CVE-2026-56163 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

...

CVE-2026-56163 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

...

CVE-2026-65601

A flaw was found in Traefik, a cloud-native edge router. A low-privileged user in a Kubernetes environment could exploit a namespace confusion vulnerability within the Kubernetes Gateway API provider. This flaw allows an attacker to bypass security controls by incorrectly binding a Traefik...

PT-2026-64313

Name of the Vulnerable Software and Affected Versions Microsoft Azure Kubernetes Service affected versions not specified Description Missing authentication for a critical function allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...

CVE-2026-15687

A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false...

CVE-2026-15687

A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false...

CVE-2026-15687 Path traversal via non-tar copyDirectoryFromPod

A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false...

CVE-2026-15687

CVE-2026-15687 : A security issue in the Kubernetes Java client library enables a compromised pod to create files in arbitrary locations on the client machine during copyDirectoryFromPod operations when enableTarCompressing is false. This is a path traversal vulnerability in the non-tar copyDirec...

EUVD-2026-48363

A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false...

GHSA-GG3M-VVP2-P2C5 vulnerabilities

Vulnerabilities for packages: minio, kubo, kubernetes-dashboard, external-dns, kine, cilium, telegraf, aactl, loki, kyverno, kube-fluentd-operator, fuse-overlayfs-snapshotter, kaf, containerd, k3s, flux, helm, runc, cert-manager, kubernetes...

CVE-2026-46600 vulnerabilities

Vulnerabilities for packages: minio, kubo, kubernetes-dashboard, external-dns, kine, cilium, telegraf, aactl, loki, kyverno, kube-fluentd-operator, fuse-overlayfs-snapshotter, kaf, containerd, k3s, flux, helm, runc, cert-manager, kubernetes...

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-16745

A flaw was found in odh-dashboard, the web console component of Red Hat OpenShift AI RHOAI. Due to incorrect network binding, a malicious actor within the cluster can bypass authentication and impersonate any user by providing an arbitrary access token. This allows an attacker to gain unauthorize...

EUVD-2026-47972

A flaw was found in odh-dashboard, the web console component of Red Hat OpenShift AI RHOAI. Due to incorrect network binding, a malicious actor within the cluster can bypass authentication and impersonate any user by providing an arbitrary access token. This allows an attacker to gain unauthorize...

GHSA-GG3M-VVP2-P2C5 vulnerabilities

Vulnerabilities for packages: terraform, livekit-cli, aactl, fuse-overlayfs-snapshotter, loki, coder, external-dns, prometheus-mongodb-exporter, kubo-fips, kubernetes, prometheus, cilium-envoy-fips, k3s, telegraf, helm, kyverno, kine, coder-fips, runc, backup-restore-operator, reports-server,...

CVE-2026-46600 vulnerabilities

Vulnerabilities for packages: terraform, livekit-cli, aactl, fuse-overlayfs-snapshotter, loki, coder, external-dns, prometheus-mongodb-exporter, kubo-fips, kubernetes, prometheus, cilium-envoy-fips, k3s, telegraf, helm, kyverno, kine, coder-fips, runc, backup-restore-operator, reports-server,...

PT-2026-64145

A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false...

MAL-2026-11003 Malicious code in n8n-nodes-net-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ddadbbcb032b0a9eb2b0acb04579ceb1da5c1814d3a0d212830b82191dbeca0 The package advertises itself as an n8n community 'Network Utils' node, but its main entry index.js is an IIFE that executes on require. On load it: ...

MAL-2026-10997 Malicious code in n8n-nodes-http-probe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0109ab57af20f91ac1aa18ef76721b43437b80b9281bc16d5f4f2a47380935af index.js executes a top-level IIFE on module load that 1 spawns /bin/bash wired to a TCP socket connecting to 103.27.109.184:8895, giving the attacke...

MAL-2026-10999 Malicious code in n8n-nodes-task-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991093c97f0d954740c4b72a2e7725a501df211c94634979ebadc52652f2ebe8 The package impersonates the n8n task-runner subsystem but its shipped n8n node MyNode.js is a no-op stub whose execute returns . The real payload...