2 matches found
Security update for kubevirt
This update for kubevirt fixes the following issues: CVE-2026-9804: Symlink escape in the VMExport dir handler let an attacker controlling an exported PVC read sensitive files TLS keys, tokens, service-account creds from the exporter pod. bsc1266733 CVE-2025-14525: A VM reporting many...
8.2CVSS5.9AI score0.00656EPSS
SaveExploits0References12
Kubevirt 后置链接漏洞
Kubevirt is an open-source virtual machine manager developed by KubeVirt. KubeVirt has a postback link vulnerability, which stems from a path traversal issue in the VMExport directory endpoint. This vulnerability allows attackers with access at a specific namespace level to create symbolic links...
7.7CVSS5.9AI score0.00516EPSS
SaveExploits0References2
20