KE
Vendor
kerberosmansour
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-82862 | HU hulumi kerberosmansour | 8.4 | Aug 31 | Hulumi before v1.3.2 Helper Script Shadowing via Workspace Files |
| CVE-2026-82859 | HU hulumi kerberosmansour | 9.8 | Aug 31 | hulumi before v1.3.2 SCP Template Tag-on-Create Bypass |
| CVE-2026-82857 | HU hulumi kerberosmansour | 9.8 | Aug 31 | hulumi before v1.3.2 Privilege Escalation via IAM Policy |
| CVE-2026-48037 | HU hulumi kerberosmansour | 6.3 | Jul 24 | Hulumi: AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture |
| CVE-2026-48036 | HU hulumi kerberosmansour | 8.4 | Jul 24 | Hulumi: Drift classifier fails open on adapter errors and over-promotes Mixed verdicts |
| CVE-2026-48035 | HU hulumi kerberosmansour | 7.1 | Jul 24 | Hulumi: AccountFoundation audit-delivery S3 bucket could be silently weakened |
| CVE-2026-48033 | HU hulumi kerberosmansour | 8.4 | Jul 24 | Hulumi: Policy packs bypassed by a forged Pulumi-URN logical name |
| CVE-2026-48032 | HU hulumi kerberosmansour | 8.3 | Jul 24 | Hulumi: IAM-role policy checks bypassed when the role trusts multiple OIDC providers |
| CVE-2026-48034 | HU hulumi kerberosmansour | 8.5 | Jul 24 | HULUMI-H5 bypass via decoy sibling resources targeting a different bucket |