{"schema_version":"2","view":"grouped","data":[{"id":60444,"cve_ids":["CVE-2026-100707"],"payload":{"kind":"advisory","title":"Kyverno before 1.19.1 Namespace Isolation Bypass via Percent-Encoded Path","summary":"Kyverno before 1.19.1 contains a namespace isolation bypass in the apiCall context entry of namespaced Policy resources due to inconsistent path interpretation between validation and execution. A low-privilege tenant can use percent-encoded dot-segments in urlPath to bypass namespace checks and read resources from other namespaces using the Kyverno admission controller's ServiceAccount credentials.","evidence":"cve:CVE-2026-100707","products":[{"name":{"value":"kyverno","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100707","aliases":["CVE-2026-100707"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"kyverno","product":"kyverno","versions":[{"status":"affected","version":"0","lessThan":"1.19.1","versionType":"semver"},{"status":"unaffected","version":"1.19.1","versionType":"semver"}],"packageURL":"pkg:golang/github.com/kyverno/kyverno","defaultStatus":"unaffected"}],"modified":"2026-09-28T17:41:14.708Z","provider":"cve","references":["https://github.com/kyverno/kyverno/security/advisories/GHSA-c5qq-7g2q-cpqp","https://www.vulncheck.com/advisories/kyverno-before-1.19.1-namespace-isolation-bypass-via-percent-encoded-path"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100707","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T17:40:59.702394Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T17:41:14.708Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:24:01.414Z"}}},"related_cves":[{"value":"CVE-2026-100707","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:819b6a68-867f-4ad0-ab55-945f72ce1031","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-100707","metrics":[],"products":[{"name":{"value":"kyverno","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.19.1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kyverno-2026-100707","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100707","advisory_id":"819b6a68-867f-4ad0-ab55-945f72ce1031","event_types":["advisory"],"published_at":"2026-10-25T18:33:55.863968+00:00","technologies":["core-cve","kyverno"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T13:24:01.414+00:00","detail_url":"/advisories/advisory%3A819b6a68-867f-4ad0-ab55-945f72ce1031","group":{"id":"advisory:819b6a68-867f-4ad0-ab55-945f72ce1031","revision":1,"primary_event_id":59650,"change":"published","superseded_by":[],"changed":{"id":59650,"cve_ids":["CVE-2026-100707"],"payload":{"kind":"advisory","title":"Kyverno before 1.19.1 Namespace Isolation Bypass via Percent-Encoded Path","summary":"Kyverno before 1.19.1 contains a namespace isolation bypass in the apiCall context entry of namespaced Policy resources due to inconsistent path interpretation between validation and execution. A low-privilege tenant can use percent-encoded dot-segments in urlPath to bypass namespace checks and read resources from other namespaces using the Kyverno admission controller's ServiceAccount credentials.","evidence":"cve:CVE-2026-100707","products":[{"name":{"value":"kyverno","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100707","aliases":["CVE-2026-100707"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"kyverno","product":"kyverno","versions":[{"status":"affected","version":"0","lessThan":"1.19.1","versionType":"semver"},{"status":"unaffected","version":"1.19.1","versionType":"semver"}],"packageURL":"pkg:golang/github.com/kyverno/kyverno","defaultStatus":"unaffected"}],"modified":"2026-09-28T17:41:14.708Z","provider":"cve","references":["https://github.com/kyverno/kyverno/security/advisories/GHSA-c5qq-7g2q-cpqp","https://www.vulncheck.com/advisories/kyverno-before-1.19.1-namespace-isolation-bypass-via-percent-encoded-path"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100707","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T17:40:59.702394Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T17:41:14.708Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:24:01.414Z"}}},"related_cves":[{"value":"CVE-2026-100707","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:819b6a68-867f-4ad0-ab55-945f72ce1031","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-100707","metrics":[],"products":[{"name":{"value":"kyverno","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.19.1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kyverno-2026-100707","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100707","advisory_id":"819b6a68-867f-4ad0-ab55-945f72ce1031","event_types":["advisory"],"published_at":"2026-10-25T18:33:55.863968+00:00","technologies":["core-cve","kyverno"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-26T13:24:01.414+00:00","detail_url":"/events/59650"},"members":[{"id":59650,"cve_ids":["CVE-2026-100707"],"payload":{"kind":"advisory","title":"Kyverno before 1.19.1 Namespace Isolation Bypass via Percent-Encoded Path","summary":"Kyverno before 1.19.1 contains a namespace isolation bypass in the apiCall context entry of namespaced Policy resources due to inconsistent path interpretation between validation and execution. A low-privilege tenant can use percent-encoded dot-segments in urlPath to bypass namespace checks and read resources from other namespaces using the Kyverno admission controller's ServiceAccount credentials.","evidence":"cve:CVE-2026-100707","products":[{"name":{"value":"kyverno","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100707","aliases":["CVE-2026-100707"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"kyverno","product":"kyverno","versions":[{"status":"affected","version":"0","lessThan":"1.19.1","versionType":"semver"},{"status":"unaffected","version":"1.19.1","versionType":"semver"}],"packageURL":"pkg:golang/github.com/kyverno/kyverno","defaultStatus":"unaffected"}],"modified":"2026-09-28T17:41:14.708Z","provider":"cve","references":["https://github.com/kyverno/kyverno/security/advisories/GHSA-c5qq-7g2q-cpqp","https://www.vulncheck.com/advisories/kyverno-before-1.19.1-namespace-isolation-bypass-via-percent-encoded-path"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100707","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T17:40:59.702394Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T17:41:14.708Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:24:01.414Z"}}},"related_cves":[{"value":"CVE-2026-100707","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:819b6a68-867f-4ad0-ab55-945f72ce1031","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-100707","metrics":[],"products":[{"name":{"value":"kyverno","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.19.1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kyverno-2026-100707","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100707","advisory_id":"819b6a68-867f-4ad0-ab55-945f72ce1031","event_types":["advisory"],"published_at":"2026-10-25T18:33:55.863968+00:00","technologies":["core-cve","kyverno"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-26T13:24:01.414+00:00","detail_url":"/events/59650"}]}},{"id":60426,"cve_ids":["CVE-2026-100704"],"payload":{"kind":"advisory","title":"Kyverno