Daily Digest
The most urgent item is CVE-2026-59971 (CVSS 10.0 CRITICAL) in the MySQL MCP Server: an unauthenticated, network-reachable flaw that allows arbitrary SQL execution and potential code execution via DNS rebinding when the SSE transport is enabled, affecting any deployment using the Model Context Protocol server with non-default transport settings. No CISA KEV entries appear in this dataset, so the highest-CVSS vulnerability takes precedence. Microsoft SQL Server CVE-2023-54400 (CVSS 9.8) and multiple MongoDB driver flaws (CVSS 8.3) also warrant immediate attention.
Summary: The MySQL MCP Server (Model Context Protocol server) prior to version 0.4.2, when configured with `MCP_TRANSPORT=sse`, binds an unauthenticated HTTP/SSE endpoint to `0.0.0.0` without DNS rebinding protection. A remote attacker can directly call the `execute_sql` tool or use DNS rebinding to force a victim's browser to relay same-origin requests, achieving unauthenticated SQL execution. If the MySQL account has `FILE` privileges, this extends to arbitrary file read/write and potential code execution. The default `stdio` transport is not affected.
Affected Features / Interoperability: The SSE transport mode of the MySQL MCP Server (`src/mysql_mcp_server/server.py`). Downstream impact includes any AI agent or client using the MCP server to interact with MySQL databases; replication, client drivers, and extensions are not directly affected unless they route through this MCP server.
Source: https://github.com/designcomputer/mysql_mcp_server/commit/a96549f4a4d65443fd6e9c7f2324fba9a5c80a82, https://github.com/designcomputer/mysql_mcp_server/issues/92, https://github.com/designcomputer/mysql_mcp_server/releases/tag/v0.4.2, https://github.com/designcomputer/mysql_mcp_server/security/advisories/GHSA-rqfv-2mw9-78g2
Actions:
Summary: Warpgate (an SSH/HTTPS/MySQL bastion host) before 0.25.6 fails to enforce admin permission (`RecordingsView`) on the recording stream WebSocket endpoint (`/@warpgate/admin/api/recordings/{uuid}/stream`). Any authenticated regular user who discovers an active recording UUID can subscribe to the WebSocket and receive real-time terminal I/O from proxied SSH, MySQL, or PostgreSQL sessions, exposing credentials and commands.
Affected Features / Interoperability: Warpgate admin API recording stream feature. Downstream: any session recordings captured via Warpgate bastion, including MySQL and PostgreSQL proxied sessions.
Source: https://github.com/warp-tech/warpgate/commit/f5cb06ea09065f375870ccee64fe721a2ca79766, https://github.com/warp-tech/warpgate/releases/tag/v0.25.6, https://github.com/warp-tech/warpgate/security/advisories/GHSA-2q37-6vxr-26jr
Actions:
Summary: AdithyaYelloju Restaurant-Management-System (up to commit 7f0e7e8) contains a SQL injection in `admin/delete1.php` via the `ID` parameter passed to `mysqli_query`. The exploit is public; the project has not responded. No versioned releases exist (rolling delivery).
Affected Features / Interoperability: Unauthenticated Action Script component (`admin/delete1.php`). Downstream: any MySQL database backend used by this application; potential data exfiltration, modification, or loss.
Source: https://github.com/AdithyaYelloju/Restaurant-Management-System/, https://github.com/AdithyaYelloju/Restaurant-Management-System/issues/5, https://vuldb.com/cve/CVE-2026-103229, https://vuldb.com/submit/955078, https://vuldb.com/vuln/411922
Actions:
Summary: Same project as above; SQL injection in `User/ord.php` (Order Placement component) via `id`/`name` parameters in `mysqli_query`. Public exploit; no vendor response.
Affected Features / Interoperability: Order Placement component (`User/ord.php`). Downstream: MySQL database backend; order data integrity and confidentiality at risk.
Source: https://github.com/AdithyaYelloju/Restaurant-Management-System/, https://github.com/AdithyaYelloju/Restaurant-Management-System/issues/6, https://vuldb.com/cve/CVE-2026-103230, https://vuldb.com/submit/955079, https://vuldb.com/vuln/411923
Actions:
Summary: SQL injection in `User/cancel.php` (Order Cancellation component) via `ID` parameter in `mysqli_query`. Public exploit; no vendor response.
Affected Features / Interoperability: Order Cancellation component (`User/cancel.php`). Downstream: MySQL database; cancellation logic and data integrity compromised.
