Ssiderolabs

Products

Exploited and recent CVEs

• CVE-2026-77564 Low 3.3 Talos Linux: Support bundle does not redact registry credentials 0.1%
• CVE-2026-45720 High 7.0 Omni: TOCTOU race condition allows multiple concurrent uses of a single-use SAML session token 0.1%
• CVE-2026-45723 Low 2.7 Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic 0.5%
• CVE-2026-45726 High 7.6 Omni: Reader-level users can retrieve imported cluster CA keys via ResourceService 0.1%
• CVE-2025-61688 High 8.6 Omni leaks information via the API 0.3%
• CVE-2025-59836 Medium 5.3 Omni is Vulnerable to DoS via Empty Create/Update Resource Requests 0.6%
• CVE-2025-59824 Low 0.5 Omni Wireguard SideroLink potential escape 0.2%
• CVE-2022-36103 High 7.2 Talos worker join token can be used to get elevated access level to the Talos API 0.7%