69097 · CVE-2026-69153 · CVE-2026-73086 · CVE-2026-73088 · CVE-2026-73089 · CVE-2026-73643 · CVE-2026-75838 · CVE-2026-75899 · CVE-2026-75931 · CVE-2026-75975 · CVE-2026-76172 · CVE-2026-76844 · CVE-2026-77301 · CVE-2026-78679 · CVE-2026-82397 · CVE-2026-83663 · CVE-2026-84375 · CVE-2026-84445 · CVE-2026-85393 · CVE-2026-85525 · CVE-2026-87018 · CVE-2026-90711 · CVE-2026-91990 · CVE-2026-92599 · CVE-2026-93690 · CVE-2026-93749 · CVE-2026-94637 · CVE-2026-96640 · CVE-2026-96643 · CVE-2026-96644 · CVE-2026-96778 · CVE-2026-96804 · CVE-2026-97687 · CVE-2026-97689 · CVE-2026-102267 · CVE-2026-102271 · CVE-2026-102272 · CVE-2026-102276 · CVE-2026-102278 · CVE-2026-102282 · CVE-2026-104150 · CVE-2026-104851 · CVE-2026-105922 · CVE-2026-106445 · CVE-2026-106446 · CVE-2026-109156 · CVE-2026-109383 · CVE-2026-109527 · CVE-2026-109829 · CVE-2026-109869 · CVE-2026-109956 · CVE-2026-110856 · CVE-2026-110857 · CVE-2026-110858 · CVE-2026-110859 · CVE-2026-111064 · CVE-2026-111066 · CVE-2026-111497 · CVE-2026-112390 · CVE-2026-112391 · CVE-2026-112392 · CVE-2026-112397 · CVE-2026-112399 · CVE-2026-112400 · CVE-2026-112402 · CVE-2026-112404 · CVE-2026-112405 · CVE-2026-112893 · CVE-2026-112894 · CVE-2026-112895 · CVE-2026-112896 · CVE-2026-112897 · CVE-2026-112940 · CVE-2026-114145

RHSA-2026:95360: Red Hat Security Advisory: Red Hat build of Cryostat security update

CVE-2026-33818 · CVE-2026-39834 · CVE-2026-46603 · CVE-2026-46604 · CVE-2026-49978 · CVE-2026-56858 · CVE-2026-56862 · CVE-2026-59879 · CVE-2026-78669 · CVE-2026-82417 · CVE-2026-83663 · CVE-2026-84445 · CVE-2026-88031 · CVE-2026-90711 · CVE-2026-91135 · CVE-2026-94637 · CVE-2026-102276 · CVE-2026-102278 · CVE-2026-106445 · CVE-2026-106446

openSUSE-SU-2026:12375-1: warewulf4-4.7.1-2.1 on GA media

CVE-2026-84303 · CVE-2026-84445

openSUSE-SU-2026:21996-1: Security update for v2ray-core

CVE-2026-39821 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:95272: Red Hat Security Advisory: osbuild-composer security update

CVE-2026-84445

RHSA-2026:74430: Red Hat Security Advisory: OpenShift Container Platform 4.22.17 security and extras update

CVE-2026-27136 · CVE-2026-84445 · CVE-2026-87114

RHSA-2026:94498: Red Hat Security Advisory: Red Hat OpenShift API for Data Protection - 1.4.12

CVE-2026-27145 · CVE-2026-32283 · CVE-2026-33818 · CVE-2026-39821 · CVE-2026-39833 · CVE-2026-39834 · CVE-2026-41178 · CVE-2026-42504 · CVE-2026-56852 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-63209 · CVE-2026-84445

RHSA-2026:94528: Red Hat Security Advisory: OpenShift Container Platform 5.0 CNF vRAN extras topology aware lifecycle manager update

CVE-2026-84445

RHSA-2026:72849: Red Hat Security Advisory: multicluster engine for Kubernetes v2.17.3 security update

