control-plane

• CVE-2026-33032 - nginx-ui MCP auth bypass 2026-06-07
• CVE-2026-41485 - Kyverno forEach mutation panic DoS 2026-05-03