Skip to content

26 Mar 2026

1 new, 0 updated.

New that day

highpatchedexploited 26 Mar 2026 Aquasecurity Trivy Embedded Malicious Code Vulnerability Aquasecurity Trivy contains an embedded malicious code vulnerability that could allow an attacker to gain access to everything in the CI/CD environment, including all tokens, SSH keys, cloud credentials, database passwords, and any sensitive configuration in memory. Added to CISA KEV on 2026-03-26 (federal deadline 2026-04-09). CVE-2026-336341 source