Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

200 matches found

Tenable Nessus
Tenable Nessus•added 2026/11/01 12:00 a.m.•14 views

openSUSE 16: kubevirt1.9-container-disk / kubevirt1.9-libguestfs-tools / etc (openSUSE-SU-2026:22180-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22180-1 advisory. - CVE-2026-13622: virt-handler migration proxy follows symlinks allowing container escape to host bsc1272840. - CVE-2026-78659:...

9.1CVSS7.7AI score0.00866EPSS
SaveExploits0References18
OPENSUSE Linux
OPENSUSE Linux•added 2026/10/31 12:00 a.m.•15 views

Security update for kubevirt1.9 (important)

openSUSE security update: security update for kubevirt1.9 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22180-1 Rating: important References: bsc1272840 bsc1285255 bsc1286984 bsc1287039 bsc1287143 bsc1287446 Cross-References: CVE-2026-13622...

9.3CVSS7.4AI score0.00866EPSS
SaveExploits0References6
osv_opensuse
osv_opensuse•added 2026/10/28 5:31 p.m.•15 views

OPENSUSE-SU-2026:22180-1 Security update for kubevirt1.9

This update for kubevirt1.9 fixes the following issues: - CVE-2026-13622: virt-handler migration proxy follows symlinks allowing container escape to host bsc1272840. - CVE-2026-78659: golang.org/x/net/http2: HTTP/2 server memory exhaustion due to Trailer headers bsc1286984. - CVE-2026-78660:...

9.1CVSS7.3AI score0.00866EPSS
SaveExploits0References12
SUSE Linux
SUSE Linux•added 2026/09/03 7:54 a.m.•29 views

Security update for kubevirt, virt-pr-helper-container

This update for kubevirt, virt-pr-helper-container fixes the following issues: Changes in kubevirt: Package the persistent-reservation helper's entrypoint script bsc1276520: virt-operator runs the pr-helper container with the command /entrypoint.sh, which symlinks the multipath socket into place...

5.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2026/09/03 12:00 a.m.•14 views

PT-2026-90826

This update for kubevirt, virt-pr-helper-container fixes the following issues: Changes in kubevirt: - Package the persistent-reservation helper's entrypoint script bsc1276520: virt-operator runs the pr-helper container with the command /entrypoint.sh, which symlinks the multipath socket into plac...

5.8AI score
SaveExploits0References3
Chainguard
Chainguard•added 2026/08/14 8:25 a.m.•44 views

GO-2026-4384 vulnerabilities

Vulnerabilities for packages: virt-controller-fips, harvester, virt-launcher, docker-machine-driver-harvester, harvester-fips, virt-handler, virt-operator-fips...

6.1AI score
SaveExploits0
Chainguard
Chainguard•added 2026/08/14 8:25 a.m.•44 views

GO-2025-4110 vulnerabilities

Vulnerabilities for packages: virt-controller-fips, virt-handler-fips, virt-launcher, docker-machine-driver-harvester, virt-operator, virt-api-fips, virt-handler, virt-controller, virt-api, virt-operator-fips...

6.1AI score
SaveExploits0
Chainguard
Chainguard•added 2026/08/14 8:25 a.m.•48 views

GO-2025-4104 vulnerabilities

Vulnerabilities for packages: virt-controller-fips, virt-launcher, docker-machine-driver-harvester, virt-handler, virt-operator-fips...

6.1AI score
SaveExploits0
Chainguard
Chainguard•added 2026/08/14 8:25 a.m.•47 views

GO-2025-4105 vulnerabilities

Vulnerabilities for packages: virt-controller-fips, virt-launcher, docker-machine-driver-harvester, virt-handler, virt-operator-fips...

6.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus•added 2026/08/14 12:00 a.m.•28 views

SUSE SLES15 Security Update : kubevirt (SUSE-SU-2026:3604-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3604-1 advisory. This update for kubevirt fixes the following issue: - CVE-2026-13622: virt-handler migration proxy follows symlinks, allowing container esca...

8.8CVSS6.2AI score0.00202EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux•added 2026/08/13 6:19 a.m.•24 views

Security update for kubevirt

This update for kubevirt fixes the following issue: CVE-2026-13622: virt-handler migration proxy follows symlinks, allowing container escape to host bsc1272840. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

9.3CVSS6.1AI score0.00202EPSS
SaveExploits0References4
osv_suse
osv_suse•added 2026/08/13 6:19 a.m.•16 views

SUSE-SU-2026:3604-1 Security update for kubevirt

This update for kubevirt fixes the following issue: - CVE-2026-13622: virt-handler migration proxy follows symlinks, allowing container escape to host bsc1272840...

8.8CVSS6.1AI score0.00202EPSS
SaveExploits0References3
osv_azl
osv_azl•added 2026/08/12 9:17 p.m.•15 views

AZL-111641 CVE-2026-13622 affecting package kubevirt-openvmm 1.9.0-1

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...

8.8CVSS5.9AI score0.00202EPSS
SaveExploits0References1
osv_azl
osv_azl•added 2026/08/12 9:17 p.m.•32 views

AZL-95943 CVE-2026-13622 affecting package kubevirt for versions less than 1.8.4-4

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...

8.8CVSS5.9AI score0.00202EPSS
SaveExploits0References1
NVD
NVD•added 2026/08/12 9:17 p.m.•26 views

CVE-2026-13622

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...

8.8CVSS0.00202EPSS
SaveExploits0References13
attackerkb
attackerkb•added 2026/08/12 8:46 p.m.•26 views

CVE-2026-13622

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...

8.8CVSS5.9AI score0.00202EPSS
SaveExploits0References14
EUVD
EUVD•added 2026/08/12 8:46 p.m.•24 views

EUVD-2026-57615

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...

8.8CVSS5.9AI score0.00202EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2026/08/12 8:46 p.m.•74 views

CVE-2026-13622 Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...

8.8CVSS0.00202EPSS
SaveExploits0References13
Vulnrichment
Vulnrichment•added 2026/08/12 8:46 p.m.•18 views

CVE-2026-13622 Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...

8.8CVSS5.9AI score0.00202EPSS
SaveExploits0References13
Mend
Mend•added 2026/08/12 8:46 p.m.•12 views

CVE-2026-13622

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...

9.3CVSS5.9AI score0.00202EPSS
SaveExploits0References13
Rows per page
Query Builder