SI
Vendor
siderolabs
9
CVEs
0
On KEV
1
New 30D
Products
TA8.8
talos
siderolabs
2 CVEs0 on KEV1 new
OM7.6
omni
siderolabs
6 CVEs0 on KEV0 new
TL8.8
Talos Linux
Siderolabs
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-77564 | TA talos siderolabs | 3.3 | Oct 14 | Talos Linux: Support bundle does not redact registry credentials |
| CVE-2026-45720 | OM omni siderolabs | 7.0 | Sep 17 | Omni: TOCTOU race condition allows multiple concurrent uses of a single-use SAML session token |
| CVE-2026-45723 | OM omni siderolabs | 2.7 | Sep 17 | Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic |
| CVE-2026-45726 | OM omni siderolabs | 7.6 | Sep 17 | Omni: Reader-level users can retrieve imported cluster CA keys via ResourceService |
| CVE-2025-61688 | OM omni siderolabs | 7.5 | Oct 13 | Omni leaks information via the API |
| CVE-2025-59836 | OM omni siderolabs | 7.5 | Oct 13 | Omni is Vulnerable to DoS via Empty Create/Update Resource Requests |
| CVE-2025-59824 | OM omni siderolabs | 5.4 | Sep 24 | Omni Wireguard SideroLink potential escape |
| CVE-2022-36103 | TA talos siderolabs | 8.8 | Sep 13 | Talos worker join token can be used to get elevated access level to the Talos API |