Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover

Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover 一份关于 CVE-2025-59359（Chaos-Mesh 中的一个关键 OS 命令注入漏洞）的实操取证演练。了解攻击者如何通过 GraphQL 变异劫持 Kubernetes 集群，以及如何使用 ELK 检测、分析和报告此类入侵。 作者：Mark Mallia 执行摘要 CVE-2025-59359 暴露了 Chaos-Mesh 的 Controller Manager 中存在的一个关键 OS 命令注入缺陷。该漏洞允许攻击者在 Kubernetes Pod...

CVE-2026-20182

CVE-2026-20182 Cisco Catalyst SD-WAN Peering Authentication Bypass CVE-2026-20182 — Cisco Catalyst SD-WAN Peering Authentication Bypass Assessment tool for authorized testing of Cisco Catalyst SD-WAN Controller / Manager peering authentication bypass CVE-2026-20182. | ---|--- CVE| CVE-2026-20182...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: datadog-agent, kubernetes-csi-external-provisioner, cluster-api, zot, calico, telegraf, openbao, cert-manager, flux-kustomize-controller, cluster-api-ipam-provider-in-cluster, k3s, kubescape, cilium, cloud-provider-aws, gitlab-kas, cluster-api-helm-controller, openfg...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, yunikorn-k8shim, mesosphere-vsphere-csi, cloud-provider-gcp-cloud-controller-manager, kubernetes-csi-driver-hostpath, rancher-fleet, vcluster, docker-machine-driver-harvester, emissary...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: eksctl, zot, grafana-rollout-operator, containerd, kubernetes-dashboard, bom, k8sgateway, kubernetes-dashboard-api, delve, dive, harbor-cli, controller-gen, cerbos, prometheus-operator, spire-controller-manager, nginx-prometheus-exporter,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: datadog-agent, kubernetes-csi-external-provisioner, cluster-api, zot, calico, telegraf, openbao, cert-manager, flux-kustomize-controller, cluster-api-ipam-provider-in-cluster, k3s, kubescape, cilium, cloud-provider-aws, gitlab-kas, cluster-api-helm-controller, openfg...

Unity Linux 20.1050e / 20.1070e Security Update: kubernetes (UTSA-2026-017342)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017342 advisory. A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows...

RHCOS 4 : OpenShift Container Platform 4.2.36 openshift (RHSA-2020:2594)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2594 advisory. - kubernetes: Server side request forgery SSRF in kube-controller-manager allows users to leak secret information CVE-2020-8555 Note that...

RHCOS 4 : OpenShift Container Platform 4.4.8 openshift (RHSA-2020:2448)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2448 advisory. - kubernetes: Server side request forgery SSRF in kube-controller-manager allows users to leak secret information CVE-2020-8555 Note that...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: kubernetes-ingress-defaultbackend, dive, prometheus-operator, prometheus-podman-exporter-fips, gitlab-operator, kuma, dcgm-exporter, k8ssandra-operator-fips, git-sync-fips, mcp-grafana, ceph-csi-operator, gitlab-rails-ce, crossplane-provider-aws-efs, conjur-cli,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: kubernetes-ingress-defaultbackend, dive, gobump, gitlab-operator, git-sync-fips, longhorn-backing-image-manager, secrets-store-csi-driver-provider-aws, falco-no-driver, elvish, policy-bot, kube-rbac-proxy-fips, dbmate, longhorn-manager-fips, nri-nginx, aws-nuke,...

Cisco Catalyst SD-WAN Controller Authentication Bypass (cisco-sa-sdwan-rpa-EHchtZk)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an...

GO-2025-4240 Half-blind Server Side Request Forgery in kube-controller-manager through in-tree Portworx StorageClass in k8s.io/kubernetes

Half-blind Server Side Request Forgery in kube-controller-manager through in-tree Portworx StorageClass in k8s.io/kubernetes...

Portworx Half-Blind SSRF in kube-controller-manager

...

CVE-2025-13281

A half-blind Server-Side Request Forgery SSRF found in kube-controller-manager that can be triggered when using the legacy in-tree Portworx StorageClass. An authorized user with sufficient privileges can cause the controller to make requests to internal, host-network–accessible endpoints,...

kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

EUVD-2025-203310

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

GHSA-R6J8-C6R2-37RR kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

AZL-72382 CVE-2025-13281 affecting package kubernetes for versions less than 1.30.10-18

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

DEBIAN-CVE-2025-13281

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...