CVE-2026-7374 affecting package kubevirt for versions less than 1.7.1-6

CVE-2026-7374 affecting package kubevirt for versions less than 1.7.1-6. A patched version of the package is available...

Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability

...

CVE-2026-39828 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-39828 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-39835 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-39835 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-27136 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-27136 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-39834 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-39834 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-39829 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-39829 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-25681 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-25681 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-39830 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-39830 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-39827 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-39827 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-25680 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-25680 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-39821 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-39821 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-42502 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-42502 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-42506 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-42506 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-46597 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-46597 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-27136 affecting package cloud-provider-kubevirt for versions less than 0.5.1-4

CVE-2026-27136 affecting package cloud-provider-kubevirt for versions less than 0.5.1-4. A patched version of the package is available...

CVE-2026-42506 affecting package cloud-provider-kubevirt for versions less than 0.5.1-4

CVE-2026-42506 affecting package cloud-provider-kubevirt for versions less than 0.5.1-4. A patched version of the package is available...

CVE-2026-39821 affecting package cloud-provider-kubevirt for versions less than 0.5.1-4

CVE-2026-39821 affecting package cloud-provider-kubevirt for versions less than 0.5.1-4. A patched version of the package is available...

SUSE CVE-2026-9804

A flaw was found in KubeVirt's virt-exportserver component. An attacker with specific namespace-level access can exploit a path traversal vulnerability in the VMExport directory endpoint. By placing a symbolic link symlink within an exported filesystem Persistent Volume Claim PVC that points...

SUSE SLES15 Security Update : kubevirt (SUSE-SU-2026:2077-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2077-1 advisory. This update for kubevirt fixes the following issue: CVE-2026-7374: Fixed privilege escalation and node compromise via symlink following...