before 1.19.1 ImageValidatingPolicy Exception Bypass","summary":"Kyverno is a policy engine for Kubernetes. In versions 1.14.0 through 1.19.0, the ImageValidatingPolicy (policies.kyverno.io/v1beta1) evaluator never reads the spec.images and spec.allowedValues fields of a PolicyException. Any PolicyException whose policyRefs and matchConditions match a resource causes image signature verification to be skipped for the entire resource rather than only for the listed images or values, so an exception intended to exempt a single trusted image exempts every image on the matched resource(s). As a result, unsigned or untrusted images can be admitted to the cluster without signature verification. This differs from ValidatingPolicy, GeneratingPolicy, and MutatingPolicy, which treat the same field as a partial exemption. The issue is fixed in version 1.19.1.","evidence":"cve:CVE-2026-100704","products":[{"name":{"value":"kyverno","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100704","aliases":["CVE-2026-100704"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"kyverno","product":"kyverno","versions":[{"status":"affected","version":"1.14.0","lessThan":"1.19.1","versionType":"semver"},{"status":"unaffected","version":"1.19.1","versionType":"semver"}],"packageURL":"pkg:golang/github.com/kyverno/kyverno","defaultStatus":"unaffected"}],"modified":"2026-09-28T14:50:36.275Z","provider":"cve","references":["https://github.com/kyverno/kyverno/security/advisories/GHSA-5cjf-wwfg-pj4c","https://www.vulncheck.com/advisories/kyverno-before-1.19.1-imagevalidatingpolicy-exception-bypass"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100704","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T14:50:12.818189Z"}}}],"references":[{"url":"https://github.com/kyverno/kyverno/security/advisories/GHSA-5cjf-wwfg-pj4c","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T14:50:36.275Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:23:59.326Z"}}},"related_cves":[{"value":"CVE-2026-100704","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:96a016c9-862f-4bd1-980f-7c751ed6e6b5","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-100704","metrics":[],"products":[{"name":{"value":"kyverno","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.19.1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kyverno-2026-100704","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100704","advisory_id":"96a016c9-862f-4bd1-980f-7c751ed6e6b5","event_types":["advisory"],"published_at":"2026-10-25T18:33:46.713886+00:00","technologies":["core-cve","kyverno"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T13:23:59.326+00:00","detail_url":"/advisories/advisory%3A96a016c9-862f-4bd1-980f-7c751ed6e6b5","group":{"id":"advisory:96a016c9-862f-4bd1-980f-7c751ed6e6b5","revision":1,"primary_event_id":59632,"change":"published","superseded_by":[],"changed":{"id":59632,"cve_ids":["CVE-2026-100704"],"payload":{"kind":"advisory","title":"Kyverno before 1.19.1 ImageValidatingPolicy Exception Bypass","summary":"Kyverno is a policy engine for Kubernetes. In versions 1.14.0 through 1.19.0, the ImageValidatingPolicy (policies.kyverno.io/v1beta1) evaluator never reads the spec.images and spec.allowedValues fields of a PolicyException. Any PolicyException whose policyRefs and matchConditions match a resource causes image signature verification to be skipped for the entire resource rather than only for the listed images or values, so an exception intended to exempt a single trusted image exempts every image on the matched resource(s). As a result, unsigned or untrusted images can be admitted to the cluster without signature verification. This differs from ValidatingPolicy, GeneratingPolicy, and MutatingPolicy, which treat the same field as a partial exemption. The issue is fixed in version 1.19.1.","evidence":"cve:CVE-2026-100704","products":[{"name":{"value":"kyverno","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100704","aliases":["CVE-2026-100704"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"kyverno","product":"kyverno","versions":[{"status":"affected","version":"1.14.0","lessThan":"1.19.1","versionType":"semver"},{"status":"unaffected","version":"1.19.1","versionType":"semver"}],"packageURL":"pkg:golang/github.com/kyverno/kyverno","defaultStatus":"unaffected"}],"modified":"2026-09-28T14:50:36.275Z","provider":"cve","references":["https://github.com/kyverno/kyverno/security/advisories/GHSA-5cjf-wwfg-pj4c","https://www.vulncheck.com/advisories/kyverno-before-1.19.1-imagevalidatingpolicy-exception-bypass"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100704","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T14:50:12.818189Z"}}}],"references":[{"url":"https://github.com/kyverno/kyverno/security/advisories/GHSA-5cjf-wwfg-pj4c","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T14:50:36.275Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:23:59.326Z"}}},"related_cves":[{"value":"CVE-2026-100704","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:96a016c9-862f-4bd1-980f-7c751ed6e6b5","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-100704","metrics":[],"products":[{"name":{"value":"kyverno","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.19.1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kyverno-2026-100704","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100704","advisory_id":"96a016c9-862f-4bd1-980f-7c751ed6e6b5","event_types":["advisory"],"published_at":"2026-10-25T18:33:46.713886+00:00","technologies":["core-cve","kyverno"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-26T13:23:59.326+00:00","detail_url":"/events/59632"},"members":[{"id":59632,"cve_ids":["CVE-2026-100704"],"payload":{"kind":"advisory","title":"Kyverno before 1.19.1 ImageValidatingPolicy Exception Bypass","summary":"Kyverno is a policy engine for Kubernetes. In versions 1.14.0 through 1.19.0, the ImageValidatingPolicy (policies.kyverno.io/v1beta1) evaluator never reads the spec.images and spec.allowedValues fields of a PolicyException. Any PolicyException whose policyRefs and matchConditions match a resource causes image signature verification to be skipped for the entire resource rather than only for the listed images or values, so an exception intended to exempt a single trusted image exempts every image on the matched resource(s). As a result, unsigned or untrusted images can be admitted to the cluster without signature verification. This differs from ValidatingPolicy, GeneratingPolicy, and MutatingPolicy, which treat the same field as a partial exemption. The issue is fixed in version 