59700 matches found
EUVD-2026-58400
Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in the AppRole authentication configuration that may allow a tenant with limited Kubernetes RBAC permissions to read files from the operator pod's filesystem and transmit their...
CVE-2026-8715
Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in the AppRole authentication configuration that may allow a tenant with limited Kubernetes RBAC permissions to read files from the operator pod's filesystem and transmit their...
CVE-2026-8715 Vault Secrets Operator vulnerable to arbitrary file read and credential exfiltration via AppRole secretIDPath
Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in the AppRole authentication configuration that may allow a tenant with limited Kubernetes RBAC permissions to read files from the operator pod's filesystem and transmit their...
Vault Secrets Operator vulnerable to arbitrary file read via AppRole secretIDPath
Summary Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in the AppRole authentication configuration that may allow a tenant with limited Kubernetes RBAC permissions to read files from the operator pod’s filesystem and transmit the...
CVE-2026-72640
The Elastic Cloud on Kubernetes ECK operator reads a list of secret references from an annotation on secrets it manages, and it accepts the namespace recorded in each reference without validating that the reference is authorized for the resource being reconciled. A user whose Kubernetes permissio...
CVE-2026-72640
The Elastic Cloud on Kubernetes ECK operator reads a list of secret references from an annotation on secrets it manages, and it accepts the namespace recorded in each reference without validating that the reference is authorized for the resource being reconciled. A user whose Kubernetes permissio...
EUVD-2026-58286
The Elastic Cloud on Kubernetes ECK operator reads a list of secret references from an annotation on secrets it manages, and it accepts the namespace recorded in each reference without validating that the reference is authorized for the resource being reconciled. A user whose Kubernetes permissio...
CVE-2026-72640 Unintended Proxy or Intermediary in Elastic Cloud on Kubernetes Leading to Cross-Namespace Secret Disclosure
The Elastic Cloud on Kubernetes ECK operator reads a list of secret references from an annotation on secrets it manages, and it accepts the namespace recorded in each reference without validating that the reference is authorized for the resource being reconciled. A user whose Kubernetes permissio...
CLEANSTART-2026-KB74242 Security fixes in strimzi-kafka-operator 1.1.0-r1
Package strimzi-kafka-operator version 1.1.0-r1 fixes 22 vulnerabilities: CVE-2026-42587, CVE-2026-47244, CVE-2026-48043, CVE-2026-50560, CVE-2026-54512...
CLEANSTART-2026-XX81961 Security fixes in postgres-operator 1.12.2-r2
Package postgres-operator version 1.12.2-r2 fixes 48 vulnerabilities: CVE-2025-22868, CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181...
CLEANSTART-2026-VJ34421 Security fixes in grafana-org-operator 1.13.0-r0
Package grafana-org-operator version 1.13.0-r0 fixes 16 vulnerabilities: CVE-2026-33186, CVE-2026-25681, CVE-2026-27136, CVE-2026-27141, CVE-2026-33814...
CLEANSTART-2026-TD71000 Security fixes in kube-logging-operator 6.5.2-r1
Package kube-logging-operator version 6.5.2-r1 fixes 4 vulnerabilities: CVE-2026-47701, ghsa-cxh2-4639-vmc5, ghsa-hrxh-6v49-42gf, CVE-2026-46600...
CLEANSTART-2026-RG18847 Security fixes in thanos-operator-fips 0.3.7-r1
Package thanos-operator-fips version 0.3.7-r1 fixes 1 vulnerabilities: CVE-2026-46600...
CLEANSTART-2026-KD98941 Security fixes in kube-logging-operator 6.6.0-r1
Package kube-logging-operator version 6.6.0-r1 fixes 4 vulnerabilities: CVE-2026-47701, ghsa-cxh2-4639-vmc5, ghsa-hrxh-6v49-42gf, CVE-2026-46600...
CLEANSTART-2026-CZ42284 Security fixes in victoriametrics-operator 0.72.0-r1
Package victoriametrics-operator version 0.72.0-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...
CLEANSTART-2026-JS92568 Security fixes in postgres-operator 1.13.0-r2
Package postgres-operator version 1.13.0-r2 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...
CLEANSTART-2026-WQ02691 Security fixes in tigera-operator 1.42.3-r1
Package tigera-operator version 1.42.3-r1 fixes 2 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf...
CLEANSTART-2026-EB56588 Security fixes in dynatrace-operator 1.10.1-r1
Package dynatrace-operator version 1.10.1-r1 fixes 1 vulnerabilities: CVE-2026-46600...
CLEANSTART-2026-IT62249 Security fixes in rabbitmq-messaging-topology-operator 1.16.0-r0
Package rabbitmq-messaging-topology-operator version 1.16.0-r0 fixes 55 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732...