Updated daily
The most urgent issue is CVE-2026-113709 in Argo CD, rated CVSS 9.9 Critical. A repository-controlled Helm plugin can be executed during Kustomize builds when `--enable-helm` is enabled, potentially exposing repository credentials and enabling code execution in `argocd-repo-server`. No supplied entry is marked as confirmed exploited by CISA KEV; however, this flaw, together with the critical Azure Kubernetes Service authorization flaw, should be prioritized for immediate exposure review. Cloud and platform supply-chain incidents involving LiteLLM and PHP, as well as Google Cloud’s reported `europe-west2` outage, warrant additional operational attention.
Summary: An incorrect authorization flaw in Microsoft Azure Kubernetes Service allows an authorized attacker to escalate privileges over the network. Exploitation requires an attacker who already has some authorized access to the affected Azure environment and can reach the vulnerable service over the network.
Affected Features / Interoperability: Azure Kubernetes Service authorization and privilege management are affected. The supplied data does not specify particular AKS components, versions, or downstream integrations.
Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50516
Actions:
Summary: Argo CD versions from 2.1.0 through 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2 are affected when an operator has enabled `--enable-helm` for `kustomize build`. A repository-controlled Helm chart URL can cause Helm to load and execute a downloader plugin from a repository-controlled configuration directory inside `argocd-repo-server`, potentially exposing repository credentials; exploitation is associated with a malicious or compromised Git repository and does not require separate plugin installation.
Affected Features / Interoperability: Argo CD Kustomize builds, Helm chart handling, Git repository integrations, and the `argocd-repo-server` component are affected. The supplied data indicates that the command runs as the repo-server user and may read repository credentials.
Source:
Actions:
Summary: An incorrect authorization flaw in Microsoft Azure Kubernetes Service allows an authorized attacker to escalate privileges over the network. Exploitation requires an attacker who already has some authorized access to the affected Azure environment and can reach the vulnerable service over the network.
Affected Features / Interoperability: Azure Kubernetes Service authorization and privilege management are affected. The supplied data does not specify particular AKS components, versions, or downstream integrations.
Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50516
Actions:
Summary: A Jinja2 template-injection vulnerability in Ansible Operator Plugins allows a low-privileged Kubernetes user to execute embedded expressions through malicious custom-resource specification values. The resulting code executes within the operator pod and can lead to arbitrary code execution and privilege escalation under the operator’s service account.
Affected Features / Interoperability: Ansible Operator Plugins, custom-resource processing, and the operator pod are affected. The operator service account may have cluster-wide permissions, allowing escalation beyond the attacker’s original Kubernetes privileges.
Source:
Actions:
Summary: The StreamsHub Console operator permits a tenant that can create a Console custom resource to reference a KafkaUser namespace other than its own. Because the operator has cluster-wide Secrets permissions, it can read KafkaUser Secrets from another namespace and copy plaintext SASL credentials or TLS private keys into the attacker’s namespace.
Affected Features / Interoperability: StreamsHub Console custom resources, KafkaUser Secrets, SASL credentials, TLS private keys, and cross-namespace tenant isolation are affected. The flaw can expose Kafka credentials and enable unauthorized access to Kafka services.
Source:
Actions:
Summary: The OpenShift AI `odh-dashboard` backend-for-frontend route `GET /api/nim-serving/:nimResource` reads Kubernetes Secrets using the dashboard service account and returns the full Secret object, including `.data`, without an authorization check. Any authenticated dashboard user may retrieve the NVIDIA NGC API key Secret and the NIM image pull Secret.
Affected Features / Interoperability: The OpenShift AI dashboard’s NIM serving API, Kubernetes Secret reads, NVIDIA NGC credentials, and NIM image pull credentials are affected. Credential disclosure could affect NIM services and image pulls across environments using those Secrets.
Source:
Actions:
Summary: Oracle TimesTen In-Memory Database’s Kubernetes Operator contains a network-reachable authorization flaw. A low-privileged attacker with HTTPS access can compromise affected operator-supported database versions and obtain unauthorized read access to a subset of accessible data.
Affected Features / Interoperability: Oracle TimesTen In-Memory Database Kubernetes Operator versions 22.1–22.1.40.0 and 26.1–26.1.1.2.0 are affected. The supplied data does not identify additional integrations or components.
Source: https://www.oracle.com/security-alerts/cpuoct2026.html
Actions:
Summary: Lagoon’s `ssh` service contains an arbitrary-code-execution vulnerability that can lead to elevated administrative permissions. A valid Lagoon user account is required, and exploitation may be detected by searching container logs for the string `too many arguments`.
Affected Features / Interoperability: Lagoon core’s `ssh` service is affected. The supplied data does not provide further detail about the affected component or downstream integrations.
Source:
Actions:
Summary: Self-hosted Trigger.dev Docker Compose deployments before 4.5.6 that use the default secrets from `hosting/docker/.env.example` allow authentication bypass because a hardcoded `MAGIC_LINK_SECRET` lets anyone forge magic-link tokens. An unauthenticated attacker can log in as any email address and reach Postgres, Redis, and ClickHouse using default runner credentials on infrastructure networks.
Affected Features / Interoperability: Trigger.dev authentication, magic-link tokens, Docker Compose deployments, and the default Postgres, Redis, and ClickHouse runner services are affected. Compromise may expose all tenant data and permit unauthorized access to backing data stores.
Source:
Actions:
Summary: Splunk SOAR versions below 8.7.0 allow an authenticated user without the Automation Brokers edit permission to download the Automation Broker Docker Compose configuration file. The file reveals the Splunk SOAR instance URL, container image location, and Automation Broker version, but the supplied data does not indicate direct credential compromise.
Affected Features / Interoperability: Splunk SOAR Automation Broker configuration download and Docker Compose deployment metadata are affected. The exposure may assist reconnaissance against the Splunk SOAR instance and its image infrastructure.
Source: https://advisory.splunk.com/advisories/SVD-2026-1010
Actions:
Summary: Mailu versions before commit `f05aeb8322e2f61096af6b089d61ba6f40587d96` allow a domain manager to enable spoofing for a hosted domain they do not control. This permits malicious domain administrators to send email authenticated with DKIM and SPF for domains they should not be able to impersonate.
Affected Features / Interoperability: Mailu domain administration, hosted-domain spoofing controls, DKIM/SPF authentication, and outbound email reputation are affected. The supplied data does not identify additional components.
Source:
Actions:
The following items are supplementary community or news reports and are unverified chatter, not authoritative vulnerability records.