Skip to content
NewA calmer, faster ZeroHour
Exploit / PoChighExploited in the wild

U.S. CISA adds an Aquasecurity Trivy flaw to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairs ()1 min read2 · 1 read
Analyze CVE-2026-33634 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-33634
Embedded Malicious Code in Aquasecurity Trivy, trivy-action, and setup-trivy Releases
9.460%KEVPoC ×2
KEV

From the original article

1 min read at securityaffairs.com

The U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds an Aquasecurity Trivy flaw to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.