CVE-2024-36537

The cert-manager component (specifically version v1.14.4 ) is vulnerable to an improper access control flaw (CWE-284) due to insecure permissions. This vulnerability allows a remote authenticated attacker to obtain a service account's token , which can be leveraged to access sensitive data and es...

CVE-2026-25518

Summary: CVE-2026-25518 affects cert-manager-controller in Kubernetes clusters. In versions 1.18.0–1.18.4 and 1.19.0–1.19.2, the controller performs DNS lookups during ACME DNS-01 processing using unencrypted DNS, allowing an attacker able to intercept DNS traffic from the cert-manager pod to ins...