CVE-2026-41178 · CVE-2026-56852 · CVE-2026-73500 · CVE-2026-75899 · CVE-2026-75931 · CVE-2026-75975 · CVE-2026-76172 · CVE-2026-84445 · CVE-2026-88031

openSUSE-SU-2026:11695-1: cadvisor-0.60.5-3.1 on GA media

CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:83598: Red Hat Security Advisory: RHTAS 1.4.4 - Red Hat Trusted Artifact Signer Release

CVE-2026-4800 · CVE-2026-41178 · CVE-2026-45623 · CVE-2026-56854 · CVE-2026-59873 · CVE-2026-59874 · CVE-2026-67213 · CVE-2026-67214 · CVE-2026-69153 · CVE-2026-73086 · CVE-2026-73088 · CVE-2026-73089 · CVE-2026-73500 · CVE-2026-73643 · CVE-2026-73646 · CVE-2026-84375 · CVE-2026-84445 · CVE-2026-93749

RHSA-2026:72394: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.20.1

CVE-2025-6170 · CVE-2026-1965 · CVE-2026-3783 · CVE-2026-5435 · CVE-2026-5928 · CVE-2026-6238 · CVE-2026-6653 · CVE-2026-8286 · CVE-2026-8458 · CVE-2026-8927 · CVE-2026-9547 · CVE-2026-11822 · CVE-2026-11824 · CVE-2026-11979 · CVE-2026-13757 · CVE-2026-14164 · CVE-2026-14456 · CVE-2026-14457 · CVE-2026-15588 · CVE-2026-16118 · CVE-2026-18798 · CVE-2026-41989 · CVE-2026-46600 · CVE-2026-48864 · CVE-2026-54369 · CVE-2026-54370 · CVE-2026-54371 · CVE-2026-54874 · CVE-2026-56392 · CVE-2026-56852 · CVE-2026-56854 · CVE-2026-58010 · CVE-2026-58011 · CVE-2026-58012 · CVE-2026-58013 · CVE-2026-58014 · CVE-2026-58015 · CVE-2026-58016 · CVE-2026-58055 · CVE-2026-63072 · CVE-2026-63073 · CVE-2026-63074 · CVE-2026-63075 · CVE-2026-63076 · CVE-2026-63379 · CVE-2026-63381 · CVE-2026-63382 · CVE-2026-63383 · CVE-2026-63384 · CVE-2026-63385 · CVE-2026-63387 · CVE-2026-63388 · CVE-2026-84445

openSUSE-SU-2026:11718-1: helm-4.2.4-3.1 on GA media

CVE-2026-37236 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:85247: Red Hat Security Advisory: DevWorkspace Operator 1.0.0 release.

CVE-2026-33818 · CVE-2026-41178 · CVE-2026-56852 · CVE-2026-56853 · CVE-2026-56854 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-84445

SUSE-SU-2026:4292-1: Security update for google-osconfig-agent

CVE-2026-41178 · CVE-2026-56852 · CVE-2026-56854 · CVE-2026-56855 · CVE-2026-78662 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

openSUSE-SU-2026:11697-1: distribution-registry-3.1.1-6.1 on GA media

CVE-2026-37236 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:79088: Red Hat Security Advisory: Red Hat Developer Hub 1.10.5 release.

