CVE WATCH / VULNERABILITY DETAIL
CVE-2026-91168
MEDIUMCVSS 6.8NVD feed
Published 4 November 2026 · tracked since 5 November 2026
Description
Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. From 0.21.0 until 0.29.0, the Kubernetes request correlator in warpgate-protocol-kubernetes/src/correlator.rs keys an authorized AdmittedTarget by username, target_name, and client IP rather than by the immutable user UUID, whi
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-54372 HIGH 8.8
- CVE-2026-121751 LOW 3.1
- CVE-2026-121746 MEDIUM 5.5
- CVE-2026-121747 MEDIUM 5.5
- CVE-2026-121748 LOW 3.6
- CVE-2026-121749 LOW 3.3
- CVE-2026-121750 LOW 3.1
- CVE-2026-121745 LOW 2.5
- CVE-2026-103002 HIGH 8.8
- CVE-2026-102280