CVE Watch15 jul 2026

CVE-2026-41326

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like cont

CVSS

8.2

Alto

EPSS

0.3%

p19

KEV

—

Exploit Today

0-100

Publicado: 24 abr 2026 · Última mod.: 15 jul 2026 · CWE-61 · CWE-1220

EPSS · 30d

0.3%EPSS · 30 días0.3%

2026-06-302026-07-16

Descripción técnica

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. From v3.4.0 to v3.28.0, an oversight in the CopyFile policy (and perhaps the CopyFile handler) allows untrusted hosts to write to arbitrary locations inside the guest workload image. This can be used to overwrite binaries inside the guest and exfiltrate data from containers; even those running inside CVMs. This vulnerability is fixed in v3.29.0.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-561557.8 ALT

30.2%

KEV—59Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability 2d CVE-2026-393637.5 ALT

85.4%

——26Vite is a frontend tooling framework for JavaScript. From 6.0.0 to before 6.4.2, 7.3.2, and 8.0.5, if it is possible to connect to the Vite dev server’s WebSocket without an Origin header, an attacker can invoke fetchModule via the custom WebSocket event vite:invoke and combine file://... with ?raw (or ?inline) to retrieve the contents of arbitrary files on the server as a JavaScript string (e.g., export default "..."). The access control enforced in the HTTP request path (such as server.fs.allow) is not applied to this WebSocket-based execution path. This vulnerability is fixed in 6.4.2, 7.3.2, and 8.0.5.2d CVE-2026-491707.8 ALT

83.0%

——25Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.14h CVE-2025-44049.1 CRÍ

76.4%

——23A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA package fails to validate the uniqueness of the `krbCanonicalName` for the admin account by default, allowing users to create services with the same canonical name as the REALM admin. When a successful attack happens, the user can retrieve a Kerberos ticket in the name of this service, containing the admin@REALM credential. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.17d CVE-2026-3407810.0 CRÍ

74.3%

——22Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the Flatpak portal accepts paths in the sandbox-expose options which can be app-controlled symlinks pointing at arbitrary paths. Flatpak run mounts the resolved host path in the sandbox. This gives apps access to all host files and can be used as a primitive to gain code execution in the host context. This vulnerability is fixed in 1.16.4.2d CVE-2026-505028.0 ALT

45.3%

——14Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute code over a network.1d