CVE-2026-13697 · CVE-2026-14456 · CVE-2026-18798 · CVE-2026-19534 · CVE-2026-47683 · CVE-2026-47686 · CVE-2026-47698 · CVE-2026-55553 · CVE-2026-63072 · CVE-2026-63076 · CVE-2026-67213 · CVE-2026-67214 · CVE-2026-67422 · CVE-2026-75899 · CVE-2026-75931 · CVE-2026-75975 · CVE-2026-76172 · CVE-2026-77037 · CVE-2026-77078 · CVE-2026-82333 · CVE-2026-82417 · CVE-2026-84292 · CVE-2026-84375 · CVE-2026-84394 · CVE-2026-84445 · CVE-2026-84961 · CVE-2026-87776 · CVE-2026-88932 · CVE-2026-89011 · CVE-2026-92934 · CVE-2026-92935 · CVE-2026-92937 · CVE-2026-92938 · CVE-2026-92939 · CVE-2026-92940 · CVE-2026-92941 · CVE-2026-92942 · CVE-2026-92944 · CVE-2026-92946 · CVE-2026-92947 · CVE-2026-92948 · CVE-2026-92950 · CVE-2026-92951 · CVE-2026-92953 · CVE-2026-92954 · CVE-2026-92955 · CVE-2026-92956 · CVE-2026-92957 · CVE-2026-92958 · CVE-2026-92959 · CVE-2026-92960 · CVE-2026-92961 · CVE-2026-93603 · CVE-2026-93604 · CVE-2026-93605 · CVE-2026-93606

SUSE-SU-2026:23736-1: Security update for google-guest-agent

CVE-2026-56852 · CVE-2026-56854 · CVE-2026-56855 · CVE-2026-78662 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

openSUSE-SU-2026:11920-1: grafana-12.4.11-1.1 on GA media

CVE-2026-15815 · CVE-2026-56855 · CVE-2026-76154 · CVE-2026-79656 · CVE-2026-83530 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:89131: Red Hat Security Advisory: Red Hat OpenShift Builds 1.9.2

CVE-2026-33818 · CVE-2026-39821 · CVE-2026-40161 · CVE-2026-40938 · CVE-2026-46600 · CVE-2026-56851 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84304 · CVE-2026-84445 · CVE-2026-97031 · CVE-2026-111943 · CVE-2026-114406

openSUSE-SU-2026:12235-1: containerized-data-importer1.65-api-1.65.0-4.1 on GA media

CVE-2026-61801 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78669 · CVE-2026-84445

openSUSE-SU-2026:21879-1: Security update for google-guest-agent

CVE-2026-56852 · CVE-2026-56854 · CVE-2026-56855 · CVE-2026-78662 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

SUSE-SU-2026:23729-1: Security update for google-cloud-sap-agent

CVE-2026-56852 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:72475: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.20.1

CVE-2025-6170 · CVE-2026-1965 · CVE-2026-3783 · CVE-2026-5435 · CVE-2026-5928 · CVE-2026-6238 · CVE-2026-6653 · CVE-2026-8286 · CVE-2026-8458 · CVE-2026-8927 · CVE-2026-9547 · CVE-2026-11822 · CVE-2026-11824 · CVE-2026-11979 · CVE-2026-13757 · CVE-2026-14164 · CVE-2026-14456 · CVE-2026-14457 · CVE-2026-15588 · CVE-2026-16118 · CVE-2026-18798 · CVE-2026-29181 · CVE-2026-33186 · CVE-2026-39883 · CVE-2026-41989 · CVE-2026-46600 · CVE-2026-48864 · CVE-2026-54369 · CVE-2026-54370 · CVE-2026-54371 · CVE-2026-54874 · CVE-2026-56392 · CVE-2026-56852 · CVE-2026-56854 · CVE-2026-58010 · CVE-2026-58011 · CVE-2026-58012 · CVE-2026-58013 · CVE-2026-58014 · CVE-2026-58015 · CVE-2026-58016 · CVE-2026-58055 · CVE-2026-63072 · CVE-2026-63073 · CVE-2026-63074 · CVE-2026-63075 · CVE-2026-63076 · CVE-2026-63379 · CVE-2026-63381 · CVE-2026-63382 · CVE-2026-63383 · CVE-2026-63384 · CVE-2026-63385 · CVE-2026-63387 · CVE-2026-63388 · CVE-2026-74860 · CVE-2026-81870 · CVE-2026-84445 · CVE-2026-86138 · CVE-2026-86140 · CVE-2026-86142 · CVE-2026-86143 · CVE-2026-86144

