Monthly
Container escape in CRI-O - the OCI runtime that underpins Red Hat OpenShift Container Platform 4 - is achievable when a workload-level actor can create or influence pod metadata that overwrites CRI-O's own reserved sandbox bookkeeping; the poisoned state is then reloaded as trusted after a CRI-O daemon restart, and a subsequent container recreate inside that sandbox can expose a host-side runtime-management resource to the container. Rated CVSS 3.1 7.8 (AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H), the flaw is not remotely reachable without cluster workload access, and the mandatory restart-then-recreate sequencing is the principal limiter on realistic exploitation. No public exploit code has been identified at time of analysis and the issue is not confirmed actively exploited (no CISA KEV listing); no EPSS score was supplied in the available intelligence.
Unauthenticated configuration injection in Phoenix Contact CHARX SEC-3000/3050/3100/3150 EV charging controllers (versions 1.0.0 through 1.9.0) lets a remote attacker POST a malicious ID to the device's MQTT broker and thereby create a new entry in the system configuration, causing integrity and availability loss. Reported by CERT@VDE (advisory VDE-2026-008), the flaw carries a CVSS 4.0 base score of 8.8 and requires no authentication or user interaction. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV.
Local privilege escalation in Microsoft Windows Attestation allows an authenticated local user with low privileges to gain elevated permissions on the host through a trust boundary violation (CWE-501). The flaw is rated CVSS 7.8 with high impact across confidentiality, integrity, and availability, and there is no public exploit identified at time of analysis. The issue is tagged as Information Disclosure by the reporter, but the CVSS vector indicates full system compromise potential once exploited.
Claude Code prior to version 2.1.2 has a CVSS 10.0 sandbox escape in the bubblewrap sandboxing mechanism, allowing code execution outside the intended sandbox boundary.
Hook mutation pollution in DOMPurify <= 3.4.5 allows persistent bypass of HTML sanitization defaults when application-installed hooks mutate data.allowedTags or data.allowedAttributes. Because these hook fields are direct references to the library's live DEFAULT_ALLOWED_TAGS and DEFAULT_ALLOWED_ATTR sets rather than copies, any write inside a uponSanitizeElement or uponSanitizeAttribute hook permanently widens the global allow-lists for the entire lifetime of the DOMPurify instance - meaning all subsequent sanitize() calls under default config will pass through attacker-controlled HTML using the poisoned tag or attribute name. No public exploit has been identified at time of analysis, and this vulnerability is not listed in CISA KEV; real-world risk is gated on the presence of the specific hook mutation pattern in the target application.
Information disclosure in NVIDIA Jetson Linux affects Xavier, Orin, and Thor series devices due to the nvluks trusted application remaining enabled in initrd. A local attacker with physical access and low-level privileges can exploit this to read sensitive data from the device, as confirmed by CWE-501 (CLS: Malicious Code Not Included in Executable) indicating improper access control to privileged components. CVSS 5.2 reflects the high confidentiality impact but requires physical attack vector and authenticated access; no public exploit or CISA KEV status reported.
Protocol escalation in the Universal Tool Calling Protocol (UTCP) Python client allows a malicious or later-compromised remote Manual Endpoint to execute arbitrary operating-system commands on the client host. Because the client trusts the provider's JSON tool specification, a provider can serve a benign HTTP-based Manual to establish trust and then swap it for a Manual that registers CLI-protocol tools, which the CLI plugin executes as shell commands (CWE-501, trust boundary violation). Scored CVSS 7.5 (HIGH) with vector AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - reachable by unauthenticated remote attackers but requiring the victim to trust the provider and invoke the swapped tool; no public exploit identified at time of analysis, though an upstream fix is available.
A security vulnerability in Trust boundary violation in Visual Studio Code - Python extension (CVSS 7.8) that allows an unauthorized attacker. High severity vulnerability requiring prompt remediation.
go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. Rated low severity (CVSS 2.6), this vulnerability is remotely exploitable, low attack complexity.
GRUB2 bootloader fails to enforce lockdown mode restrictions on the dump command, allowing local privileged users to read arbitrary memory contents and extract sensitive cryptographic material including signatures, salts, and other secrets. Grub2 is affected across multiple Linux distributions including Red Hat Enterprise Linux and SUSE Linux Enterprise. The vulnerability carries a CVSS score of 4.4 with a low EPSS exploitation probability of 0.05% (14th percentile), indicating limited real-world attack likelihood despite the information disclosure impact. No public exploit code or active exploitation has been identified at time of analysis.
