siderolabs records
4 published records for vendor siderolabs.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-476 NULL Pointer Dereference1
- CWE-732 Incorrect Permission Assignment for Critical Resource1
- CWE-863 Incorrect Authorization1
The weakness classes this vendor ships most often: where to look.
CWEAll records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2022-36103No exploit | Talos worker join token can be used to get elevated access level to the Talos APIsiderolabs · talos linux · CWE-732 | High8.8 | — | 0.7% | Sep 13, 2022 |
30Monitor | CVE-2025-59836No exploit | Omni is Vulnerable to DoS via Empty Create/Update Resource Requestssiderolabs · omni · CWE-476 | High7.5 | — | 0.5% | Oct 13, 2025 |
30Monitor | CVE-2025-61688No exploit | Omni leaks information via the APIsiderolabs · omni · CWE-200 | High7.5 | — | 0.3% | Oct 13, 2025 |
2Monitor | CVE-2025-59824No exploit | Omni Wireguard SideroLink potential escapesiderolabs · omni · CWE-863 | Low0.5 | — | 0.2% | Sep 24, 2025 |
- CVE-2022-3610335Monitor
Talos worker join token can be used to get elevated access level to the Talos API
HighCVSS 8.8No exploitEPSS 0%siderolabs · talos linuxSep 13, 2022
- CVE-2025-5983630Monitor
Omni is Vulnerable to DoS via Empty Create/Update Resource Requests
HighCVSS 7.5No exploitEPSS 0%siderolabs · omniOct 13, 2025
- CVE-2025-6168830Monitor
Omni leaks information via the API
HighCVSS 7.5No exploitEPSS 0%siderolabs · omniOct 13, 2025
- CVE-2025-598242Monitor
Omni Wireguard SideroLink potential escape
LowCVSS 0.5No exploitEPSS 0%siderolabs · omniSep 24, 2025