CVE-2026-20182

CVE-2026-20182 Cisco Catalyst SD-WAN Peering Authentication Bypass CVE-2026-20182 — Cisco Catalyst SD-WAN Peering Authentication Bypass Assessment tool for authorized testing of Cisco Catalyst SD-WAN Controller / Manager peering authentication bypass CVE-2026-20182. | ---|--- CVE| CVE-2026-20182...

Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover

Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover A hands-on forensic walkthrough of CVE-2025-59359, a critical OS command injection flaw in Chaos-Mesh. Learn how attackers hijack Kubernetes clusters via GraphQL mutations, and how to detect, analyze, and report the breach using ELK...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: hubble, pulumi-kubernetes-operator, datadog-agent, k3s, telegraf, rancher-system-agent, cluster-api-gcp-controller, apisix-ingress-controller, cluster-api-aws-controller, zot, cilium, helm-operator, flux-helm-controller, kapp-controller, cert-manager-webhook-pdns,...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, vcluster, yunikorn-k8shim, rancher-fleet, kubernetes-csi-driver-hostpath, mesosphere-vsphere-csi, emissary, cloud-provider-gcp-cloud-controller-manager, rancher-system-agent...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: hubble, migrate, kubernetes-csi-driver-nfs, nri-haproxy, grafana-alloy, regclient, prometheus, docker-credential-gcr, nri-redis, ip-masq-agent, mockgen, fzf, wire-go, gcsfuse, neuvector-sigstore-interface, spark-operator, render-template, yunikorn-k8shim,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: hubble, pulumi-kubernetes-operator, datadog-agent, k3s, telegraf, rancher-system-agent, cluster-api-gcp-controller, apisix-ingress-controller, cluster-api-aws-controller, zot, cilium, helm-operator, flux-helm-controller, kapp-controller, cert-manager-webhook-pdns,...

Unity Linux 20.1050e / 20.1070e Security Update: kubernetes (UTSA-2026-017342)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017342 advisory. A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows...

RHCOS 4 : OpenShift Container Platform 4.2.36 openshift (RHSA-2020:2594)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2594 advisory. - kubernetes: Server side request forgery SSRF in kube-controller-manager allows users to leak secret information CVE-2020-8555 Note that...

RHCOS 4 : OpenShift Container Platform 4.4.8 openshift (RHSA-2020:2448)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2448 advisory. - kubernetes: Server side request forgery SSRF in kube-controller-manager allows users to leak secret information CVE-2020-8555 Note that...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: controller-gen, docker-credential-acr-env-fips, cert-manager-csi-driver, nri-redis-fips, nri-consul-fips, verticadb-operator-fips, cadvisor, falco-no-driver, consul-k8s, knative-kafka-broker, knative-storage-migrate-fips, kubescape-operator-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: knative-storage-migrate-fips, nri-f5-fips, temporal-ui-server, amazon-k8s-cni, pluto, cadence, grafana-operator, kuberay-operator-fips, nri-redis, xcover, terraform-fips, prometheus-stackdriver-exporter, mc-fips, virt-controller, cloud-provider-vsphere, nri-nginx,...

Cisco Catalyst SD-WAN Controller Authentication Bypass (cisco-sa-sdwan-rpa-EHchtZk)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an...

GO-2025-4240 Half-blind Server Side Request Forgery in kube-controller-manager through in-tree Portworx StorageClass in k8s.io/kubernetes

Half-blind Server Side Request Forgery in kube-controller-manager through in-tree Portworx StorageClass in k8s.io/kubernetes...

Portworx Half-Blind SSRF in kube-controller-manager

...

CVE-2025-13281

A half-blind Server-Side Request Forgery SSRF found in kube-controller-manager that can be triggered when using the legacy in-tree Portworx StorageClass. An authorized user with sufficient privileges can cause the controller to make requests to internal, host-network–accessible endpoints,...

kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

EUVD-2025-203310

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

GHSA-R6J8-C6R2-37RR kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

DEBIAN-CVE-2025-13281

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

AZL-72382 CVE-2025-13281 affecting package kubernetes for versions less than 1.30.10-18

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...