Container escape in CRI-O - the OCI runtime that underpins Red Hat OpenShift Container Platform 4 - is achievable when a workload-level actor can create or influence pod metadata that overwrites CRI-O's own reserved sandbox bookkeeping; the poisoned state is then reloaded as trusted after a CRI-O daemon restart, and a subsequent container recreate inside that sandbox can expose a host-side runtime-management resource to the container. Rated CVSS 3.1 7.8 (AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H), the flaw is not remotely reachable without cluster workload access, and the mandatory restart-then-recreate sequencing is the principal limiter on realistic exploitation. No public exploit code has been identified at time of analysis and the issue is not confirmed actively exploited (no CISA KEV listing); no EPSS score was supplied in the available intelligence.
Unauthenticated configuration injection in Phoenix Contact CHARX SEC-3000/3050/3100/3150 EV charging controllers (versions 1.0.0 through 1.9.0) lets a remote attacker POST a malicious ID to the device's MQTT broker and thereby create a new entry in the system configuration, causing integrity and availability loss. Reported by CERT@VDE (advisory VDE-2026-008), the flaw carries a CVSS 4.0 base score of 8.8 and requires no authentication or user interaction. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV.
Local privilege escalation in Microsoft Windows Attestation allows an authenticated local user with low privileges to gain elevated permissions on the host through a trust boundary violation (CWE-501). The flaw is rated CVSS 7.8 with high impact across confidentiality, integrity, and availability, and there is no public exploit identified at time of analysis. The issue is tagged as Information Disclosure by the reporter, but the CVSS vector indicates full system compromise potential once exploited.
Claude Code prior to version 2.1.2 has a CVSS 10.0 sandbox escape in the bubblewrap sandboxing mechanism, allowing code execution outside the intended sandbox boundary.
Hook mutation pollution in DOMPurify <= 3.4.5 allows persistent bypass of HTML sanitization defaults when application-installed hooks mutate data.allowedTags or data.allowedAttributes. Because these hook fields are direct references to the library's live DEFAULT_ALLOWED_TAGS and DEFAULT_ALLOWED_ATTR sets rather than copies, any write inside a uponSanitizeElement or uponSanitizeAttribute hook permanently widens the global allow-lists for the entire lifetime of the DOMPurify instance - meaning all subsequent sanitize() calls under default config will pass through attacker-controlled HTML using the poisoned tag or attribute name. No public exploit has been identified at time of analysis, and this vulnerability is not listed in CISA KEV; real-world risk is gated on the presence of the specific hook mutation pattern in the target application.
Information disclosure in NVIDIA Jetson Linux affects Xavier, Orin, and Thor series devices due to the nvluks trusted application remaining enabled in initrd. A local attacker with physical access and low-level privileges can exploit this to read sensitive data from the device, as confirmed by CWE-501 (CLS: Malicious Code Not Included in Executable) indicating improper access control to privileged components. CVSS 5.2 reflects the high confidentiality impact but requires physical attack vector and authenticated access; no public exploit or CISA KEV status reported.
Protocol escalation in the Universal Tool Calling Protocol (UTCP) Python client allows a malicious or later-compromised remote Manual Endpoint to execute arbitrary operating-system commands on the client host. Because the client trusts the provider's JSON tool specification, a provider can serve a benign HTTP-based Manual to establish trust and then swap it for a Manual that registers CLI-protocol tools, which the CLI plugin executes as shell commands (CWE-501, trust boundary violation). Scored CVSS 7.5 (HIGH) with vector AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - reachable by unauthenticated remote attackers but requiring the victim to trust the provider and invoke the swapped tool; no public exploit identified at time of analysis, though an upstream fix is available.
A security vulnerability in Trust boundary violation in Visual Studio Code - Python extension (CVSS 7.8) that allows an unauthorized attacker. High severity vulnerability requiring prompt remediation.
go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. Rated low severity (CVSS 2.6), this vulnerability is remotely exploitable, low attack complexity.
GRUB2 bootloader fails to enforce lockdown mode restrictions on the dump command, allowing local privileged users to read arbitrary memory contents and extract sensitive cryptographic material including signatures, salts, and other secrets. Grub2 is affected across multiple Linux distributions including Red Hat Enterprise Linux and SUSE Linux Enterprise. The vulnerability carries a CVSS score of 4.4 with a low EPSS exploitation probability of 0.05% (14th percentile), indicating limited real-world attack likelihood despite the information disclosure impact. No public exploit code or active exploitation has been identified at time of analysis.