Source: https://github.com/AdithyaYelloju/Restaurant-Management-System/, https://github.com/AdithyaYelloju/Restaurant-Management-System/issues/7, https://vuldb.com/cve/CVE-2026-103231, https://vuldb.com/submit/955080, https://vuldb.com/vuln/411924
Actions:
Summary: SQL injection in `admin/table_booking.php` via `Name` parameter in `mysqli_query`. Public exploit; no vendor response.
Affected Features / Interoperability: Table booking admin component. Downstream: MySQL database; booking data at risk.
Source: https://github.com/AdithyaYelloju/Restaurant-Management-System/, https://github.com/AdithyaYelloju/Restaurant-Management-System/issues/8, https://vuldb.com/cve/CVE-2026-103232, https://vuldb.com/submit/955081, https://vuldb.com/vuln/411926
Actions:
Summary: Adminer 5.5.1 through 6.0.1 mishandles the login `server` string parsing in `host_port()`, allowing a crafted value like `127.0.0.1:80/x` to bypass privileged-port checks and trigger server-side request forgery (SSRF) and blind internal port scanning before authentication. Fixed in 6.0.2.
Affected Features / Interoperability: Adminer login page (`adminer/include/functions.inc.php` and `auth.inc.php`). Downstream: internal network services reachable from the Adminer host; potential reconnaissance and SSRF chaining.
Source: https://github.com/vrana/adminer/security/advisories/GHSA-rwxg-xph9-82cj, https://www.vulncheck.com/advisories/adminer-before-6.0.2-privileged-port-ssrf-via-host-port-regex
Actions:
Summary: The `mysqlnd` wire protocol parser in PHP reads fields from server packets before verifying sufficient bytes remain, allowing a malicious or compromised MySQL server to send a truncated packet and cause client buffer over-read, leading to process crash (undefined behavior).
Affected Features / Interoperability: PHP `mysqlnd` client library. Downstream: any PHP application using `mysqlnd` to connect to MySQL; availability impact via client crash.
Source: https://github.com/php/php-src/security/advisories/GHSA-r6x9-5r99-36j7
Actions:
Summary: DBHub (database MCP server for MySQL, Postgres, SQL Server, Oracle, MariaDB, SQLite) prior to 0.22.5 exposes an unauthenticated HTTP MCP endpoint when started with `--transport http`. The Origin/Host hostname equality check does not prevent DNS rebinding, allowing a malicious website to invoke MCP tools from a victim's browser and read/write configured databases.
Affected Features / Interoperability: DBHub HTTP transport mode. Downstream: any database connected via DBHub (MySQL, PostgreSQL, SQL Server, Oracle, MariaDB, SQLite); data confidentiality and integrity at risk.
Source: https://github.com/bytebase/dbhub/security/advisories/GHSA-fm8p-53ww-hf6w
Actions:
Summary: Zohocorp ManageEngine DDI Central versions before 6201 have insufficient access control on an HA failover endpoint, allowing destructive PostgreSQL database operations.
Affected Features / Interoperability: ManageEngine DDI Central HA failover endpoint. Downstream: PostgreSQL databases managed by DDI Central; potential data destruction or service disruption.
Source: https://www.manageengine.com/dns-dhcp-ipam/security-updates/security-updates.html
Actions:
Summary: pgPointcloud through 1.2.5 contains a heap out-of-bounds read in dimensional patch WKB deserialization (`lib/pc_bytes.c`). Authenticated database users can supply crafted `pcpatch` values with attacker-controlled size fields to read adjacent heap memory or crash the PostgreSQL backend.
Affected Features / Interoperability: pgPointcloud PostgreSQL extension (point cloud data type). Downstream: any PostgreSQL instance with this extension; memory disclosure or DoS via crafted WKB input.
Source: https://github.com/pgpointcloud/pointcloud, https://github.com/pgpointcloud/pointcloud/blob/v1.2.5/lib/pc_bytes.c#L1347-L1373, https://github.com/pgpointcloud/pointcloud/issues/387, https://github.com/pgpointcloud/pointcloud/pull/388, https://www.vulncheck.com/advisories/pgpointcloud-through-1.2.5-heap-out-of-bounds-read-via-wkb-deserialization
Actions:
Summary: Same Warpgate issue as CVE-2026-63330 under MySQL: missing admin permission check on recording stream WebSocket allows authenticated users to view proxied PostgreSQL (and MySQL/SSH) session recordings.