RHSA-2026:79368: Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.11.2 release

CVE-2026-63209 · CVE-2026-83663 · CVE-2026-84445 · CVE-2026-94637

RHSA-2026:76145: Red Hat Security Advisory: Red Hat build of Kueue 1.4.3 release

CVE-2026-84445

RHSA-2026:72853: Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.7 security update

CVE-2026-25681 · CVE-2026-33818 · CVE-2026-39820 · CVE-2026-41178 · CVE-2026-46600 · CVE-2026-56852 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-73500 · CVE-2026-84445

RHSA-2026:72884: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.15.8 security update

CVE-2026-39821 · CVE-2026-41178 · CVE-2026-46600 · CVE-2026-56852 · CVE-2026-84445

openSUSE-SU-2026:12186-1: rqlite-10.6.1-1.1 on GA media

CVE-2026-63209 · CVE-2026-84304 · CVE-2026-84445 · CVE-2026-89090

SUSE-SU-2026:23831-1: Security update for google-guest-agent

CVE-2026-56852 · CVE-2026-56854 · CVE-2026-56855 · CVE-2026-78662 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:79575: Red Hat Security Advisory: RHACS 4.11.5 security and bug fix update

CVE-2026-84304 · CVE-2026-84445

SUSE-SU-2026:23506-1: Security update for helm

CVE-2026-37236 · CVE-2026-41178 · CVE-2026-48978 · CVE-2026-50151 · CVE-2026-63308 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:92307: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.13.14 security update

CVE-2026-14199 · CVE-2026-15815 · CVE-2026-33818 · CVE-2026-37236 · CVE-2026-39834 · CVE-2026-56853 · CVE-2026-56854 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-63209 · CVE-2026-77354 · CVE-2026-77405 · CVE-2026-77411 · CVE-2026-84304 · CVE-2026-84375 · CVE-2026-84445 · CVE-2026-88031 · CVE-2026-93748 · CVE-2026-106445 · CVE-2026-106446

