{"generated_at":"2026-10-23T15:25:26.572Z","count":4,"incidents":[{"id":"argo-cd-appproject-destination-namespace-and-resource-re-cve-2026-77459","url":"https://pwned.coffee/i/argo-cd-appproject-destination-namespace-and-resource-re-cve-2026-77459","title":"Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks","summary":"### Impact Argo CD checks an Application's AppProject before it creates resources during a sync. That check covers destination namespaces and servers, cluster-scoped resource allow and deny lists, and namespaced resource allow and deny lists, including resource names. PreDelete and PostDelete hooks skip it. When the Application is deleted, Argo CD…","severity":"critical","patch_status":"partial","status":"live","exploited":false,"affected":"github.com/argoproj/argo-cd/v2 (go), github.com/argoproj/argo-cd/v3 (go)","fixed_versions":["github.com/argoproj/argo-cd/v3 3.3.15","github.com/argoproj/argo-cd/v3 3.4.10","github.com/argoproj/argo-cd/v3 3.5.4","github.com/argoproj/argo-cd/v3 3.6.0-rc2"],"ids":["CVE-2026-77459"],"stack":["go","kubernetes"],"first_seen":"2026-10-15T20:19:31Z","updated_at":"2026-10-15T20:19:31Z"},{"id":"nginx-ui-authenticated-remote-code-execution-via-backup-cve-2026-107806","url":"https://pwned.coffee/i/nginx-ui-authenticated-remote-code-execution-via-backup-cve-2026-107806","title":"Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite","summary":"## Summary An authenticated nginx-ui user can call `POST /api/restore`, upload a forged encrypted backup, restore `app.ini`, set nginx command settings such as `TestConfigCmd`, and then trigger command execution with `POST /api/nginx/test`. This was validated on nginx-ui `2.3.11 2(523) 6c86e5a5` in the local Docker container `uozi/nginx-ui:latest`. ##…","severity":"critical","patch_status":"patched","status":"past","exploited":false,"affected":"github.com/0xJacky/Nginx-UI (go)","fixed_versions":["github.com/0xJacky/Nginx-UI 1.9.10-0.20260728074146-a467ed652591"],"ids":["CVE-2026-107806"],"stack":["go","nginx"],"first_seen":"2026-10-09T20:45:02Z","updated_at":"2026-10-09T20:45:02Z"},{"id":"gitea-runner-workflow-container-options-passes-host-name-cve-2026-73802","url":"https://pwned.coffee/i/gitea-runner-workflow-container-options-passes-host-name-cve-2026-73802","title":"gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled","summary":"### Summary act_runner appends workflow-controlled `jobs.<job>.container.options` directly to the Docker HostConfig for the job container. When runner privileged mode is disabled, only `Privileged` is forced false. Host namespace flags, capability expansion, and security profile overrides from workflow YAML are preserved in the final HostConfig. A…","severity":"critical","patch_status":"patched","status":"past","exploited":false,"affected":"gitea.com/gitea/runner (go)","fixed_versions":["gitea.com/gitea/runner 1.0.9-0.20260731160927-34bfa1915022"],"ids":["CVE-2026-73802"],"stack":["go","ci"],"first_seen":"2026-10-02T23:18:12Z","updated_at":"2026-10-02T23:18:12Z"},{"id":"ixo-blockchain-x-bonds-did-resolved-payer-drain-x-entity-cve-2026-61604","url":"https://pwned.coffee/i/ixo-blockchain-x-bonds-did-resolved-payer-drain-x-entity-cve-2026-61604","title":"ixo Blockchain x/bonds DID-resolved payer drain + x/entity ICA authorization bypass","summary":"Impact Type: Improper authorization leading to unauthorized movement of user funds. The x/bonds module moved funds from an address that was resolved from a DID verification method, without verifying that the resolved address belonged to the transaction signer. Affected handlers included MsgMakeOutcomePayment, MsgBuy, MsgSell, MsgSwap, and…","severity":"critical","patch_status":"partial","status":"live","exploited":false,"affected":"github.com/ixofoundation/ixo-blockchain/v8 (go), github.com/ixofoundation/ixo-blockchain/v7 (go), github.com/ixofoundation/ixo-blockchain/v6 (go), github.com/ixofoundation/ixo-blockchain/v5 (go) +3 more","fixed_versions":["github.com/ixofoundation/ixo-blockchain/v8 8.0.0"],"ids":["CVE-2026-61604"],"stack":["go","chrome"],"first_seen":"2026-09-24T19:22:53Z","updated_at":"2026-09-24T19:22:53Z"}]}