Canonical Juju

• CVE-2026-93336 High 7.1 Missing authorization in the unit resources download route in Juju controllers 0.2%
• CVE-2026-5412 Critical 9.9 Juju CloudSpec API could leak senstive information 0.4%
• CVE-2026-5774 Medium 6.1 Juju API Server Denial of Service and Authentication Replay via Unsynchronized Token Map 0.2%
• CVE-2026-4370 Critical 10.0 Improper TLS Client/Server authentication and certificate verification on Database Cluster 0.4%
• CVE-2026-32694 Medium 6.6 Insecure Direct Object Reference attack via predictable secret ID in Juju 0.3%
• CVE-2026-32693 High 8.8 Unauthorized access to Kubernetes secrets in Juju 0.3%
• CVE-2026-32692 High 7.6 Unauthorized update of out-of-scope Vault secrets 0.2%
• CVE-2026-32691 Medium 5.3 Timing ownership claim attack on new external back-end secrets 0.2%
• CVE-2026-1237 Low 2.1 Vulnerable cross-model authorization in juju. If a charm's cross-model permissions are revoked or expire, a malicious user who is able to update database records can mint an invalid macaroon that is i 0.1%
• CVE-2025-0928 High 8.8 Arbitrary executable upload via authenticated endpoint 0.7%
• CVE-2025-53513 High 8.8 Zip slip vulnerability in Juju 0.8%
• CVE-2025-53512 Medium 6.5 Sensitive log retrieval in Juju 0.4%