1.19.1.","evidence":"cve:CVE-2026-100704","products":[{"name":{"value":"kyverno","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100704","aliases":["CVE-2026-100704"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"kyverno","product":"kyverno","versions":[{"status":"affected","version":"1.14.0","lessThan":"1.19.1","versionType":"semver"},{"status":"unaffected","version":"1.19.1","versionType":"semver"}],"packageURL":"pkg:golang/github.com/kyverno/kyverno","defaultStatus":"unaffected"}],"modified":"2026-09-28T14:50:36.275Z","provider":"cve","references":["https://github.com/kyverno/kyverno/security/advisories/GHSA-5cjf-wwfg-pj4c","https://www.vulncheck.com/advisories/kyverno-before-1.19.1-imagevalidatingpolicy-exception-bypass"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100704","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T14:50:12.818189Z"}}}],"references":[{"url":"https://github.com/kyverno/kyverno/security/advisories/GHSA-5cjf-wwfg-pj4c","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T14:50:36.275Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:23:59.326Z"}}},"related_cves":[{"value":"CVE-2026-100704","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:96a016c9-862f-4bd1-980f-7c751ed6e6b5","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-100704","metrics":[],"products":[{"name":{"value":"kyverno","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.19.1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kyverno-2026-100704","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100704","advisory_id":"96a016c9-862f-4bd1-980f-7c751ed6e6b5","event_types":["advisory"],"published_at":"2026-10-25T18:33:46.713886+00:00","technologies":["core-cve","kyverno"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-26T13:23:59.326+00:00","detail_url":"/events/59632"}]}},{"id":60418,"cve_ids":["CVE-2026-100706"],"payload":{"kind":"advisory","title":"kyverno before 1.19.1 Privilege Escalation via Policy apiCall urlPath","summary":"kyverno before 1.19.1 fails to properly validate URL-encoded path segments in Policy apiCall urlPath, allowing namespace tenants to bypass the per-namespace clamp and create objects in other namespaces as the admission-controller ServiceAccount. Attackers can exploit this by using percent-encoded directory traversal sequences to create MutatingWebhookConfiguration objects cluster-wide or PolicyException objects in the kyverno namespace, enabling privilege escalation to cluster admin.","evidence":"cve:CVE-2026-100706","products":[{"name":{"value":"kyverno","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-100706","aliases":["CVE-2026-100706"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":9.4,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.9,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"kyverno","product":"kyverno","versions":[{"status":"affected","version":"0","lessThan":"1.19.1","versionType":"semver"},{"status":"unaffected","version":"1.19.1","versionType":"semver"}],"packageURL":"pkg:golang/github.com/kyverno/kyverno","defaultStatus":"unaffected"}],"modified":"2026-09-26T23:08:54.549Z","provider":"cve","references":["https://github.com/kyverno/kyverno/security/advisories/GHSA-5qq8-67g6-4h2w","https://www.vulncheck.com/advisories/kyverno-before-1.19.1-privilege-escalation-via-policy-apicall-urlpath"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100706","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-26T23:08:47.920272Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-26T23:08:54.549Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:24:00.707Z"}}},"related_cves":[{"value":"CVE-2026-100706","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:a2f740c2-33d0-4487-ab5d-2f1fa6190a80","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"critical","linked_cves":[{"cve":"CVE-2026-100706","metrics":[],"products":[{"name":{"value":"kyverno","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.19.1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"critical","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kyverno-2026-100706","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100706","advisory_id":"a2f740c2-33d0-4487-ab5d-2f1fa6190a80","event_types":["advisory"],"published_at":"2026-10-25T18:33:35.985935+00:00","technologies":["core-cve","kyverno"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T13:24:00.707+00:00","detail_url":"/advisories/advisory%3Aa2f740c2-33d0-4487-ab5d-2f1fa6190a80","group":{"id":"advisory:a2f740c2-33d0-4487-ab5d-2f1fa6190a80","revision":1,"primary_event_id":59619,"change":"published","superseded_by":[],"changed":{"id":59619,"cve_ids":["CVE-2026-100706"],"payload":{"kind":"advisory","title":"kyverno before 1.19.1 Privilege Escalation via Policy apiCall urlPath","summary":"kyverno before 1.19.1 fails to properly validate URL-encoded path segments in Policy apiCall urlPath, allowing namespace tenants to bypass the per-namespace clamp and create objects in other namespaces as the admission-controller ServiceAccount. Attackers can exploit this by using percent-encoded directory traversal sequences to create MutatingWebhookConfiguration objects cluster-wide or PolicyException objects in the kyverno namespace, enabling privilege escalation to cluster admin.","evidence":"cve:CVE-2026-100706","products":[{"name":{"value":"kyverno","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-100706","aliases":["CVE-2026-100706"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":9.4,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.9,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"kyverno","product":"kyverno","versions":[{"status":"affected","version":"0","lessThan":"1.19.1","versionType":"semver"},{"status":"unaffected","version":"1.19.1","versionType":"semver"}],"packageURL":"pkg:golang/github.com/kyverno/kyverno","defaultStatus":"unaffected"}],"modified":"2026-09-26T23:08:54.549Z","provider":"cve","references":["https://github.com/kyverno/kyverno/security/advisories/GHSA-5qq8-67g6-4h2w","https://www.vulncheck.com/advisories/kyverno-before-1.19.1-privilege-escalation-via-policy-apicall-urlpath"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100706","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-26T23:08:47.920272Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-26T23:08:54.549Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:24:00.707Z"}}},"related_cves":[{"value":"CVE-2026-100706","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:a2f740c2-33d0-4487-ab5d-2f1fa6190a80","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"critical","linked_cves":[{"cve":"CVE-2026-100706","metrics":[],"products":[{"name":{"value":"kyverno","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.19.1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"critical","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kyverno-2026-100706","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100706","advisory_id":"a2f740c2-33d0-4487-ab5d-2f1fa6190a80","event_types":["advisory"],"published_at":"2026-10-25T18:33:35.985935+00:00","technologies":["core-cve","kyverno"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-26T13:24:00.707+00:00","detail_url":"/events/59619"},"members":[{"id":59619,"cve_ids":["CVE-2026-100706"],"payload":{"kind":"advisory","title":"kyverno