https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:05:39.412039+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-335265 EUVD-2026-335265 2026-10-02T10:05:39.414841+00:00 EUVD-2026-335265 https://cve.radiocsirt.org/vuln/fkie_cve-2026-14896 fkie_cve-2026-14896 2026-10-02T10:05:39.414871+00:00

HashiCorp Nomad and Nomad Enterprise are vulnerable to a cross-namespace authorization bypass in the dynamic host volumes feature that may allow an operator holding the host volume delete permission in one namespace to delete a sticky volume claim belonging to a job in another namespace. This vulnerability, CVE-2026-14896, is fixed in Nomad Community Edition 2.0.4 and Nomad Enterprise 2.0.4, 1.11.8, and 1.10.14.

 https://cve.radiocsirt.org/vuln/ghsa-x2cv-wq6v-3cc9 GHSA-x2cv-wq6v-3cc9 2026-10-02T10:05:39.414901+00:00

HashiCorp Nomad and Nomad Enterprise are vulnerable to a cross-namespace authorization bypass in the dynamic host volumes feature that may allow an operator holding the host volume delete permission in one namespace to delete a sticky volume claim belonging to a job in another namespace. This vulnerability, CVE-2026-14896, is fixed in Nomad Community Edition 2.0.4 and Nomad Enterprise 2.0.4, 1.11.8, and 1.10.14.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-14896 UBUNTU-CVE-2026-14896 2026-10-02T10:05:39.414919+00:00

Affected: Ubuntu:18.04:LTS: nomad, Ubuntu:20.04:LTS: nomad

HashiCorp Nomad and Nomad Enterprise are vulnerable to a cross-namespace authorization bypass in the dynamic host volumes feature that may allow an operator holding the host volume delete permission in one namespace to delete a sticky volume claim belonging to a job in another namespace. This vulnerability, CVE-2026-14896, is fixed in Nomad Community Edition 2.0.4 and Nomad Enterprise 2.0.4, 1.11.8, and 1.10.14.