Affected Features / Interoperability: Warpgate admin API recording stream. Downstream: PostgreSQL session recordings captured via Warpgate bastion.
Source: https://github.com/warp-tech/warpgate/commit/f5cb06ea09065f375870ccee64fe721a2ca79766, https://github.com/warp-tech/warpgate/releases/tag/v0.25.6, https://github.com/warp-tech/warpgate/security/advisories/GHSA-2q37-6vxr-26jr
Actions:
Summary: OpenObserve before 0.90.3 exposes an unauthenticated `/config/runtime` endpoint that serializes full server configuration. The `hide_sensitive_fields` filter misses `dsn` and `creds` field names, leaking `meta_postgres_dsn`, `meta_postgres_ro_dsn`, `meta_ddl_dsn`, and `usage_reporting_creds` (PostgreSQL credentials) to unauthenticated network clients.
Affected Features / Interoperability: OpenObserve runtime config endpoint. Downstream: PostgreSQL deployments monitored by OpenObserve; credential exposure enables database compromise.
Source: https://github.com/openobserve/openobserve/commit/4f3db1cf790ffe8ea065d98f87344e839ec6e477, https://github.com/openobserve/openobserve/pull/12220, https://github.com/openobserve/openobserve/releases/tag/v0.90.3, https://github.com/openobserve/openobserve/security/advisories/GHSA-v496-g5c9-vqxw
Actions:
Summary: MobilityDB 1.3.0 and earlier has an out-of-bounds read in MEOS WKB deserialization: a negative length field wraps to a large `size_t`, bypasses a bounds check, and causes `memcpy` with corrupted length, crashing the PostgreSQL backend (DoS for all sessions).
Affected Features / Interoperability: MobilityDB PostgreSQL extension (spatiotemporal data). Downstream: any PostgreSQL instance with MobilityDB; remote DoS via crafted WKB payload.
Source: https://github.com/MobilityDB/MobilityDB/releases/tag/v1.2.2, https://github.com/MobilityDB/MobilityDB/releases/tag/v1.3.1, https://github.com/MobilityDB/MobilityDB/security/advisories/GHSA-2c92-2w7c-pm3g, https://www.vulncheck.com/advisories/mobilitydb-through-out-of-bounds-read-dos-via-wkb-deserialization
Actions:
Summary: PostgreSQL Anonymizer allows unprivileged masked users to repeatedly call `anon.hash()` via sub-selects to collect (seed, hash_output) pairs and brute-force the salt offline. Fixed in 3.2.3+.
Affected Features / Interoperability: PostgreSQL Anonymizer extension `anon.hash()` function. Downstream: anonymized data security; salt recovery undermines masking guarantees.
Source: https://gitlab.com/dalibo/postgresql_anonymizer/-/issues/685
Actions:
Summary: Same DBHub issue as MySQL entry: unauthenticated HTTP MCP endpoint with DNS rebinding flaw allows browser-based invocation of MCP tools against configured Oracle (and other) databases. Fixed in DBHub 0.22.5.
Affected Features / Interoperability: DBHub HTTP transport mode with Oracle database connections. Downstream: Oracle databases exposed via DBHub; data read/write risk.
Source: https://github.com/bytebase/dbhub/security/advisories/GHSA-fm8p-53ww-hf6w
Actions:
Summary: Fumasoft Fumeng Cloud contains an unauthenticated SQL injection in `AjaxMethod.ashx` endpoint (`getEmpByname` action, `Name` parameter) against a Microsoft SQL Server backend. Allows remote attackers to extract, disclose, and modify database contents; potential for further server compromise. Exploitation observed by Shadowserver Foundation on 2023-10-18.
Affected Features / Interoperability: Fumasoft Fumeng Cloud `AjaxMethod.ashx` endpoint. Downstream: Microsoft SQL Server backend; full database compromise possible.
Source: https://github.com/emadshanab/goby-poc/blob/main/fumengyun%20%20AjaxMethod.ashx%20SQL%20injection.json, https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/other/fumasoft-sqli.yaml, https://www.vulncheck.com/advisories/fumeng-cloud-sql-injection-via-ajaxmethod-ashx-getempbyname
Actions:
Summary: MongoDB PHP Library GridFS component improperly neutralizes special elements in structured file identifiers, causing them to be interpreted as query conditions. An authenticated user influencing the identifier can read unintended file content or delete all GridFS chunks in a bucket, rendering files unreadable. Rename operations may also target wrong files.