before 1.19.1 Privilege Escalation via Policy apiCall urlPath","summary":"kyverno before 1.19.1 fails to properly validate URL-encoded path segments in Policy apiCall urlPath, allowing namespace tenants to bypass the per-namespace clamp and create objects in other namespaces as the admission-controller ServiceAccount. Attackers can exploit this by using percent-encoded directory traversal sequences to create MutatingWebhookConfiguration objects cluster-wide or PolicyException objects in the kyverno namespace, enabling privilege escalation to cluster admin.","evidence":"cve:CVE-2026-100706","products":[{"name":{"value":"kyverno","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-100706","aliases":["CVE-2026-100706"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":9.4,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.9,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"kyverno","product":"kyverno","versions":[{"status":"affected","version":"0","lessThan":"1.19.1","versionType":"semver"},{"status":"unaffected","version":"1.19.1","versionType":"semver"}],"packageURL":"pkg:golang/github.com/kyverno/kyverno","defaultStatus":"unaffected"}],"modified":"2026-09-26T23:08:54.549Z","provider":"cve","references":["https://github.com/kyverno/kyverno/security/advisories/GHSA-5qq8-67g6-4h2w","https://www.vulncheck.com/advisories/kyverno-before-1.19.1-privilege-escalation-via-policy-apicall-urlpath"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100706","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-26T23:08:47.920272Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-26T23:08:54.549Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:24:00.707Z"}}},"related_cves":[{"value":"CVE-2026-100706","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:a2f740c2-33d0-4487-ab5d-2f1fa6190a80","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"critical","linked_cves":[{"cve":"CVE-2026-100706","metrics":[],"products":[{"name":{"value":"kyverno","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.19.1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"critical","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kyverno-2026-100706","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100706","advisory_id":"a2f740c2-33d0-4487-ab5d-2f1fa6190a80","event_types":["advisory"],"published_at":"2026-10-25T18:33:35.985935+00:00","technologies":["core-cve","kyverno"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-26T13:24:00.707+00:00","detail_url":"/events/59619"}]}},{"id":60407,"cve_ids":["CVE-2026-100705"],"payload":{"kind":"advisory","title":"Kyverno before 1.19.1 SSRF via legacy apiCall service executor","summary":"Kyverno before 1.19.1 is vulnerable to server-side request forgery. The default egress blocklist (169.254.169.254, 169.254.169.253, metadata.google.internal, 127.0.0.0/8, ::1/128) and the scoped-token control were wired only into the new CEL http.Get/Post library and were never applied to the legacy apiCall service executor (pkg/engine/apicall/executor.go) or to the GlobalContextEntry external-API path, which handle every non-CEL context[].apiCall.service call. Because these paths use a plain net/http client with no egress filtering and no validation of the configured service URL, a ClusterPolicy or GlobalContextEntry author — or, where a deployed policy templates the service URL from the admission resource, a lower-privileged resource submitter — can cause Kyverno to issue GET/POST requests to an arbitrary host, including the cloud metadata endpoint, loopback, and any in-cluster service, reading cloud instance credentials and reaching internal endpoints with Kyverno's network position. The executor also unconditionally attaches Kyverno's projected ServiceAccount token to the attacker-chosen destination; the token is audience-scoped, limiting its replay value. Fixed in 1.19.1.","evidence":"cve:CVE-2026-100705","products":[{"name":{"value":"kyverno","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100705","aliases":["CVE-2026-100705"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"HIGH","subIntegrityImpact":"LOW","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"HIGH","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"kyverno","product":"kyverno","versions":[{"status":"affected","version":"0","lessThan":"1.19.1","versionType":"semver"},{"status":"unaffected","version":"1.19.1","versionType":"semver"}],"packageURL":"pkg:golang/github.com/kyverno/kyverno","defaultStatus":"unaffected"}],"modified":"2026-09-26T23:10:45.970Z","provider":"cve","references":["https://github.com/kyverno/kyverno/security/advisories/GHSA-q825-p383-r9v5","https://www.vulncheck.com/advisories/kyverno-before-1.19.1-ssrf-via-legacy-apicall-service-executor"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100705","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-26T23:10:38.587553Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-26T23:10:45.970Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:23:59.999Z"}}},"related_cves":[{"value":"CVE-2026-100705","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:c0a7227b-472a-40c8-99f2-b67ac6b9aadc","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-100705","metrics":[],"products":[{"name":{"value":"kyverno","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.19.1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kyverno-2026-100705","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100705","advisory_id":"c0a7227b-472a-40c8-99f2-b67ac6b9aadc","event_types":["advisory"],"published_at":"2026-10-25T18:33:27.741192+00:00","technologies":["core-cve","kyverno"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T13:23:59.999+00:00","detail_url":"/advisories/advisory%3Ac0a7227b-472a-40c8-99f2-b67ac6b9aadc","group":{"id":"advisory:c0a7227b-472a-40c8-99f2-b67ac6b9aadc","revision":1,"primary_event_id":59608,"change":"published","superseded_by":[],"changed":{"id":59608,"cve_ids":["CVE-2026-100705"],"payload":{"kind":"advisory","title":"Kyverno before 1.19.1 SSRF via legacy apiCall service executor","summary":"Kyverno before 1.19.1 is vulnerable to server-side request forgery. The default egress blocklist (169.254.169.254, 169.254.169.253, metadata.google.internal, 127.0.0.0/8, ::1/128) and the scoped-token control were wired only into the new CEL http.Get/Post library and were never applied to the legacy apiCall service executor (pkg/engine/apicall/executor.go) or to the GlobalContextEntry external-API path, which handle every non-CEL context[].apiCall.service call. Because these paths use a