RHSA-2026:87410: Red Hat Security Advisory: RHOAI 2.25.12 - Red Hat OpenShift AI

CVE-2024-12224 · CVE-2025-14920 · CVE-2025-14921 · CVE-2025-14924 · CVE-2025-14925 · CVE-2025-14926 · CVE-2025-14927 · CVE-2025-14928 · CVE-2025-14929 · CVE-2025-14930 · CVE-2025-61726 · CVE-2025-61729 · CVE-2026-5241 · CVE-2026-5497 · CVE-2026-6734 · CVE-2026-8643 · CVE-2026-9697 · CVE-2026-11822 · CVE-2026-11824 · CVE-2026-12151 · CVE-2026-12860 · CVE-2026-15143 · CVE-2026-15574 · CVE-2026-15679 · CVE-2026-15925 · CVE-2026-16221 · CVE-2026-18427 · CVE-2026-18446 · CVE-2026-18949 · CVE-2026-19481 · CVE-2026-19484 · CVE-2026-19534 · CVE-2026-25681 · CVE-2026-25960 · CVE-2026-27136 · CVE-2026-28390 · CVE-2026-28684 · CVE-2026-31812 · CVE-2026-32283 · CVE-2026-33186 · CVE-2026-33805 · CVE-2026-33811 · CVE-2026-33814 · CVE-2026-34993 · CVE-2026-39821 · CVE-2026-39852 · CVE-2026-39892 · CVE-2026-40682 · CVE-2026-41178 · CVE-2026-42502 · CVE-2026-42561 · CVE-2026-44431 · CVE-2026-44432 · CVE-2026-44660 · CVE-2026-44705 · CVE-2026-45820 · CVE-2026-47219 · CVE-2026-48526 · CVE-2026-48710 · CVE-2026-48746 · CVE-2026-49114 · CVE-2026-49825 · CVE-2026-49855 · CVE-2026-50559 · CVE-2026-54283 · CVE-2026-54399 · CVE-2026-54428 · CVE-2026-55831 · CVE-2026-55833 · CVE-2026-56121 · CVE-2026-56746 · CVE-2026-56819 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-58059 · CVE-2026-59296 · CVE-2026-59879 · CVE-2026-59884 · CVE-2026-59885 · CVE-2026-59886 · CVE-2026-59899 · CVE-2026-62243 · CVE-2026-62384 · CVE-2026-63209 · CVE-2026-63374 · CVE-2026-65898 · CVE-2026-65918 · CVE-2026-66007 · CVE-2026-67213 · CVE-2026-67214 · CVE-2026-67312 · CVE-2026-68494 · CVE-2026-68497 · CVE-2026-68770 · CVE-2026-69097 · CVE-2026-69112 · CVE-2026-69152 · CVE-2026-69153 · CVE-2026-69243 · CVE-2026-69244 · CVE-2026-71281 · CVE-2026-73086 · CVE-2026-73088 · CVE-2026-73089 · CVE-2026-73415 · CVE-2026-73417 · CVE-2026-73502 · CVE-2026-73508 · CVE-2026-73620 · CVE-2026-73622 · CVE-2026-73623 · CVE-2026-73624 · CVE-2026-73625 · CVE-2026-73627 · CVE-2026-73646 · CVE-2026-75838 · CVE-2026-75899 · CVE-2026-75931 · CVE-2026-75975 · CVE-2026-76098 · CVE-2026-76169 · CVE-2026-76172 · CVE-2026-76222 · CVE-2026-76905 · CVE-2026-77354 · CVE-2026-77874 · CVE-2026-78676 · CVE-2026-78677 · CVE-2026-78679 · CVE-2026-78682 · CVE-2026-79674 · CVE-2026-79675 · CVE-2026-80205 · CVE-2026-81722 · CVE-2026-81724 · CVE-2026-81727 · CVE-2026-82397 · CVE-2026-82417 · CVE-2026-84292 · CVE-2026-84375 · CVE-2026-84394 · CVE-2026-84428 · CVE-2026-84445 · CVE-2026-84469 · CVE-2026-84504 · CVE-2026-84782 · CVE-2026-84961 · CVE-2026-85124 · CVE-2026-85152 · CVE-2026-85525 · CVE-2026-86049 · CVE-2026-86332 · CVE-2026-87776 · CVE-2026-87817 · CVE-2026-87819 · CVE-2026-88029 · CVE-2026-88031 · CVE-2026-89418 · CVE-2026-89425 · CVE-2026-91777 · CVE-2026-91990 · CVE-2026-92599 · CVE-2026-93599 · CVE-2026-93657 · CVE-2026-93749 · CVE-2026-96749 · CVE-2026-102831 · CVE-2026-102925 · CVE-2026-102930 · CVE-2026-102937 · CVE-2026-102938 · CVE-2026-103262 · CVE-2026-104851 · CVE-2026-105744

RHSA-2026:95577: Red Hat Security Advisory: OpenShift Container Platform 5.0 CNF IBU extras update

CVE-2026-84445

SUSE-SU-2026:4272-1: Security update for google-guest-agent

CVE-2026-33186 · CVE-2026-56852 · CVE-2026-56854 · CVE-2026-56855 · CVE-2026-78662 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

