Tag
#critical vulnerability
Critical Vulnerability in openPDC Docker Image: CVE-2026-105278
A critical vulnerability (CVE-2026-105278) with a CVSS score of 9.8 affects the openPDC Docker image, allowing unauthenticated attackers to gain full administrative control. The vulnerability stems from a hardcoded administrative credential with no forced change on first use. Affected versions include openPDC (Docker image) versions less than 2.9.477 and 2.9.482. Immediate patching or mitigation is recommended.
Critical Vulnerability in argocd-mcp 0.8.0 Allows Unauthenticated Access
A critical vulnerability (CVE-2026-82456) with a CVSS score of 10 has been discovered in argocd-mcp 0.8.0. The vulnerability allows unauthenticated attackers to invoke the full tool surface using the operator's stored token, potentially leading to the creation of applications, request syncs, and modification of Argo CD resources. Immediate action is required to mitigate this vulnerability.