CVE-2026-102623

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

EUVD-2026-89100

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

CVE-2026-102623

A flaw in KubeVirt allows an authenticated user with permissions to create Virtual Machine Instances (VMIs) to trigger a Denial of Service (DoS) . The vulnerability exists because the virt-controller component fails to properly validate volume configurations, specifically when a virtual machine d...

CVE-2026-102623 Kubevirt: kubevirt: virt-controller nil-pointer dereference via malformed ephemeral volume

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

CVE-2026-102623 Kubevirt: kubevirt: virt-controller nil-pointer dereference via malformed ephemeral volume

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

CVE-2026-102623

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

GO-2024-2688 vulnerabilities

Vulnerabilities for packages: virt-operator-fips, harvester, virt-controller-fips, virt-operator, virt-launcher, harvester-fips...

GO-2024-2816 vulnerabilities

Vulnerabilities for packages: virt-operator-fips, harvester, virt-controller-fips, virt-operator, virt-launcher, harvester-fips...

GO-2025-4104 vulnerabilities

Vulnerabilities for packages: virt-operator-fips, docker-machine-driver-harvester, virt-controller-fips, virt-launcher, virt-handler...

GO-2025-4105 vulnerabilities

Vulnerabilities for packages: virt-operator-fips, docker-machine-driver-harvester, virt-controller-fips, virt-launcher, virt-handler...

GHSA-VJHF-6XFR-5P9G vulnerabilities

Vulnerabilities for packages: virt-operator-fips, harvester, virt-controller-fips, virt-operator, virt-launcher, harvester-fips...

CVE-2024-33394 vulnerabilities

Vulnerabilities for packages: virt-operator-fips, harvester, virt-controller-fips, virt-operator, virt-launcher, harvester-fips...

GHSA-4Q63-MR2M-57HF vulnerabilities

Vulnerabilities for packages: virt-operator-fips, harvester, virt-controller-fips, virt-operator, virt-launcher, harvester-fips...

CVE-2025-14525 vulnerabilities

Vulnerabilities for packages: virt-operator-fips, harvester, docker-machine-driver-harvester, virt-controller-fips, virt-launcher, virt-handler, harvester-fips...

GHSA-25MH-HP8X-CGRV vulnerabilities

Vulnerabilities for packages: virt-operator-fips, harvester, docker-machine-driver-harvester, virt-controller-fips, virt-launcher, virt-handler, harvester-fips...

CVE-2024-31420 vulnerabilities

Vulnerabilities for packages: virt-operator-fips, harvester, virt-controller-fips, virt-operator, virt-launcher, harvester-fips...

GHSA-J6CV-3W8P-VRG8 vulnerabilities

Vulnerabilities for packages: virt-operator-fips, virt-api, virt-api-fips, virt-controller-fips, virt-operator, virt-controller, virt-handler-fips, virt-launcher, virt-handler...

CVE-2026-6383 vulnerabilities

Vulnerabilities for packages: virt-operator-fips, virt-api, virt-api-fips, virt-controller-fips, virt-operator, virt-controller, virt-handler-fips, virt-launcher, virt-handler...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: aws-flb-kinesis, aws-fsx-csi-driver-fips, cephcsi, gitsign, goose, langfuse-fips, otel-cli, flux-helm-controller, snyk-cli, cluster-api, ytt, gpu-operator-fips, k8ssandra-operator, flux-operator-fips, kafka-proxy, crossplane-provider-aws-lambda-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: aws-fsx-csi-driver-fips, cephcsi, langfuse-fips, smarter-device-manager, gpu-operator-fips, crossplane-provider-aws-lambda-fips, terraform-provider-sendgrid-fips, argocd-image-updater, istio-fips, falcoctl-fips, extism, atlantis, hcloud, amazon-k8s-cni-fips,...