vulnerability in github.com/loft-sh/devspace (CVE-2026-42283). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.3.21` or later.
SSRF in magicmirror (CVE-2026-42281). Confidential information can be exposed externally. Exploitable via `GET /cors`. Mitigation: upgrade to `2.36.0` or later.
vulnerability in openSUSE-SU-2026:20730-1 (openSUSE-SU-2026:20730-1). Risk of unauthorized operations or information disclosure. Exploitable via ``mksquashfs``.
authentication bypass in Cisco catalyst-sd-wan-manager (CVE-2026-20182). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.