Affected Features / Interoperability: MongoDB PHP Library GridFS (`PHPLIB-1929`). Downstream: applications using PHP Library for GridFS file storage; data integrity and confidentiality at risk.
Source: https://jira.mongodb.org/browse/PHPLIB-1929
Actions:
Summary: Same GridFS identifier injection flaw in MongoDB Rust Driver (`RUST-2469`). Authenticated users influencing identifiers can read unintended files or delete all chunks in a bucket.
Affected Features / Interoperability: MongoDB Rust Driver GridFS. Downstream: Rust applications using GridFS; file data integrity and availability.
Source: https://jira.mongodb.org/browse/RUST-2469
Actions:
Summary: Same GridFS identifier injection flaw in MongoDB C# Driver (`CSHARP-6190`). Authenticated users can read unintended files, delete all chunks, or rename wrong files.
Affected Features / Interoperability: MongoDB C# Driver GridFS. Downstream: .NET applications using GridFS.
Source: https://jira.mongodb.org/browse/CSHARP-6190
Actions:
Summary: Same GridFS identifier injection flaw in MongoDB Python Driver (`PYTHON-5994`). Authenticated users can read unintended files, delete all chunks, or rename wrong files.
Affected Features / Interoperability: MongoDB Python Driver GridFS. Downstream: Python applications using GridFS.
Source: https://jira.mongodb.org/browse/PYTHON-5994
Actions:
Summary: Same GridFS identifier injection flaw in MongoDB Ruby Driver (`RUBY-3941`). Authenticated users can read unintended files or delete all chunks in a bucket.
Affected Features / Interoperability: MongoDB Ruby Driver GridFS. Downstream: Ruby applications using GridFS.
Source: https://jira.mongodb.org/browse/RUBY-3941
Actions:
Summary: MongoDB C++ Driver mishandles caller-supplied namespace identifiers, allowing special characters to redirect operations to unintended targets. Applications building namespace identifiers from untrusted input without validation may grant limited unauthorized read/write access to other logical tenants' data.
Affected Features / Interoperability: MongoDB C++ Driver namespace handling (`CXX-3552`). Downstream: multi-tenant applications using C++ Driver; cross-tenant data leakage.
Source: https://github.com/mongodb/mongo-cxx-driver/releases/tag/r4.5.1, https://jira.mongodb.org/browse/CXX-3552
Actions:
Summary: MongoDB PHP Library (and driver) insufficiently sanitizes special elements in application-supplied namespace identifiers, causing operations to target unintended storage locations. Applications incorporating untrusted text into identifiers are affected.
Affected Features / Interoperability: MongoDB PHP Library namespace handling (`PHPLIB-1927`). Downstream: PHP applications using MongoDB; cross-tenant or cross-collection data access.
Source: https://github.com/mongodb/mongo-php-driver/releases/tag/1.21.6, https://github.com/mongodb/mongo-php-driver/releases/tag/2.4.1, https://github.com/mongodb/mongo-php-library/releases/tag/1.21.4, https://github.com/mongodb/mongo-php-library/releases/tag/2.4.1, https://jira.mongodb.org/browse/PHPLIB-1927
Actions:
Summary: MongoDB Go Driver GridFS component has the same identifier injection flaw (`GODRIVER-4081`). Authenticated users can cause deletion of all GridFS chunks in a bucket, rendering files unreadable.
Affected Features / Interoperability: MongoDB Go Driver GridFS. Downstream: Go applications using GridFS; file availability.
Source: https://jira.mongodb.org/browse/GODRIVER-4081
Actions:
Summary: Heap-based buffer overflow in MongoDB C Driver TLS transport layer (Windows platform TLS backend). A remote endpoint can send malicious encrypted traffic post-handshake to write out-of-bounds, causing memory corruption, heap disclosure, or process termination. No authentication required; occurs before application-level auth.
Affected Features / Interoperability: MongoDB C Driver (libmongoc) built with Windows TLS backend. Downstream: any Windows application using this driver to connect to MongoDB; client-side compromise via malicious server.
Source: https://jira.mongodb.org/browse/CDRIVER-6417
Actions:
-
The most urgent threat in the current landscape is the Dockhand vulnerability (CVE-2026-53988) which presents a critical authentication bypass in git webhook endpoints that allows unauthenticated remote attackers to trigger arbitrary stack redeployments, representing a potential complete loss of container deployment control across the organization's infrastructure.
