CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

ATTACKERKB•added 2026/07/31 5:45 p.m.•10 views

CVE-2026-54725

vault-secrets-webhook is a Kubernetes mutating webhook that makes direct secret injection into Pods possible. Prior to 1.23.1, parseVaultConfig in pkg/webhook/config.go accepts the vault.security.banzaicloud.io/vault-addr annotation, MutateConfigMap and MutateSecret call newVaultClient in...

9.6CVSS5.5AI score0.0032EPSS

SaveExploits0References4Affected Software1

Vulnrichment•added 2026/07/31 5:45 p.m.•9 views

CVE-2026-54725 vault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest API

9.6CVSS5.5AI score0.0032EPSS

SaveExploits0References3

OSV•added 2026/07/31 5:45 p.m.•8 views

CVE-2026-54725 vault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest API

9.6CVSS5.5AI score

SaveExploits0References5

Cvelist•added 2026/07/31 5:45 p.m.•37 views

CVE-2026-54725 vault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest API

9.6CVSS0.0032EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by