Lucene search
+L

59704 matches found

IBM Security Bulletins
IBM Security Bulletins
added last week14 views

Security Bulletin: Vault Secrets Operator vulnerable to arbitrary file read and credential exfiltration via AppRole secretIDPath

Summary Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in the AppRole authentication configuration that may allow a tenant with limited Kubernetes RBAC permissions to read files from the operator pod's filesystem and transmit the...

9.6CVSS5.5AI score0.00319EPSS
SaveExploits0Affected Software1
NVD
NVD
added last week10 views

CVE-2026-8715

Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in the AppRole authentication configuration that may allow a tenant with limited Kubernetes RBAC permissions to read files from the operator pod's filesystem and transmit their...

9.6CVSS0.00319EPSS
SaveExploits0References1
Cvelist
Cvelist
added last week34 views

CVE-2026-8715 Vault Secrets Operator vulnerable to arbitrary file read and credential exfiltration via AppRole secretIDPath

Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in the AppRole authentication configuration that may allow a tenant with limited Kubernetes RBAC permissions to read files from the operator pod's filesystem and transmit their...

9.6CVSS0.00319EPSS
SaveExploits0References1
CVE
CVE
added last week62 views

CVE-2026-8715

CVE-2026-8715 – Vault Secrets Operator : Affected versions are 1.3.0–1.4.1 of Vault Secrets Operator. The issue is an arbitrary file read/credential exfiltration in the AppRole authentication configuration that could allow a tenant with limited Kubernetes RBAC to read files from the operator pod ...

9.6CVSS5.4AI score0.00319EPSS
SaveExploits0References1
EUVD
EUVD
added last week10 views

EUVD-2026-58400

Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in the AppRole authentication configuration that may allow a tenant with limited Kubernetes RBAC permissions to read files from the operator pod's filesystem and transmit their...

9.6CVSS5.4AI score0.00319EPSS
SaveExploits0References1
OSV
OSV
added last week26 views

CVE-2026-8715 Vault Secrets Operator vulnerable to arbitrary file read and credential exfiltration via AppRole secretIDPath

Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in the AppRole authentication configuration that may allow a tenant with limited Kubernetes RBAC permissions to read files from the operator pod's filesystem and transmit their...

9.6CVSS5.6AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added last week16 views

CVE-2026-8715

Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in the AppRole authentication configuration that may allow a tenant with limited Kubernetes RBAC permissions to read files from the operator pod's filesystem and transmit their...

9.6CVSS5.3AI score0.00319EPSS
SaveExploits0References2Affected Software1
HashiCorp Security Advisories
HashiCorp Security Advisories
added last week13 views

Vault Secrets Operator vulnerable to arbitrary file read via AppRole secretIDPath

Summary Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in the AppRole authentication configuration that may allow a tenant with limited Kubernetes RBAC permissions to read files from the operator pod’s filesystem and transmit the...

9.6CVSS5.5AI score0.00319EPSS
SaveExploits0
NVD
NVD
added last week5 views

CVE-2026-72640

The Elastic Cloud on Kubernetes ECK operator reads a list of secret references from an annotation on secrets it manages, and it accepts the namespace recorded in each reference without validating that the reference is authorized for the resource being reconciled. A user whose Kubernetes permissio...

6.5CVSS0.00248EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added last week6 views

CVE-2026-72640

The Elastic Cloud on Kubernetes ECK operator reads a list of secret references from an annotation on secrets it manages, and it accepts the namespace recorded in each reference without validating that the reference is authorized for the resource being reconciled. A user whose Kubernetes permissio...

6.5CVSS5.3AI score0.00248EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added last week7 views

EUVD-2026-58286

The Elastic Cloud on Kubernetes ECK operator reads a list of secret references from an annotation on secrets it manages, and it accepts the namespace recorded in each reference without validating that the reference is authorized for the resource being reconciled. A user whose Kubernetes permissio...

6.5CVSS5.3AI score0.00248EPSS
SaveExploits0References1
Cvelist
Cvelist
added last week28 views

CVE-2026-72640 Unintended Proxy or Intermediary in Elastic Cloud on Kubernetes Leading to Cross-Namespace Secret Disclosure

The Elastic Cloud on Kubernetes ECK operator reads a list of secret references from an annotation on secrets it manages, and it accepts the namespace recorded in each reference without validating that the reference is authorized for the resource being reconciled. A user whose Kubernetes permissio...

6.5CVSS0.00248EPSS
SaveExploits0References1
OSV
OSV
added last week4 views

CLEANSTART-2026-KB74242 Security fixes in strimzi-kafka-operator 1.1.0-r1

Package strimzi-kafka-operator version 1.1.0-r1 fixes 22 vulnerabilities: CVE-2026-42587, CVE-2026-47244, CVE-2026-48043, CVE-2026-50560, CVE-2026-54512...

8.1CVSS6.2AI score0.0099EPSS
SaveExploits2References1
OSV
OSV
added last week3 views

CLEANSTART-2026-TD71000 Security fixes in kube-logging-operator 6.5.2-r1

Package kube-logging-operator version 6.5.2-r1 fixes 4 vulnerabilities: CVE-2026-47701, ghsa-cxh2-4639-vmc5, ghsa-hrxh-6v49-42gf, CVE-2026-46600...

7.5CVSS7.6AI score0.0035EPSS
SaveExploits0References1
OSV
OSV
added last week6 views

CLEANSTART-2026-VJ34421 Security fixes in grafana-org-operator 1.13.0-r0

Package grafana-org-operator version 1.13.0-r0 fixes 16 vulnerabilities: CVE-2026-33186, CVE-2026-25681, CVE-2026-27136, CVE-2026-27141, CVE-2026-33814...

9.6CVSS6.4AI score0.01557EPSS
SaveExploits2References1
OSV
OSV
added last week4 views

CLEANSTART-2026-XX81961 Security fixes in postgres-operator 1.12.2-r2

Package postgres-operator version 1.12.2-r2 fixes 48 vulnerabilities: CVE-2025-22868, CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181...

10CVSS6.3AI score0.00838EPSS
SaveExploits2References1
OSV
OSV
added last week5 views

CLEANSTART-2026-CZ42284 Security fixes in victoriametrics-operator 0.72.0-r1

Package victoriametrics-operator version 0.72.0-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

7.5CVSS7.7AI score0.00446EPSS
SaveExploits0References1
OSV
OSV
added last week3 views

CLEANSTART-2026-TQ91527 Security fixes in rabbitmq-cluster-operator 2.22.2-r1

Package rabbitmq-cluster-operator version 2.22.2-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

7.5CVSS7.7AI score0.00446EPSS
SaveExploits0References1
OSV
OSV
added last week4 views

CLEANSTART-2026-WQ02691 Security fixes in tigera-operator 1.42.3-r1

Package tigera-operator version 1.42.3-r1 fixes 2 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf...

7.5CVSS7.6AI score0.00446EPSS
SaveExploits0References1
OSV
OSV
added last week6 views

CLEANSTART-2026-JS92568 Security fixes in postgres-operator 1.13.0-r2

Package postgres-operator version 1.13.0-r2 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

7.5CVSS7.7AI score0.00446EPSS
SaveExploits0References1
Rows per page
Query Builder