plain net/http client with no egress filtering and no validation of the configured service URL, a ClusterPolicy or GlobalContextEntry author — or, where a deployed policy templates the service URL from the admission resource, a lower-privileged resource submitter — can cause Kyverno to issue GET/POST requests to an arbitrary host, including the cloud metadata endpoint, loopback, and any in-cluster service, reading cloud instance credentials and reaching internal endpoints with Kyverno's network position. The executor also unconditionally attaches Kyverno's projected ServiceAccount token to the attacker-chosen destination; the token is audience-scoped, limiting its replay value. Fixed in 1.19.1.","evidence":"cve:CVE-2026-100705","products":[{"name":{"value":"kyverno","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100705","aliases":["CVE-2026-100705"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"HIGH","subIntegrityImpact":"LOW","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"HIGH","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"kyverno","product":"kyverno","versions":[{"status":"affected","version":"0","lessThan":"1.19.1","versionType":"semver"},{"status":"unaffected","version":"1.19.1","versionType":"semver"}],"packageURL":"pkg:golang/github.com/kyverno/kyverno","defaultStatus":"unaffected"}],"modified":"2026-09-26T23:10:45.970Z","provider":"cve","references":["https://github.com/kyverno/kyverno/security/advisories/GHSA-q825-p383-r9v5","https://www.vulncheck.com/advisories/kyverno-before-1.19.1-ssrf-via-legacy-apicall-service-executor"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100705","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-26T23:10:38.587553Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-26T23:10:45.970Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:23:59.999Z"}}},"related_cves":[{"value":"CVE-2026-100705","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:c0a7227b-472a-40c8-99f2-b67ac6b9aadc","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-100705","metrics":[],"products":[{"name":{"value":"kyverno","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.19.1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kyverno-2026-100705","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100705","advisory_id":"c0a7227b-472a-40c8-99f2-b67ac6b9aadc","event_types":["advisory"],"published_at":"2026-10-25T18:33:27.741192+00:00","technologies":["core-cve","kyverno"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-26T13:23:59.999+00:00","detail_url":"/events/59608"},"members":[{"id":59608,"cve_ids":["CVE-2026-100705"],"payload":{"kind":"advisory","title":"Kyverno before 1.19.1 SSRF via legacy apiCall service executor","summary":"Kyverno before 1.19.1 is vulnerable to server-side request forgery. The default egress blocklist (169.254.169.254, 169.254.169.253, metadata.google.internal, 127.0.0.0/8, ::1/128) and the scoped-token control were wired only into the new CEL http.Get/Post library and were never applied to the legacy apiCall service executor (pkg/engine/apicall/executor.go) or to the GlobalContextEntry external-API path, which handle every non-CEL context[].apiCall.service call. Because these paths use a plain net/http client with no egress filtering and no validation of the configured service URL, a ClusterPolicy or GlobalContextEntry author — or, where a deployed policy templates the service URL from the admission resource, a lower-privileged resource submitter — can cause Kyverno to issue GET/POST requests to an arbitrary host, including the cloud metadata endpoint, loopback, and any in-cluster service, reading cloud instance credentials and reaching internal endpoints with Kyverno's network position. The executor also unconditionally attaches Kyverno's projected ServiceAccount token to the attacker-chosen destination; the token is audience-scoped, limiting its replay value. Fixed in 1.19.1.","evidence":"cve:CVE-2026-100705","products":[{"name":{"value":"kyverno","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100705","aliases":["CVE-2026-100705"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"HIGH","subIntegrityImpact":"LOW","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"HIGH","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"kyverno","product":"kyverno","versions":[{"status":"affected","version":"0","lessThan":"1.19.1","versionType":"semver"},{"status":"unaffected","version":"1.19.1","versionType":"semver"}],"packageURL":"pkg:golang/github.com/kyverno/kyverno","defaultStatus":"unaffected"}],"modified":"2026-09-26T23:10:45.970Z","provider":"cve","references":["https://github.com/kyverno/kyverno/security/advisories/GHSA-q825-p383-r9v5","https://www.vulncheck.com/advisories/kyverno-before-1.19.1-ssrf-via-legacy-apicall-service-executor"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100705","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-26T23:10:38.587553Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-26T23:10:45.970Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:23:59.999Z"}}},"related_cves":[{"value":"CVE-2026-100705","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:c0a7227b-472a-40c8-99f2-b67ac6b9aadc","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-100705","metrics":[],"products":[{"name":{"value":"kyverno","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.19.1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kyverno-2026-100705","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100705","advisory_id":"c0a7227b-472a-40c8-99f2-b67ac6b9aadc","event_types":["advisory"],"published_at":"2026-10-25T18:33:27.741192+00:00","technologies":["core-cve","kyverno"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-26T13:23:59.999+00:00","detail_url":"/events/59608"}]}},{"id":60399,"cve_ids":["CVE-2026-100703"],"payload":{"kind":"advisory","title":"Kyverno before 1.19.1 Cross-Namespace Data Access via globalcontext.Lib","summary":"Kyverno 1.16.0 through 1.19.0 registers the globalcontext.Lib CEL library in its policy environment without confining it to the policy's namespace, unlike the sibling libraries (resource.Lib, http.Lib, configMap loader) which are handed the policy namespace. A tenant who can create a namespaced policy (e.g. NamespacedValidatingPolicy, and likewise the namespaced mutating, deleting, generating, and image-validating policy kinds) in their own namespace can call globalContext.get(\"\", \"\") and receive the full cached contents of a cluster-scoped GlobalContextEntry, including data cached from namespaces the tenant has no RBAC permission to read. No admission validation rejects such calls. Fixed in 