CVE-2026-96577
- EPSS 0.18%
- Veröffentlicht 01.10.2026 09:17:53
- Zuletzt bearbeitet 07.10.2026 15:17:59
A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all network interfaces without authentication or encryption instead of restricting access to the local system. An unauthenticated attacker on an ad...
CVE-2026-101295
- EPSS 0.15%
- Veröffentlicht 30.09.2026 14:06:16
- Zuletzt bearbeitet 30.09.2026 21:16:55
Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirroring operator catalogs using either the legacy v1 path (--v1) or the OCI feature path (--use-oci-feature), oc-mirror extracts tar entries from catalog i...
CVE-2026-4427
- EPSS 0.09%
- Veröffentlicht 19.03.2026 14:24:02
- Zuletzt bearbeitet 30.03.2026 08:16:18
Rejected reason: Duplicate of CVE-2026-32286
CVE-2021-20198
- EPSS 1.83%
- Veröffentlicht 23.02.2021 18:15:13
- Zuletzt bearbeitet 21.11.2024 05:46:06
A flaw was found in the OpenShift Installer before version v0.9.0-master.0.20210125200451-95101da940b0. During installation of OpenShift Container Platform 4 clusters, bootstrap nodes are provisioned with anonymous authentication enabled on kubelet p...