SUSE CVE-2026-122318

Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and subjectRegExp checks when the signing certificate has no Subject Alternative Name. Attackers holding a leaf certificate from a configured private trust root can omit the SAN, set th...

CVE-2026-122318

Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and subjectRegExp checks when the signing certificate has no Subject Alternative Name. Attackers holding a leaf certificate from a configured private trust root can omit the SAN, set th...

CVE-2026-122318 Kyverno before 1.19.2 Cosign Identity Check Bypass via Empty SAN Certificates

Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and subjectRegExp checks when the signing certificate has no Subject Alternative Name. Attackers holding a leaf certificate from a configured private trust root can omit the SAN, set th...

CVE-2026-122318

Kyverno versions before 1.19.2 are vulnerable to an authentication bypass in the matchCertificateData function. The root cause is that the system skips verifyImages subject and subjectRegExp checks when a signing certificate lacks a Subject Alternative Name (SAN) . An attacker possessing a leaf c...

CVE-2026-122318

Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and subjectRegExp checks when the signing certificate has no Subject Alternative Name. Attackers holding a leaf certificate from a configured private trust root can omit the SAN, set th...

CVE-2026-122318 Kyverno before 1.19.2 Cosign Identity Check Bypass via Empty SAN Certificates

Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and subjectRegExp checks when the signing certificate has no Subject Alternative Name. Attackers holding a leaf certificate from a configured private trust root can omit the SAN, set th...

EUVD-2026-117228

Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and subjectRegExp checks when the signing certificate has no Subject Alternative Name. Attackers holding a leaf certificate from a configured private trust root can omit the SAN, set th...

Kyverno encryption issue vulnerability

Versions prior to Kyverno 1.19.2 contain an encryption-related vulnerability. This vulnerability arises because matchCertificateData skips the subject and subjectRegExp checks performed by verifyImages when a signed certificate lacks a subject alternative name. As a result, authentication can be...

PT-2026-137339

Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and subjectRegExp checks when the signing certificate has no Subject Alternative Name. Attackers holding a leaf certificate from a configured private trust root can omit the SAN, set th...

CVE-2026-122318: kyverno: Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and…

Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and subjectRegExp checks when the signing certificate has no Subject Alternative Name. Attackers holding a leaf certificate from a configured private trust root can omit the SAN, set th...