1.19.1.","evidence":"cve:CVE-2026-100703","products":[{"name":{"value":"kyverno","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100703","aliases":["CVE-2026-100703"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"kyverno","product":"kyverno","versions":[{"status":"affected","version":"1.16.0","lessThan":"1.19.1","versionType":"semver"},{"status":"unaffected","version":"1.19.1","versionType":"semver"}],"packageURL":"pkg:golang/github.com/kyverno/kyverno","defaultStatus":"unaffected"}],"modified":"2026-09-28T17:42:15.793Z","provider":"cve","references":["https://github.com/kyverno/kyverno/security/advisories/GHSA-59v6-2x73-wfg4","https://www.vulncheck.com/advisories/kyverno-before-1.19.1-cross-namespace-data-access-via-globalcontext-lib"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100703","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T17:42:01.709434Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T17:42:15.793Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:23:58.666Z"}}},"related_cves":[{"value":"CVE-2026-100703","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:340b3c80-776c-4162-aad2-603c18731a7c","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-100703","metrics":[],"products":[{"name":{"value":"kyverno","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.19.1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kyverno-2026-100703","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100703","advisory_id":"340b3c80-776c-4162-aad2-603c18731a7c","event_types":["advisory"],"published_at":"2026-10-25T18:33:25.020274+00:00","technologies":["core-cve","kyverno"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T13:23:58.666+00:00","detail_url":"/advisories/advisory%3A340b3c80-776c-4162-aad2-603c18731a7c","group":{"id":"advisory:340b3c80-776c-4162-aad2-603c18731a7c","revision":1,"primary_event_id":59602,"change":"published","superseded_by":[],"changed":{"id":59602,"cve_ids":["CVE-2026-100703"],"payload":{"kind":"advisory","title":"Kyverno before 1.19.1 Cross-Namespace Data Access via globalcontext.Lib","summary":"Kyverno 1.16.0 through 1.19.0 registers the globalcontext.Lib CEL library in its policy environment without confining it to the policy's namespace, unlike the sibling libraries (resource.Lib, http.Lib, configMap loader) which are handed the policy namespace. A tenant who can create a namespaced policy (e.g. NamespacedValidatingPolicy, and likewise the namespaced mutating, deleting, generating, and image-validating policy kinds) in their own namespace can call globalContext.get(\"\", \"\") and receive the full cached contents of a cluster-scoped GlobalContextEntry, including data cached from namespaces the tenant has no RBAC permission to read. No admission validation rejects such calls. Fixed in 1.19.1.","evidence":"cve:CVE-2026-100703","products":[{"name":{"value":"kyverno","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100703","aliases":["CVE-2026-100703"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"kyverno","product":"kyverno","versions":[{"status":"affected","version":"1.16.0","lessThan":"1.19.1","versionType":"semver"},{"status":"unaffected","version":"1.19.1","versionType":"semver"}],"packageURL":"pkg:golang/github.com/kyverno/kyverno","defaultStatus":"unaffected"}],"modified":"2026-09-28T17:42:15.793Z","provider":"cve","references":["https://github.com/kyverno/kyverno/security/advisories/GHSA-59v6-2x73-wfg4","https://www.vulncheck.com/advisories/kyverno-before-1.19.1-cross-namespace-data-access-via-globalcontext-lib"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100703","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T17:42:01.709434Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T17:42:15.793Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:23:58.666Z"}}},"related_cves":[{"value":"CVE-2026-100703","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:340b3c80-776c-4162-aad2-603c18731a7c","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-100703","metrics":[],"products":[{"name":{"value":"kyverno","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.19.1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kyverno-2026-100703","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100703","advisory_id":"340b3c80-776c-4162-aad2-603c18731a7c","event_types":["advisory"],"published_at":"2026-10-25T18:33:25.020274+00:00","technologies":["core-cve","kyverno"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-26T13:23:58.666+00:00","detail_url":"/events/59602"},"members":[{"id":59602,"cve_ids":["CVE-2026-100703"],"payload":{"kind":"advisory","title":"Kyverno before 1.19.1 Cross-Namespace Data Access via globalcontext.Lib","summary":"Kyverno 1.16.0 through 1.19.0 registers the globalcontext.Lib CEL library in its policy environment without confining it to the policy's namespace, unlike the sibling libraries (resource.Lib, http.Lib, configMap loader) which are handed the policy namespace. A tenant who can create a namespaced policy (e.g. NamespacedValidatingPolicy, and likewise the namespaced mutating, deleting, generating, and image-validating policy kinds) in their own namespace can call globalContext.get(\"\", \"\") and receive the full cached contents of a cluster-scoped GlobalContextEntry, including data cached from namespaces the tenant has no RBAC permission to read. No admission validation rejects such calls. Fixed in 1.19.1.","evidence":"cve:CVE-2026-100703","products":[{"name":{"value":"kyverno","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100703","aliases":["CVE-2026-100703"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"kyverno","product":"kyverno","versions":[{"status":"affected","version":"1.16.0","lessThan":"1.19.1","versionType":"semver"},{"status":"unaffected","version":"1.19.1","versionType":"semver"}],"packageURL":"pkg:golang/github.com/kyverno/kyverno","defaultStatus":"unaffected"}],"modified":"2026-09-28T17:42:15.793Z","provider":"cve","references":["https://github.com/kyverno/kyverno/security/advisories/GHSA-59v6-2x73-wfg4","https://www.vulncheck.com/advisories/kyverno-before-1.19.1-cross-namespace-data-access-via-globalcontext-lib"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100703","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T17:42:01.709434Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T17:42:15.793Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:23:58.666Z"}}},"related_cves":[{"value":"CVE-2026-100703","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:340b3c80-776c-4162-aad2-603c18731a7c","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-100703","metrics":[],"products":[{"name":{"value":"kyverno","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.19.1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kyverno-2026-100703","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100703","advisory_id":"340b3c80-776c-4162-aad2-603c18731a7c","event_types":["advisory"],"published_at":"2026-10-25T18:33:25.020274+00:00","technologies":["core-cve","kyverno"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-26T13:23:58.666+00:00","detail_url":"/events/59602"}]}},{"id":13001,"cve_ids":["CVE-2026-84199"],"payload":{"kind":"advisory","title":"Kyverno