Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover

क्लस्टर-कैओस-शोषण-CVE-2025-59359-द्वारा-कुबेरनेटीस-अधिग्रहण CVE-2025-59359 का एक व्यावहारिक फोरेंसिक वॉकथ्रू, जो Chaos-Mesh में एक गंभीर OS कमांड इंजेक्शन दोष है। जानें कि कैसे हमलावर GraphQL म्यूटेशन के माध्यम से कुबेरनेटीस क्लस्टर को हाईजैक करते हैं, और ELK का उपयोग करके उल्लंघन का पता कैसे...

CVE-2026-20182

CVE-2026-20182 Bypass de Autenticação de Peering do Cisco Catalyst SD-WAN CVE-2026-20182 — Bypass de Autenticação de Peering do Cisco Catalyst SD-WAN Ferramenta de avaliação para testes autorizados do bypass de autenticação de peering do Cisco Catalyst SD-WAN Controller / Manager CVE-2026-20182. ...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: spicedb-operator, cluster-api-ipam-provider-in-cluster, zot, metallb, flux-notification-controller, vcluster, opentelemetry-operator, kubernetes-csi-external-resizer, cluster-api-aws-controller, kyverno, flux-helm-controller, emissary, kyverno-notation-aws, kwok,...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: rancher-fleet, yunikorn-k8shim, vcluster, rancher-system-agent, emissary, kubernetes-csi-driver-hostpath, mesosphere-vsphere-csi, docker-machine-driver-harvester, cloud-provider-gcp-cloud-controller-manager...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: nova, migrate, docker-credential-gcr, zot, bom, falcoctl, wgcf, cloud-sql-proxy, kor, grafana-alloy, rancher-system-upgrade-controller, delve, terraform-mcp-server, emissary, nuclei, spire-controller-manager, nri-memcached, steampipe, trivy, gobump,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: spicedb-operator, cluster-api-ipam-provider-in-cluster, zot, metallb, flux-notification-controller, vcluster, opentelemetry-operator, kubernetes-csi-external-resizer, cluster-api-aws-controller, kyverno, flux-helm-controller, emissary, kyverno-notation-aws, kwok,...

Unity Linux 20.1050e / 20.1070e Security Update: kubernetes (UTSA-2026-017342)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017342 advisory. A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows...

RHCOS 4 : OpenShift Container Platform 4.2.36 openshift (RHSA-2020:2594)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2594 advisory. - kubernetes: Server side request forgery SSRF in kube-controller-manager allows users to leak secret information CVE-2020-8555 Note that...

RHCOS 4 : OpenShift Container Platform 4.4.8 openshift (RHSA-2020:2448)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2448 advisory. - kubernetes: Server side request forgery SSRF in kube-controller-manager allows users to leak secret information CVE-2020-8555 Note that...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: nri-apache-fips, container-object-storage-interface-fips, chisel, kubernetes-dashboard-fips, amazon-cloudwatch-agent-operator-fips, kubevirt-cdi-operator, dragonfly-operator, wave-fips, victoriametrics-fips, rancher-system-upgrade-controller, vault-env, promxy-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: nri-apache-fips, container-object-storage-interface-fips, vault-env, flagger, azure-aad-pod-identity-mic, ytt, actions-runner-controller-fips, temporal-ui-server-fips, emqx-exporter-fips, mig-parted-fips, longhorn-instance-manager, gosu, whereabouts-fips, nerdctl-fip...

Cisco Catalyst SD-WAN Controller Authentication Bypass (cisco-sa-sdwan-rpa-EHchtZk)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an...

GO-2025-4240 Half-blind Server Side Request Forgery in kube-controller-manager through in-tree Portworx StorageClass in k8s.io/kubernetes

Half-blind Server Side Request Forgery in kube-controller-manager through in-tree Portworx StorageClass in k8s.io/kubernetes...

Portworx Half-Blind SSRF in kube-controller-manager

...

CVE-2025-13281

A half-blind Server-Side Request Forgery SSRF found in kube-controller-manager that can be triggered when using the legacy in-tree Portworx StorageClass. An authorized user with sufficient privileges can cause the controller to make requests to internal, host-network–accessible endpoints,...

kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

EUVD-2025-203310

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

GHSA-R6J8-C6R2-37RR kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

AZL-72382 CVE-2025-13281 affecting package kubernetes for versions less than 1.30.10-18

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...

DEBIAN-CVE-2025-13281

A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network including link-local ...