Security Bulletin: IBM Cloud Pak for Data is vulnerable to denial of service due to cert-manager ( CVE-2026-25518 )

Summary Potential vulnerabilities in cert-manager package CVE-2026-25518 has been identified that may affect IBM Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-25518 DESCRIPTION: cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and...

CVE-2026-25518: Improper Validation of Array Index

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. In versions from 1.18.0 to before 1.18.5 and from 1.19.0 to before 1.19.3, the cert-manager-controller performs DNS...

PT-2026-6308

Name of the Vulnerable Software and Affected Versions cert-manager versions 1.18.0 through 1.18.4 cert-manager versions 1.19.0 through 1.19.2 Description cert-manager simplifies the process of obtaining, renewing, and using certificates in Kubernetes clusters. The cert-manager-controller performs...

MAL-2025-14008 Malicious code in acme-dns-01-lightsail (npm)

The package acme-dns-01-lightsail was found to contain malicious code...

Malicious code in acme-dns-01-freedns (npm)

The package acme-dns-01-freedns was found to contain malicious code...

MAL-2025-14006 Malicious code in acme-dns-01-dyndns (npm)

The package acme-dns-01-dyndns was found to contain malicious code...