Severity: High (CVSS 8.8) Affected Systems: Linuxfoundation Kubeedge Overview KubeEdge CloudCore through 1.23.1 Missing Authentication on Node Task Endpoints A high vulnerability identified as CVE-2026-82473 has been disclosed. KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication ... Read More »
Severity: Critical (CVSS 10) Affected Systems: Affected products listed by OpenCVE and the vendor advisory Overview argocd-mcp 0.8.0 Authentication Bypass via Unauthenticated HTTP A critical vulnerability identified as CVE-2026-82456 has been disclosed. argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions ... Read More »
Severity: Critical (CVSS 9.8) Affected Systems: Bdthemes Sigmaforms Pro – Ai Generated Forms; Wordpress Wordpress Overview Sigma Forms Pro A critical vulnerability identified as CVE-2026-14494 has been disclosed. The Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.5 via the ... Read More »
Severity: High (CVSS 8.5) Affected Systems: Sudo Project Sudo Overview Sudo through 1.9.17p2 Intercept Policy Bypass via execveat A high vulnerability identified as CVE-2026-82474 has been disclosed. Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run ... Read More »
