Kyverno

Kyverno

25 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2023-54356

  • EPSS 0.15%
  • Veröffentlicht 01.09.2026 11:33:51
  • Zuletzt bearbeitet 08.10.2026 16:16:47

Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites (TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA and TLS_RSA_WITH_3DES_EDE_CBC_SHA) on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack (CVE-2016-2183), wh...

9.6

CVE-2026-54523

  • EPSS 0.4%
  • Veröffentlicht 26.08.2026 14:20:37
  • Zuletzt bearbeitet 09.09.2026 21:09:13

Kyverno is a policy engine designed for cloud native platform engineering teams. From 1.18.0 until 1.18.2, the NamespacedMutatingPolicy CEL compiler exposes the generator library to matchConditions, allowing a namespace-scoped policy to invoke genera...

6.1

CVE-2026-44245

Exploit
  • EPSS 0.18%
  • Veröffentlicht 12.05.2026 22:46:59
  • Zuletzt bearbeitet 26.05.2026 08:35:25

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to 2.5.2, Vue 3's v-html directive is the framework-documented mechanism for injecting raw HTML, and it intentionally disables the auto-escaping that {{ }} interpo...

7.7

CVE-2026-41485

Exploit
  • EPSS 0.37%
  • Veröffentlicht 24.04.2026 03:27:08
  • Zuletzt bearbeitet 27.04.2026 17:54:40

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.17.2 and 1.16.4, an unchecked type assertion in the `forEach` mutation handler allows any user with permission to create a `Policy` or `ClusterPolicy...

9.1

CVE-2026-41323

Exploit
  • EPSS 0.56%
  • Veröffentlicht 24.04.2026 03:21:36
  • Zuletzt bearbeitet 27.04.2026 17:53:22

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.18.0-rc1, 1.17.2-rc1, and 1.16.4, Kyverno's apiCall feature in ClusterPolicy automatically attaches the admission controller's ServiceAccount token t...

7.7

CVE-2026-41068

Exploit
  • EPSS 0.27%
  • Veröffentlicht 24.04.2026 03:14:27
  • Zuletzt bearbeitet 27.04.2026 17:48:04

Kyverno is a policy engine designed for cloud native platform engineering teams. The patch for CVE-2026-22039 fixed cross-namespace privilege escalation in Kyverno's `apiCall` context by validating the `URLPath` field. However, the ConfigMap context ...

8.1

CVE-2026-40868

Exploit
  • EPSS 0.29%
  • Veröffentlicht 21.04.2026 18:22:01
  • Zuletzt bearbeitet 27.04.2026 19:41:27

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to 1.16.4, kyverno’s apiCall servicecall helper implicitly injects Authorization: Bearer ... using the kyverno controller serviceaccount token when a policy does n...

9.8

CVE-2026-4789

Medienbericht
  • EPSS 0.7%
  • Veröffentlicht 30.03.2026 20:44:00
  • Zuletzt bearbeitet 03.04.2026 18:17:51

Kyverno, versions 1.16.0 and later, are vulnerable to SSRF due to unrestricted CEL HTTP functions.

6.5

CVE-2026-23881

Exploit
  • EPSS 0.53%
  • Veröffentlicht 27.01.2026 16:10:44
  • Zuletzt bearbeitet 02.02.2026 15:20:13

Kyverno is a policy engine designed for cloud native platform engineering teams. Versions prior to 1.16.3 and 1.15.3 have unbounded memory consumption in Kyverno's policy engine that allows users with policy creation privileges to cause denial of ser...

9.9

CVE-2026-22039

Medienbericht Exploit
  • EPSS 0.52%
  • Veröffentlicht 27.01.2026 16:07:19
  • Zuletzt bearbeitet 02.02.2026 15:13:57

Kyverno is a policy engine designed for cloud native platform engineering teams. Versions prior to 1.16.3 and 1.15.3 have a critical authorization boundary bypass in namespaced Kyverno Policy apiCall. The resolved `urlPath` is executed using the Kyve...