before 1.16.2 SSRF via APICall Feature","summary":"Kyverno before 1.16.2 contains a server-side request forgery (SSRF) vulnerability in the APICall feature. The URL field in a Policy's ServiceCall configuration is not validated, so a user with namespace-level Policy creation permissions can direct Kyverno to make HTTP requests to arbitrary internal resources (e.g., cloud metadata endpoints such as 169.254.169.254 or other tenants' resources). Because Kyverno executes these requests using its cluster-wide high-privilege ServiceAccount (a Confused Deputy problem), the responses—potentially including other tenants' secrets and cloud IAM credentials—are returned in the PolicyReport and can be read by the attacker, breaking multi-tenant isolation.","evidence":"cve:CVE-2026-84199","products":[{"name":{"value":"kyverno","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-84199","aliases":["CVE-2026-84199"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6.9,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"LOW","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"kyverno","product":"kyverno","versions":[{"status":"affected","version":"0","lessThan":"1.16.2","versionType":"semver"},{"status":"unaffected","version":"1.16.2","versionType":"semver"}],"packageURL":"pkg:golang/github.com/kyverno/kyverno","defaultStatus":"unaffected"}],"modified":"2026-10-08T15:25:45.120Z","provider":"cve","references":["https://github.com/kyverno/kyverno/security/advisories/GHSA-fmqp-4wfc-w3v7","https://www.vulncheck.com/advisories/kyverno-before-1.16.2-ssrf-via-apicall-feature"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-84199","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-01T15:25:47.520857Z"}}}],"references":[{"url":"https://github.com/kyverno/kyverno/security/advisories/GHSA-fmqp-4wfc-w3v7","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-01T15:26:07.044Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-08T15:25:45.120Z"}}},"related_cves":[{"value":"CVE-2026-84199","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:8ff09a04-4821-43c8-91a4-dc054d8ef681","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84199","advisory_id":"8ff09a04-4821-43c8-91a4-dc054d8ef681","event_types":["advisory"],"published_at":"2026-10-25T00:16:02.092532+00:00","technologies":["core-cve","kyverno"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-01T11:33:59.739+00:00","detail_url":"/advisories/advisory%3A8ff09a04-4821-43c8-91a4-dc054d8ef681","group":{"id":"advisory:8ff09a04-4821-43c8-91a4-dc054d8ef681","revision":1,"primary_event_id":12934,"change":"published","superseded_by":[],"changed":{"id":12934,"cve_ids":["CVE-2026-84199"],"payload":{"kind":"advisory","title":"Kyverno before 1.16.2 SSRF via APICall Feature","summary":"Kyverno before 1.16.2 contains a server-side request forgery (SSRF) vulnerability in the APICall feature. The URL field in a Policy's ServiceCall configuration is not validated, so a user with namespace-level Policy creation permissions can direct Kyverno to make HTTP requests to arbitrary internal resources (e.g., cloud metadata endpoints such as 169.254.169.254 or other tenants' resources). Because Kyverno executes these requests using its cluster-wide high-privilege ServiceAccount (a Confused Deputy problem), the responses—potentially including other tenants' secrets and cloud IAM credentials—are returned in the PolicyReport and can be read by the attacker, breaking multi-tenant isolation.","evidence":"cve:CVE-2026-84199","products":[{"name":{"value":"kyverno","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-84199","aliases":["CVE-2026-84199"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6.9,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"LOW","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"kyverno","product":"kyverno","versions":[{"status":"affected","version":"0","lessThan":"1.16.2","versionType":"semver"},{"status":"unaffected","version":"1.16.2","versionType":"semver"}],"packageURL":"pkg:golang/github.com/kyverno/kyverno","defaultStatus":"unaffected"}],"modified":"2026-10-08T15:25:45.120Z","provider":"cve","references":["https://github.com/kyverno/kyverno/security/advisories/GHSA-fmqp-4wfc-w3v7","https://www.vulncheck.com/advisories/kyverno-before-1.16.2-ssrf-via-apicall-feature"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-84199","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-01T15:25:47.520857Z"}}}],"references":[{"url":"https://github.com/kyverno/kyverno/security/advisories/GHSA-fmqp-4wfc-w3v7","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-01T15:26:07.044Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-08T15:25:45.120Z"}}},"related_cves":[{"value":"CVE-2026-84199","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:8ff09a04-4821-43c8-91a4-dc054d8ef681","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84199","advisory_id":"8ff09a04-4821-43c8-91a4-dc054d8ef681","event_types":["advisory"],"published_at":"2026-10-25T00:16:02.092532+00:00","technologies":["core-cve","kyverno"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-01T11:33:59.739+00:00","detail_url":"/events/12934"},"members":[{"id":12934,"cve_ids":["CVE-2026-84199"],"payload":{"kind":"advisory","title":"Kyverno before 1.16.2 SSRF via APICall Feature","summary":"Kyverno before 1.16.2 contains a server-side request forgery (SSRF) vulnerability in the APICall feature. The URL field in a Policy's ServiceCall configuration is not validated, so a user with namespace-level Policy creation permissions can direct Kyverno to make HTTP requests to arbitrary internal resources (e.g., cloud metadata endpoints such as 169.254.169.254 or other tenants' resources). Because Kyverno executes these requests using its cluster-wide high-privilege ServiceAccount (a Confused Deputy problem), the responses—potentially including other tenants' secrets and cloud IAM credentials—are returned in the PolicyReport and can be read by the attacker, breaking multi-tenant