Summary: An unverified backdoor in Barman snapshot backup deletion logic allows a principal with write access to the backup catalog to manipulate backup identifiers and cause Barman to delete unrelated cloud snapshots across AWS, Azure, and Google Cloud environments by passing compromised snapshot IDs to the cloud provider's delete API using Barman's own credentials.
Affected Features / Interoperability: Backup catalog management, cloud snapshot lifecycle operations, cross-cloud deletion via Barman
Source: https://www.enterprisedb.com/docs/security/advisories/cve202693853/
Actions:
Summary: An incorrect authorization flaw in Google Cloud Application Integration task configurations allows authenticated users to execute arbitrary internal RPC calls from within the production network under privileged identities using internal-only task types.
Affected Features / Interoperability: Application integration task configuration, internal RPC execution, production network access
Source: https://docs.cloud.google.com/application-integration/docs/security-bulletins#gcp-2026-064
Summary: A confused deputy vulnerability in the EmailTask component permits authenticated attackers to read and exfiltrate arbitrary Google-internal files through crafted attachment paths within Google Cloud Application Integrations.
Affected Features / Interoperability: EmailTask component, internal file system access, Google Cloud internal services
Source: https://docs.cloud.google.com/application-integration/docs/security-bulletins#gcp-2026-066
Summary: A deserialization of untrusted data vulnerability in the JavaScript Task component allows authenticated users with standard permissions to execute arbitrary code on shared production servers via specially crafted scripts that bypass parameter guards.
Affected Features / Interoperability: JavaScript Task component, shared production servers, code execution
Source: https://docs.cloud.google.com/application-integration/docs/security-bulletins#gcp-2026-065
Summary: Esri Portal for ArcGIS versions 12.1 and earlier contain a missing authentication mechanism in critical functions, enabling remote unauthenticated attackers to access an unprotected API and potentially compromise unsecured Kubernetes API access.
Affected Features / Interoperability: Esri Portal for ArcGIS, Kubernetes API access, unprotected REST endpoints
Summary: A flaw in the guardrails-detectors component enables remote attackers to perform blind Server-Side Request Forgery (SSRF) by submitting specially crafted XML Schema Definition strings, leading to credential theft from cloud metadata services, Kubernetes API, and internal storage systems.
Affected Features / Interoperability: guardrails-detectors component, internal network endpoints, cloud metadata services, Kubernetes API
Source: https://access.redhat.com/errata/RHSA-2026:60520
Summary: The cluster-proxy-addon component in Multicluster Engine for Kubernetes suffers an unauthenticated authorization bypass that allows attackers to manipulate URL path segments and proxy requests to arbitrary services across managed clusters.
Affected Features / Interoperability: cluster-proxy-addon, multicluster engine, inter-managed cluster traffic routing
Source: https://access.redhat.com/errata/RHSA-2026:59556
Summary: Envoy Gateway's deserialization of untrusted data in the internal/gatewayapi/luavalidator component fails to normalize redundant path separators, allowing attackers to read arbitrary files from the gateway controller pod including service-account tokens and TLS certificates.
Affected Features / Interoperability: Envoy Gateway, internal/gatewayapi, controller pod file access
Source: https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464
Summary: The odh-dashboard web console component suffers an incorrect network binding that allows malicious actors within the cluster to bypass authentication and impersonate users via arbitrary access tokens, compromising Kubernetes API access.
Affected Features / Interoperability: odh-dashboard, Kubernetes API, internal authentication bypass
Source: https://access.redhat.com/errata/RHSA-2026:53261
Summary: The Red Hat OpenShift AI (RHOAI) overlay incorrectly aggregates trainjob management permissions into native Kubernetes edit ClusterRole, allowing users with edit ClusterRole rights to create and delete TrainJobs and potentially escalate privileges.
Affected Features / Interoperability: RHOAI overlay, Kubernetes ClusterRole, TrainJob management
Source: https://access.redhat.com/errata/RHSA-2026:53262
Summary: The cluster-proxy service-proxy component in RHACM and MCE appends impersonation group headers to proxied requests without sanitizing caller-supplied values, enabling authenticated hubs to escalate to cluster-admin on managed clusters via Impersonate-Group headers.
