Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.15.0 to 1.42.0, the fix for CVE-2026-24051 changed the Darwin ioreg command to use an absolute path but left the BSD kenv command using a bare name, allowing the same PATH hijacking attack on BSD and Solaris platforms. This vulnerability is fixed in 1.43.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
⚠️ NetApp Console Agent alert: CVE-2026-39883 (CVSS 7.3) Attackers could disrupt service or cause a denial of service. No workaround; upgrade to a vendor-listed fixed release. https://vulnipulse.com/advisories/netapp-ntap-20260612-0008 #NetApp #NetAppConsoleAgent #CyberSecurity #CVE
Post summary
NetApp Console Agent CVE‑2026‑39883 is announced with a CVSS 7.3 rating, and users are advised to upgrade to the vendor‑fixed release.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | opentelemetry | opentelemetry | - | go | - |