Vulnerabilities
Summary — last 7 days
New vulnerabilities4,969▲ 170 vs. last week
Critical / high1,871▼ 880 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)1,013▲ 950 vs. last week
More filters
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | High (7.7) | — | — | Streamshub Console OperatorAI | 10/20/2026 | 10/20/2026 | The StreamsHub Console operator acts as a confused deputy: a Kubernetes tenant with permission to create a Console custom resource can set spec.kafkaClusters[].credentials.kafkaUser.namespace to any namespace. The operator, running with cluster-wide Secrets RBAC, reads the victim-namespace KafkaUser Secret (SASL… |