166 matches found
Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover
Cluster-Chaos-Exploitation-de-CVE-2025-59359-pour-la-prise-de-contrôle-de-Kubernetes Une procédure pas à pas médico-légale pratique de CVE-2025-59359, une faille critique d'injection de commandes OS dans Chaos-Mesh. Apprenez comment les attaquants détournent les clusters Kubernetes via des...
CVE-2026-20182
CVE-2026-20182 Contournement de l'authentification de peering Cisco Catalyst SD-WAN CVE-2026-20182 — Contournement de l'authentification de peering Cisco Catalyst SD-WAN Outil d'évaluation pour les tests autorisés du contournement de l'authentification de peering du contrôleur/gestionnaire Cisco...
CVE-2026-2270
A flaw was found in Kubernetes kube-controller-manager. The StatefulSet controller restores ControllerRevision data onto the whole StatefulSet object, including metadata. A user with namespace-scoped write access to StatefulSet and ControllerRevision can cause the controller to create a pod in...
PT-2026-97726
Name of the Vulnerable Software and Affected Versions Kubernetes affected versions not specified Description A confused deputy attack in the kube-controller-manager allows a user with write permissions for StatefulSet and ControllerRevision objects within their own namespace to potentially create...
StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation
CVSS Rating: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N - Medium 5.9 A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions on StatefulSet and ControllerRevision objects to create a cross-namespace pod. An attacker exploiting thi...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Server Side Request Forgery (SSRF) vulnerability in kubernetes [CVE-2025-13281]
Summary IBM Watson Speech Services Cartridge is vulnerable to a Server Side Request Forgery SSRF vulnerability in kubernetes, due to an issue in kube-controller-manager when using the in-tree Portworx StorageClass CVE-2025-13281. Kubernetes is used as part of our speech utilities. This...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-external-snapshotter, cluster-api-ipam-provider-in-cluster, cluster-autoscaler, cert-manager-istio-csr, yunikorn-k8shim, caddy, kube-vip-cloud-provider, crossplane, datadog-operator, cluster-api-aws-controller, datadog-agent, kubeflow-pipelines,...
GO-2025-3774 vulnerabilities
Vulnerabilities for packages: emissary, yunikorn-k8shim, docker-machine-driver-harvester, vcluster, cloud-provider-gcp-cloud-controller-manager, mesosphere-vsphere-csi, kubernetes-csi-driver-hostpath, rancher-system-agent, rancher-fleet...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: nri-consul, argo-events, wire-go, aactl, amazon-cloudwatch-agent-operator, wgcf, kubernetes-dashboard-api, controller-gen, kubernetes-dashboard-auth, rclone, kapp, glow, rancher-system-upgrade-controller, swagger, flux, guac, delve, kyverno-notation-aws, zot,...
GHSA-GCJH-H69Q-9W9G vulnerabilities
Vulnerabilities for packages: kubernetes-csi-external-snapshotter, cluster-api-ipam-provider-in-cluster, cluster-autoscaler, cert-manager-istio-csr, yunikorn-k8shim, caddy, kube-vip-cloud-provider, crossplane, datadog-operator, cluster-api-aws-controller, datadog-agent, kubeflow-pipelines,...
Unity Linux 20.1050e / 20.1070e Security Update: kubernetes (UTSA-2026-017342)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017342 advisory. A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows...
RHCOS 4 : OpenShift Container Platform 4.2.36 openshift (RHSA-2020:2594)
The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2594 advisory. - kubernetes: Server side request forgery SSRF in kube-controller-manager allows users to leak secret information CVE-2020-8555 Note that...
RHCOS 4 : OpenShift Container Platform 4.4.8 openshift (RHSA-2020:2448)
The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2448 advisory. - kubernetes: Server side request forgery SSRF in kube-controller-manager allows users to leak secret information CVE-2020-8555 Note that...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: fleet-server, prometheus-redis-exporter-fips, cilium, argo-workflows, logstash-exporter-fips, terraform-docs, harbor-scanner-trivy, knative-eventing, vault-fips, nerdctl-fips, crossplane-provider-aws-cognitoidentity-fips, kube-conformance, k6-operator, mcp-grafana,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: fleet-server, argo-workflows, harbor-scanner-trivy, knative-eventing, nerdctl-fips, crossplane-provider-aws-cognitoidentity-fips, mcp-grafana, splunk-otel-collector, go-licenses, crossplane-provider-azure-storage, task, kubernetes-dashboard-metrics-scraper,...
Cisco Catalyst SD-WAN Controller Authentication Bypass (cisco-sa-sdwan-rpa-EHchtZk)
According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an...
OESA-2026-1162 kubernetes security update
Container cluster management. Security Fixes: A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the...
GO-2025-4240 Half-blind Server Side Request Forgery in kube-controller-manager through in-tree Portworx StorageClass in k8s.io/kubernetes
Half-blind Server Side Request Forgery in kube-controller-manager through in-tree Portworx StorageClass in k8s.io/kubernetes...
