CyberPulse Cybersecurity News, with Source Links
FA
AWS Security Bulletins

CVE-2026-122192 - Guest Access to Firecracker Process Memory After a Failed Memory Discard

Bulletin ID: 2026-169-AWS Publication Date: 11/04/2026 11:30 AM PST Description: We identified CVE-2026-122192, an issue in Firecracker v0.23.0 through v1.16.1 that, under certain host memory conditions, can let a root user in a guest read or modify memory of the Firecracker process. It affects VMs restored from a snapshot using the File memory backend with a balloon or virtio-mem device. Impacted versions: Firecrack…

Vulnerabilities & Zero-Day Web Development Cloud Computing
Read the full article at AWS Security Bulletins Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
AWS Security Bulletins

CVE-2026-122266 - Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS

Bulletin ID: 2026-170-AWS Publication Date: 11/04/2026 13:30 PM PST Description: We identified CVE-2026-122266, an issue in Amazon EKS Network Policy Agent (aws-network-policy-agent). Improper isolation of shared eBPF connection tracking state might allow an authenticated adjacent user to bypass NetworkPolicy ingress enforcement on co-located pods. Impacted versions: - aws-network-policy-agent < 1.3.7 - Amazon VPC CN…

Vulnerabilities & Zero-Day Cloud Computing
Source
Security Affairs

Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released

Barracuda patched two flaws that can be chained to give attackers root access to Email Security Gateway appliances. Barracuda has patched two vulnerabilities that can be chained to gain root access to its Email Security Gateway (ESG) appliances. CVE-2026-116606 (CVSS score of 9.3) is an authentication bypass that lets unauthenticated attackers modify appliance configurations. CVE-2026-111560 […]

Vulnerabilities & Zero-Day Identity & Access Security
Source