<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from tailscale</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 02 Oct 2026 07:58:58 +0000</lastBuildDate>
    <item>
      <title>ts-2026-011 — &lt;p&gt;&lt;strong&gt;&lt;em&gt;Description&lt;/em&gt;&lt;/strong&gt;: Insufficient validation of 4via6 subnet router destinations permitted access…</title>
      <link>https://cve.radiocsirt.org/vuln/ts-2026-011</link>
      <description>ts-2026-011</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ts-2026-011</guid>
    </item>
    <item>
      <title>ts-2026-010 — &lt;p&gt;&lt;strong&gt;&lt;em&gt;Description&lt;/em&gt;&lt;/strong&gt;: Tailscale SSH exposed accepted environment variable values on the command lin…</title>
      <link>https://cve.radiocsirt.org/vuln/ts-2026-010</link>
      <description>ts-2026-010</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ts-2026-010</guid>
    </item>
    <item>
      <title>ts-2026-009 — &lt;p&gt;&lt;strong&gt;&lt;em&gt;Description&lt;/em&gt;&lt;/strong&gt;: Insecure command line argument handling in Tailscale SSH permitted &lt;code&gt;root…</title>
      <link>https://cve.radiocsirt.org/vuln/ts-2026-009</link>
      <description>ts-2026-009</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ts-2026-009</guid>
    </item>
    <item>
      <title>ts-2026-008 — &lt;p&gt;&lt;strong&gt;&lt;em&gt;Description&lt;/em&gt;&lt;/strong&gt;: A single malformed HTTP request to a node running Tailscale Serve or Funnel c…</title>
      <link>https://cve.radiocsirt.org/vuln/ts-2026-008</link>
      <description>ts-2026-008</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ts-2026-008</guid>
    </item>
    <item>
      <title>ts-2026-007 — &lt;p&gt;&lt;strong&gt;&lt;em&gt;Description&lt;/em&gt;&lt;/strong&gt;: Insufficient inbound packet filtering in Services permitted access to loopbac…</title>
      <link>https://cve.radiocsirt.org/vuln/ts-2026-007</link>
      <description>ts-2026-007</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ts-2026-007</guid>
    </item>
    <item>
      <title>ts-2026-006 — &lt;p&gt;&lt;strong&gt;&lt;em&gt;Description&lt;/em&gt;&lt;/strong&gt;: Tailscale SSH allowed users to be addressed by numeric UID, bypassing &lt;code&gt;r…</title>
      <link>https://cve.radiocsirt.org/vuln/ts-2026-006</link>
      <description>ts-2026-006</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ts-2026-006</guid>
    </item>
    <item>
      <title>ts-2026-005 — &lt;p&gt;&lt;strong&gt;&lt;em&gt;Description&lt;/em&gt;&lt;/strong&gt;: Tailscale Serve Unix socket proxy targets were not restricted to &lt;code&gt;root&lt;/…</title>
      <link>https://cve.radiocsirt.org/vuln/ts-2026-005</link>
      <description>ts-2026-005</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ts-2026-005</guid>
    </item>
    <item>
      <title>ts-2026-004 — &lt;p&gt;&lt;strong&gt;&lt;em&gt;Description&lt;/em&gt;&lt;/strong&gt;: Tailscale SSH Unix socket forwarding did not respect symlink permissions, all…</title>
      <link>https://cve.radiocsirt.org/vuln/ts-2026-004</link>
      <description>ts-2026-004</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ts-2026-004</guid>
    </item>
    <item>
      <title>ts-2026-003 — &lt;p&gt;&lt;strong&gt;&lt;em&gt;Description&lt;/em&gt;&lt;/strong&gt;: OAuth access tokens recorded in tailnet audit logs.&lt;/p&gt;
&lt;h4&gt;What happened?&lt;/h…</title>
      <link>https://cve.radiocsirt.org/vuln/ts-2026-003</link>
      <description>ts-2026-003</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ts-2026-003</guid>
    </item>
    <item>
      <title>ts-2026-002 — &lt;p&gt;&lt;strong&gt;&lt;em&gt;Description&lt;/em&gt;&lt;/strong&gt;: ACL capability bypass in the Tailscale client's web interface&lt;/p&gt;
&lt;h4&gt;What ha…</title>
      <link>https://cve.radiocsirt.org/vuln/ts-2026-002</link>
      <description>ts-2026-002</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ts-2026-002</guid>
    </item>
  </channel>
</rss>