Affected Features / Interoperability: cluster-proxy service-proxy, RHACM, multicluster-engine, cluster administration
Source: https://access.redhat.com/errata/RHSA-2026:46885
Summary: The Contrast confidential computing runtime suffers an AML injection vulnerability in versions before 1.18.0 where untrusted host ACPI/AML bytecode can be executed with full guest memory access, enabling arbitrary code execution and disclosure of confidential guest data.
Affected Features / Interoperability: Contrast runtime, AMD SEV-SNP platforms, confidential computing workloads
Source: https://github.com/edgelesssys/contrast/security/advisories/GHSA-g9ww-x58f-9g6m
Summary: Contrast versions 1.14.0 before 1.23.1 generate runtime policies that fail to detect all container image substitutions, permitting attackers to replace container images with exploit payloads via image-guest-pull drivers.
Affected Features / Interoperability: Contrast image substitution, Kubernetes container registries, supply chain integrity
Source: https://github.com/edgelesssys/contrast/security/advisories/GHSA-m2qg-wrxv-h898
Summary: The Contrast Kata agent policies contain a flaw in CopyFile verification that allows arbitrary writes to the guest root filesystem, enabling malicious processes to overwrite security-critical files and achieve full guest takeover.
Affected Features / Interoperability: Contrast Kata agent, guest root filesystem, security-critical files
Source: https://github.com/edgelesssys/contrast/security/advisories/GHSA-rh99-wc69-c255
Summary: Dockhand versions before 1.0.40 contain an authentication bypass in git webhook endpoints that allows unauthenticated remote attackers to trigger arbitrary stack redeployments by sending unsigned webhook requests to force git clone and docker compose operations.
Affected Features / Interoperability: Git webhook endpoints, Docker Compose, container deployment pipeline
Source: https://github.com/Finsys/dockhand/releases/tag/v1.0.40
Summary: The Obot AI agent's quickstart command exposes the Docker quickstart container on 0.0.0.0:8080 with authentication disabled, granting unauthenticated parties full administrative access to the Obot API and UI.
Affected Features / Interoperability: Obot quickstart, Docker API, MCP server backend, host Docker socket exposure
Source: https://github.com/obot-platform/obot/security/advisories/GHSA-jj4w-pfgv-4mrm
Summary: Tugtainer Agent allows unauthenticated access to Docker management APIs when AGENT_SECRET is not configured, as signature verification incorrectly returns success for empty secrets.
Affected Features / Interoperability: Tugtainer agent, Docker management API, automated container updates
Source: https://github.com/Quenary/tugtainer/commit/0052a5544e187a4d12f771838a8a23ca4afb61cd
Summary: Tugtainer's OIDC authentication can be initiated despite OIDC_ENABLED=false, allowing direct OIDC login flows that start the authentication process and return HTTP 302 responses.
Affected Features / Interoperability: OIDC authentication, Tugtainer OAuth flow, CI/CD automation
Source: https://github.com/Quenary/tugtainer/commit/76371db679334b002d4af544b0f3b8587ad86f52
Summary: Tugtainer allows authenticated users to configure the notification test endpoint to accept arbitrary user-supplied URLs, enabling authenticated blind server-side request forgery (SSRF) against production servers.
Affected Features / Interoperability: Notification test endpoint, Tugtainer API, SSRF attacks
Source: https://github.com/Quenary/tugtainer/commit/c0294d0ab64985b135d0c5b566ac30bf8371f9c3
Summary: AzuraCast versions before 0.23.8 suffer SSRF and local file read vulnerabilities in the AutoDJ remote playlist fetch, allowing users with Media permission to read host files like /etc/passwd and internal HTTP endpoints.
Affected Features / Interoperability: AutoDJ remote playlist, file:// paths, loopback endpoints, host file disclosure
Source: https://github.com/AzuraCast/AzuraCast/security/advisories/GHSA-rrjx-wrhf-8v47
Summary: kube-compare incorrectly executes untrusted container image entrypoints during 'container://' reference path processing, leading to arbitrary code execution on the operator's workstation.
Affected Features / Interoperability: kube-compare tool, container inspection, operator workstation
Source: https://access.redhat.com/security/cve/CVE-2026-87114
Summary: Envoy Gateway's internal WASM image fetcher has a memory allocation flaw that can cause unrecoverable OOM failures and cluster-wide control-plane denial of service through repeated reconciliation loops.
Affected Features / Interoperability: Envoy Gateway, internal WASM layer loading, control plane stability
Source: https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464