Lucene search
K

23 matches found

OSV
OSV
added 2026/05/06 10:5 a.m.3 views

RHSA-2026:13867 Red Hat Security Advisory: rh-podman-desktop security update

Bulletin has no description...

8.2CVSS5.7AI score0.00085EPSS
Exploits1References10
RedHat Linux
RedHat Linux
added 2026/05/05 7:15 p.m.2 views

Important: Red Hat Security Advisory: rh-podman-desktop security update

An update for rh-podman-desktop is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.1CVSS5.8AI score0.00085EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2026/05/05 12:0 a.m.5 views

RHEL 10 : rh-podman-desktop (RHSA-2026:13867)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:13867 advisory. Red Hat build of Podman Desktop is a graphical tool for managing containers using Podman. It allows users to run, manage, and configure containers...

9.1CVSS5.9AI score0.00085EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2026/04/13 5:35 p.m.1 views

CVE-2026-34045

A flaw was found in Podman Desktop. A remote attacker can exploit an unauthenticated HTTP server, which lacks proper connection limits and timeouts, to trigger denial-of-service DoS conditions. This can lead to application crashes or a complete host freeze. Additionally, verbose error responses...

9.1CVSS5.8AI score0.00085EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2026/04/13 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-34045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Podman Desktop is a graphical tool for developing on containers and Kubernetes. Prior to 1.26.2, an unauthenticated HTTP server exposed by Podman Desktop allows...

9.1CVSS5.8AI score0.00085EPSS
Exploits1References2
NVD
NVD
added 2026/04/07 9:17 p.m.3 views

CVE-2026-34045

Podman Desktop is a graphical tool for developing on containers and Kubernetes. Prior to 1.26.2, an unauthenticated HTTP server exposed by Podman Desktop allows any network attacker to remotely trigger denial-of-service conditions and extract sensitive information. By abusing missing connection...

9.1CVSS0.00085EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/04/07 8:52 p.m.12 views

CVE-2026-34045 Podman Desktop WebView Server Exposed

Podman Desktop is a graphical tool for developing on containers and Kubernetes. Prior to 1.26.2, an unauthenticated HTTP server exposed by Podman Desktop allows any network attacker to remotely trigger denial-of-service conditions and extract sensitive information. By abusing missing connection...

8.2CVSS0.00085EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/04/07 8:52 p.m.1 views

CVE-2026-34045 Podman Desktop WebView Server Exposed

Podman Desktop is a graphical tool for developing on containers and Kubernetes. Prior to 1.26.2, an unauthenticated HTTP server exposed by Podman Desktop allows any network attacker to remotely trigger denial-of-service conditions and extract sensitive information. By abusing missing connection...

8.2CVSS5.9AI score0.00085EPSS
Exploits1References1
EUVD
EUVD
added 2026/04/07 8:52 p.m.0 views

EUVD-2026-19943

Podman Desktop is a graphical tool for developing on containers and Kubernetes. Prior to 1.26.2, an unauthenticated HTTP server exposed by Podman Desktop allows any network attacker to remotely trigger denial-of-service conditions and extract sensitive information. By abusing missing connection...

8.2CVSS5.9AI score0.00085EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/04/07 8:52 p.m.1 views

CVE-2026-34045

Podman Desktop is a graphical tool for developing on containers and Kubernetes. Prior to 1.26.2, an unauthenticated HTTP server exposed by Podman Desktop allows any network attacker to remotely trigger denial-of-service conditions and extract sensitive information. By abusing missing connection...

8.2CVSS5.9AI score0.00085EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2026/04/07 8:52 p.m.5 views

CVE-2026-34045

Podman Desktop prior to 1.26.2 contains an unauthenticated HTTP server that, due to missing connection limits and timeouts, can be abused over the network to trigger denial-of-service conditions and to extract sensitive information. The vulnerability can exhaust file descriptors and kernel memory...

9.1CVSS5.9AI score0.00085EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2026/04/07 12:0 a.m.4 views

Podman Desktop 资源管理错误漏洞

Podman Desktop is an open-source container management tool developed by podman-desktop. Versions of Podman Desktop prior to 1.26.2 contained a resource management vulnerability. This vulnerability stemmed from an unverified HTTP server that lacked connection limits and timeout mechanisms, which...

9.1CVSS5.8AI score0.00085EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/04/07 12:0 a.m.2 views

PT-2026-31021

Name of the Vulnerable Software and Affected Versions Podman Desktop versions prior to 1.26.2 Description Podman Desktop, a graphical tool for container and Kubernetes development, contains a flaw where an unauthenticated HTTP server can be exploited by network attackers. This allows for...

9.1CVSS5.9AI score0.00085EPSS
Exploits1References6
Tenable Nessus
Tenable Nessus
added 2026/01/30 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-24835

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Podman Desktop is a graphical tool for developing on containers and Kubernetes. A critical authentication bypass vulnerability in Podman Desktop prior to versio...

9.3CVSS5.5AI score0.00078EPSS
Exploits1References2
NVD
NVD
added 2026/01/28 9:16 p.m.3 views

CVE-2026-24835

Podman Desktop is a graphical tool for developing on containers and Kubernetes. A critical authentication bypass vulnerability in Podman Desktop prior to version 1.25.1 allows any extension to completely circumvent permission checks and gain unauthorized access to all authentication sessions. The...

9.3CVSS0.00078EPSS
Exploits1References2
EUVD
EUVD
added 2026/01/28 8:42 p.m.3 views

EUVD-2026-4858

Podman Desktop is a graphical tool for developing on containers and Kubernetes. A critical authentication bypass vulnerability in Podman Desktop prior to version 1.25.1 allows any extension to completely circumvent permission checks and gain unauthorized access to all authentication sessions. The...

9.3CVSS5.9AI score0.00078EPSS
Exploits1References2
CVE
CVE
added 2026/01/28 8:42 p.m.21 views

CVE-2026-24835

CVE-2026-24835 : Podman Desktop contains a critical authentication bypass where isAccessAllowed() unconditionally returns true, allowing malicious extensions to impersonate any user, hijack authentication sessions, and access sensitive resources. Affected: Podman Desktop (all versions prior to 1....

9.3CVSS5.9AI score0.00078EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2026/01/28 8:42 p.m.16 views

CVE-2026-24835 Podman Desktop Extension System Vulnerable to Authentication Bypass

Podman Desktop is a graphical tool for developing on containers and Kubernetes. A critical authentication bypass vulnerability in Podman Desktop prior to version 1.25.1 allows any extension to completely circumvent permission checks and gain unauthorized access to all authentication sessions. The...

9.3CVSS0.00078EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/01/28 8:42 p.m.2 views

CVE-2026-24835

Podman Desktop is a graphical tool for developing on containers and Kubernetes. A critical authentication bypass vulnerability in Podman Desktop prior to version 1.25.1 allows any extension to completely circumvent permission checks and gain unauthorized access to all authentication sessions. The...

9.3CVSS5.9AI score0.00078EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2026/01/28 8:42 p.m.1 views

CVE-2026-24835 Podman Desktop Extension System Vulnerable to Authentication Bypass

Podman Desktop is a graphical tool for developing on containers and Kubernetes. A critical authentication bypass vulnerability in Podman Desktop prior to version 1.25.1 allows any extension to completely circumvent permission checks and gain unauthorized access to all authentication sessions. The...

9.3CVSS5.9AI score0.00078EPSS
Exploits1References4
Rows per page
Query Builder