CVE-2024-36537

Insecure permissions in cert-manager (specifically version v1.14.4 ) allow a remote authenticated attacker to gain elevated privileges and access sensitive data by obtaining a service account's token. This vulnerability is associated with CWE-284: Improper Access Control . Affected products inclu...

CVE-2026-25518

Summary: CVE-2026-25518 affects cert-manager-controller in Kubernetes clusters. In versions 1.18.0–1.18.4 and 1.19.0–1.19.2, the controller performs DNS lookups during ACME DNS-01 processing using unencrypted DNS, allowing an attacker able to intercept DNS traffic from the cert-manager pod to ins...