msrc_CVE-2026-84445: gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers

CVE-2026-84445

openSUSE-SU-2026:11828-1: amazon-cloudwatch-agent-1.300072.0-1.1 on GA media

CVE-2026-37236 · CVE-2026-84304 · CVE-2026-84445

openSUSE-SU-2026:11911-1: wait4x-3.7.2-1.1 on GA media

CVE-2026-84304 · CVE-2026-84445

RHSA-2026:72470: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.20.1

CVE-2025-6170 · CVE-2026-1965 · CVE-2026-3783 · CVE-2026-5435 · CVE-2026-5928 · CVE-2026-6238 · CVE-2026-6653 · CVE-2026-8286 · CVE-2026-8458 · CVE-2026-8927 · CVE-2026-9547 · CVE-2026-11822 · CVE-2026-11824 · CVE-2026-11979 · CVE-2026-13757 · CVE-2026-14164 · CVE-2026-14456 · CVE-2026-14457 · CVE-2026-15588 · CVE-2026-16118 · CVE-2026-18798 · CVE-2026-41989 · CVE-2026-46600 · CVE-2026-48864 · CVE-2026-54369 · CVE-2026-54370 · CVE-2026-54371 · CVE-2026-54874 · CVE-2026-56392 · CVE-2026-56852 · CVE-2026-56854 · CVE-2026-58010 · CVE-2026-58011 · CVE-2026-58012 · CVE-2026-58013 · CVE-2026-58014 · CVE-2026-58015 · CVE-2026-58016 · CVE-2026-58055 · CVE-2026-63072 · CVE-2026-63073 · CVE-2026-63074 · CVE-2026-63075 · CVE-2026-63076 · CVE-2026-63379 · CVE-2026-63381 · CVE-2026-63382 · CVE-2026-63383 · CVE-2026-63384 · CVE-2026-63385 · CVE-2026-63387 · CVE-2026-63388 · CVE-2026-74860 · CVE-2026-84445 · CVE-2026-86138 · CVE-2026-86140 · CVE-2026-86142 · CVE-2026-86143 · CVE-2026-86144

RHSA-2026:82346: Red Hat Security Advisory: opentelemetry-collector security update

CVE-2026-84445

RHSA-2026:91216: Red Hat Security Advisory: Red Hat Cost Management On-Premise container image update

CVE-2026-56859 · CVE-2026-56860 · CVE-2026-84445

RHSA-2026:83597: Red Hat Security Advisory: RHTAS 1.4.4 - Red Hat Trusted Artifact Signer Release

CVE-2026-41178 · CVE-2026-56854 · CVE-2026-71556 · CVE-2026-73500 · CVE-2026-84445

openSUSE-SU-2026:11699-1: google-guest-agent-20260903.00-1.1 on GA media

CVE-2026-56854 · CVE-2026-84445

openSUSE-SU-2026:12241-1: kubevirt1.8-container-disk-1.8.4-7.1 on GA media

CVE-2026-56854 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78662 · CVE-2026-78669 · CVE-2026-84303 · CVE-2026-84304 · CVE-2026-84445

RHSA-2026:83662: Red Hat Security Advisory: MTV RHEL9 Images

CVE-2026-50162 · CVE-2026-56852 · CVE-2026-59887 · CVE-2026-84445 · CVE-2026-88031

Source published
Sep 14, 2026, 4:11:41 PM (timezone not stated)
Source modified
Sep 14, 2026, 4:36:14 PM (timezone not stated)
Observed here
9 Nov 2026 16:06:11 UTC
Source terms
ENISA EUVD · source terms and attribution apply

Original source record · Cite this exact observation · Complete original publisher JSON

This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: euvd · ENISA EUVD · source terms and attribution apply. Source text is retained; field grouping and change labels are provided by ChangeIntel.

EUVD CVSS 4.0 · 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

nvd · CVE-2026-84445

Published

gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer() allow internal/transport/http2_server.go to accept an RPC containing neither the :authority header nor the Host header, …

gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer() allow internal/transport/http2_server.go to accept an RPC containing neither the :authority header nor the Host header, while RouteAndProcess in internal/xds/server/routing.go assumes that an authority value exists and indexes the empty slice. A remote client that can complete transport connection establishment can trigger an index-out-of-bounds panic that is not recovered by the per-RPC goroutine and terminates the entire server process. In insecure or ordinary TLS deployments the request can be unauthenticated, while strict mTLS or ALTS deployments require valid transport credentials before the malformed RPC can reach the interceptor. This issue is fixed in versions 1.82.2 and 1.83.2.

NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON.

Source analysis status: Awaiting Analysis

Weakness classifications: CWE-129 · CWE-248

Original publisher date fields

published: 2026-09-14T17:17:51.743

lastModified: 2026-09-25T14:10:13.927

Source published
14 Sep 2026 17:17:51 UTC
Source modified
25 Sep 2026 14:10:13 UTC
Observed here
25 Oct 2026 16:19:16 UTC
Source terms
NIST NVD usage terms; underlying source attribution retained

Original source record · Cite this exact observation · Complete original publisher JSON

This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: nvd · NIST NVD usage terms; underlying source attribution retained. Source text is retained; field grouping and change labels are provided by ChangeIntel.

CVSS 4.0 · [email protected] · Secondary · 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

osv · GHSA-2v4p-qf9q-27wj

Published

gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers

A vulnerability exists in gRPC-Go servers configured with `xds.NewGRPCServer()` where a crafted request missing both `:authority` and `Host` headers can cause a server panic, resulting in a Denial of Service (DoS). Servers built with `xds.NewGRPCServer` install an xDS routing interceptor on every RPC. This interceptor looks up the request’s `:authority` header to pick a virtual host. The HTTP/2 server transport previously accepted requests that had neither `:authority` nor `Host`. When this happened, the xDS routing interceptor attempted to access the first element of an empty slice of authorities, leading to an index out of bounds panic. Since the per-RPC goroutine does not recover from panics, the entire server process would terminate. This panic occurs in the interceptor pipeline, meaning the transport credentials handshake (TLS, mTLS, or ALTS) and HTTP/2 connection establishment must complete successfully before the crafted request can reach this logic. - Insecure/Standard TLS: If the server permits insecure (plaintext) connections or standard credentials (where client certs are not checked), any unauthenticated remote attacker can trigger the crash. - mTLS / ALTS: If strict transport-level authentication is enforced at the network edge or transport layer (e.g., requiring a valid client certificate), the attacker must possess valid transport credentials to initiate the stream and trigger the panic. ### Impact An attacker can cause a complete outage of the gRPC server by sending a request missing both `:authority` and `Host` headers, provided they can successfully establish a transport connection. ### Patches The issue has been addressed in `master` (and backported to `1.84.0`, `1.83.2` and `1.82.2`). The fix updates the HTTP/2 transport layer to reject requests missing both `:authority` and `Host` headers early, maintaining consistency with and other gRPC language implementations.

Source published
8 Sep 2026 21:21:43 UTC
Source modified
25 Sep 2026 18:00:05 UTC
Observed here
24 Oct 2026 13:19:41 UTC
Source terms
GitHub Advisory Database · CC-BY-4.0

Original source record · Cite this exact observation · Complete original publisher JSON

This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: osv · GitHub Advisory Database · CC-BY-4.0. Source text is retained; field grouping and change labels are provided by ChangeIntel.

CVSS_V4 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Publisher rating · HIGH

osv · GO-2026-6443

Published

Server panic via missing authority or Host headers in google.golang.org/grpc

In google.golang.org/grpc, servers configured with xDS routing can panic when processing requests that lack both :authority and Host headers. The HTTP/2 transport layer accepted requests missing these headers, and the xDS server routing interceptor attempted to index the empty authority slice, causing an unhandled panic and terminating the server.

Source published
15 Sep 2026 18:39:25 UTC
Source modified
7 Oct 2026 17:45:12 UTC
Observed here
24 Oct 2026 13:19:41 UTC
Source terms
OSV · upstream source license applies

Original source record · Cite this exact observation · Complete original publisher JSON

This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: osv · OSV · upstream source license applies. Source text is retained; field grouping and change labels are provided by ChangeIntel.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 11 Nov 12:06 UTC · 274 of 275 readable · 273 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.