CVE-2025-55190: Argo CD API Token Credential Exposure
A flaw in Argo CD where an API token with basic read access could retrieve Git repository credentials from a project. Patched…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
CVE-2026-42880: Argo CD Read-Only User Secret Exposure
A vulnerability in Argo CD allowing read-only users to read plaintext Kubernetes secrets. Patched in May 2026.
Unpatched Argo CD Repo-Server Flaw Enables Full Kubernetes Cluster Takeover
An unpatched vulnerability in the Argo CD repo-server component allows unauthenticated attackers to execute arbitrary code and potentially take over Kubernetes clusters.…
CVE-2024-31989: Argo CD Redis Cache Poisoning Vulnerability
A vulnerability in Argo CD where the Redis cache lacked authentication, allowing any pod in the cluster to poison deployment data. Fixed…
CVE-2026-58453 — Critical vulnerability brief
CVSS 9.3JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a hard-coded credentials vulnerability that allows network-adjacent attackers to gain unauthorized access by…
CVE-2026-34106 — Critical vulnerability brief
CVSS 9.3Guardian language-system passes the id GET parameter directly into a PHP exec() call in subtitles.php (line 19) without sanitization: exec("php jobs/subtitle_rendering.php ".$login_session."…
CVE-2026-34100 — Critical vulnerability brief
CVSS 9.3Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in media.php (line 17): SELECT id, filename, extension, type,…
Adobe Patches 7 Critical CVSS 10.0 Flaws in ColdFusion and Campaign Classic
Adobe has released critical security updates addressing multiple maximum-severity vulnerabilities in Adobe ColdFusion and Adobe Campaign Classic. The patches fix seven CVSS…
CVE-2026-48276 — Vulnerability brief
CVE-2026-48276 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-48283 — Vulnerability brief
CVE-2026-48283 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…