Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover

Cluster-Chaos-Explotando-CVE-2025-59359-para-la-Toma-de-Kubernetes Un recorrido forense práctico de CVE-2025-59359, una falla crítica de inyección de comandos del sistema operativo en Chaos-Mesh. Aprenda cómo los atacantes secuestran clústeres de Kubernetes a través de mutaciones de GraphQL, y có...

CVE-2026-20182

CVE-2026-20182 Cisco Catalyst SD-WAN Peering Authentication Bypass CVE-2026-20182 — Cisco Catalyst SD-WAN Peering Authentication Bypass Assessment tool for authorized testing of Cisco Catalyst SD-WAN Controller / Manager peering authentication bypass CVE-2026-20182. | ---|--- CVE| CVE-2026-20182...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: emissary, helm-operator, kubescape, crossplane, rke2-cloud-provider, metallb, cluster-api-helm-controller, zot, kyverno-notation-aws, gatekeeper, kube-state-metrics, kubescape-operator, rancher-system-agent, cluster-api-gcp-controller, openbao, yunikorn-k8shim,...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: rancher-fleet, cloud-provider-gcp-cloud-controller-manager, kubernetes-csi-driver-hostpath, emissary, rancher-system-agent, mesosphere-vsphere-csi, yunikorn-k8shim, docker-machine-driver-harvester, vcluster...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: nri-consul, conftest, emissary, nri-redis, helm-operator, containerd, helm-set-status, wait-for-port, wal-g, ini-file, caddy, controller-gen, nri-apache, kubernetes-dashboard-api, docker-machine-driver-harvester, harbor-cli, lazydocker, cloud-sql-proxy,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: emissary, helm-operator, kubescape, crossplane, rke2-cloud-provider, metallb, cluster-api-helm-controller, zot, kyverno-notation-aws, gatekeeper, kube-state-metrics, kubescape-operator, rancher-system-agent, cluster-api-gcp-controller, openbao, yunikorn-k8shim,...

Unity Linux 20.1050e / 20.1070e Security Update: kubernetes (UTSA-2026-017342)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017342 advisory. A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows...

RHCOS 4 : OpenShift Container Platform 4.2.36 openshift (RHSA-2020:2594)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2594 advisory. - kubernetes: Server side request forgery SSRF in kube-controller-manager allows users to leak secret information CVE-2020-8555 Note that...

RHCOS 4 : OpenShift Container Platform 4.4.8 openshift (RHSA-2020:2448)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2448 advisory. - kubernetes: Server side request forgery SSRF in kube-controller-manager allows users to leak secret information CVE-2020-8555 Note that...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: longhorn-cli-fips, nri-postgresql-fips, longhorn-backing-image-manager, rancher-loglevel, teleport-operator-fips, buildkite-agent, docker-credential-acr-env-fips, neuvector-scanner, plugin-barman-cloud, kiam, wave, grafana-beyla, external-secrets-operator,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: longhorn-backing-image-manager, go-md2man, wave, neuvector-scanner, external-secrets-operator, docker-cli-fips, grafana-fips, neuvector-dbgen, databricks-cli-fips, percona-xtradb-cluster-operator, crossplane-function-go-templating, nri-consul,...

Cisco Catalyst SD-WAN Controller Authentication Bypass (cisco-sa-sdwan-rpa-EHchtZk)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an...

GO-2025-4240 Half-blind Server Side Request Forgery in kube-controller-manager through in-tree Portworx StorageClass in k8s.io/kubernetes

Half-blind Server Side Request Forgery in kube-controller-manager through in-tree Portworx StorageClass in k8s.io/kubernetes...

Portworx Half-Blind SSRF in kube-controller-manager

...

CVE-2025-13281

A half-blind Server-Side Request Forgery SSRF found in kube-controller-manager that can be triggered when using the legacy in-tree Portworx StorageClass. An authorized user with sufficient privileges can cause the controller to make requests to internal, host-network–accessible endpoints,...

kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

EUVD-2025-203310

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

GHSA-R6J8-C6R2-37RR kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

DEBIAN-CVE-2025-13281

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

AZL-72382 CVE-2025-13281 affecting package kubernetes for versions less than 1.30.10-18

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...