isolation.","evidence":"cve:CVE-2026-84199","products":[{"name":{"value":"kyverno","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-84199","aliases":["CVE-2026-84199"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6.9,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"LOW","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"kyverno","product":"kyverno","versions":[{"status":"affected","version":"0","lessThan":"1.16.2","versionType":"semver"},{"status":"unaffected","version":"1.16.2","versionType":"semver"}],"packageURL":"pkg:golang/github.com/kyverno/kyverno","defaultStatus":"unaffected"}],"modified":"2026-10-08T15:25:45.120Z","provider":"cve","references":["https://github.com/kyverno/kyverno/security/advisories/GHSA-fmqp-4wfc-w3v7","https://www.vulncheck.com/advisories/kyverno-before-1.16.2-ssrf-via-apicall-feature"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-84199","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-01T15:25:47.520857Z"}}}],"references":[{"url":"https://github.com/kyverno/kyverno/security/advisories/GHSA-fmqp-4wfc-w3v7","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-01T15:26:07.044Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-08T15:25:45.120Z"}}},"related_cves":[{"value":"CVE-2026-84199","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:8ff09a04-4821-43c8-91a4-dc054d8ef681","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84199","advisory_id":"8ff09a04-4821-43c8-91a4-dc054d8ef681","event_types":["advisory"],"published_at":"2026-10-25T00:16:02.092532+00:00","technologies":["core-cve","kyverno"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-01T11:33:59.739+00:00","detail_url":"/events/12934"}]}},{"id":12671,"cve_ids":["CVE-2023-54356"],"payload":{"kind":"advisory","title":"Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites","summary":"Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites (TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA and TLS_RSA_WITH_3DES_EDE_CBC_SHA) on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack (CVE-2016-2183), which, over very long-lived TLS connections carrying large volumes of traffic, could allow an attacker to recover small amounts of plaintext. The issue is fixed in Kyverno 1.9.5 and 1.10.0.","evidence":"cve:CVE-2023-54356","products":[{"name":{"value":"kyverno","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2023-54356","aliases":["CVE-2023-54356"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":9.3,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"CRITICAL","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.7,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"kyverno","product":"kyverno","versions":[{"status":"affected","version":"0","lessThan":"1.9.5, 1.10.0","versionType":"semver"},{"status":"unaffected","version":"1.9.5, 1.10.0","versionType":"semver"}],"packageURL":"pkg:golang/github.com/kyverno/kyverno","defaultStatus":"unaffected"}],"modified":"2026-10-08T15:21:05.553Z","provider":"cve","references":["https://github.com/kyverno/kyverno/security/advisories/GHSA-hgv6-w7r3-w4qw","https://www.vulncheck.com/advisories/kyverno-before-1.9.5-sweet32-medium-strength-cipher-suites"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-54356","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-04T01:49:24.251513Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-04T01:49:34.948Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-08T15:21:05.553Z"}}},"related_cves":[{"value":"CVE-2023-54356","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:e9a6ef3f-4447-4b83-a73f-e6b9a9548dcb","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-54356","advisory_id":"e9a6ef3f-4447-4b83-a73f-e6b9a9548dcb","event_types":["advisory"],"published_at":"2026-10-25T00:10:20.236691+00:00","technologies":["core-cve","kyverno"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-01T11:33:51.281+00:00","detail_url":"/advisories/advisory%3Ae9a6ef3f-4447-4b83-a73f-e6b9a9548dcb","group":{"id":"advisory:e9a6ef3f-4447-4b83-a73f-e6b9a9548dcb","revision":1,"primary_event_id":12607,"change":"published","superseded_by":[],"changed":{"id":12607,"cve_ids":["CVE-2023-54356"],"payload":{"kind":"advisory","title":"Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites","summary":"Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites (TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA and TLS_RSA_WITH_3DES_EDE_CBC_SHA) on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack (CVE-2016-2183), which, over very long-lived TLS connections carrying large volumes of traffic, could allow an attacker to recover small amounts of plaintext. The issue is fixed in Kyverno 1.9.5 and 1.10.0.","evidence":"cve:CVE-2023-54356","products":[{"name":{"value":"kyverno","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2023-54356","aliases":["CVE-2023-54356"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":9.3,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"CRITICAL","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.7,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"kyverno","product":"kyverno","versions":[{"status":"affected","version":"0","lessThan":"1.9.5, 1.10.0","versionType":"semver"},{"status":"unaffected","version":"1.9.5, 1.10.0","versionType":"semver"}],"packageURL":"pkg:golang/github.com/kyverno/kyverno","defaultStatus":"unaffected"}],"modified":"2026-10-08T15:21:05.553Z","provider":"cve","references":["https://github.com/kyverno/kyverno/security/advisories/GHSA-hgv6-w7r3-w4qw","https://www.vulncheck.com/advisories/kyverno-before-1.9.5-sweet32-medium-strength-cipher-suites"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-54356","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-04T01:49:24.251513Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-04T01:49:34.948Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-08T15:21:05.553Z"}}},"related_cves":[{"value":"CVE-2023-54356","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:e9a6ef3f-4447-4b83-a73f-e6b9a9548dcb","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-54356","advisory_id":"e9a6ef3f-4447-4b83-a73f-e6b9a9548dcb","event_types":["advisory"],"published_at":"2026-10-25T00:10:20.236691+00:00","technologies":["core-cve","kyverno"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-01T11:33:51.281+00:00","detail_url":"/events/12607"},"members":[{"id":12607,"cve_ids":["CVE-2023-54356"],"payload":{"kind":"advisory","title":"Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites","summary":"Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites (TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA and TLS_RSA_WITH_3DES_EDE_CBC_SHA) on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack (CVE-2016-2183), which, over very long-lived TLS connections carrying large volumes of traffic, could allow an attacker to recover small amounts of plaintext. The issue is fixed in Kyverno 1.9.5 and 1.10.0.","evidence":"cve:CVE-2023-54356","products":[{"name":{"value":"kyverno","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2023-54356","aliases":["CVE-2023-54356"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":9.3,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"CRITICAL","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.7,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"kyverno","product":"kyverno","versions":[{"status":"affected","version":"0","lessThan":"1.9.5, 1.10.0","versionType":"semver"},{"status":"unaffected","version":"1.9.5, 1.10.0","versionType":"semver"}],"packageURL":"pkg:golang/github.com/kyverno/kyverno","defaultStatus":"unaffected"}],"modified":"2026-10-08T15:21:05.553Z","provider":"cve","references":["https://github.com/kyverno/kyverno/security/advisories/GHSA-hgv6-w7r3-w4qw","https://www.vulncheck.com/advisories/kyverno-before-1.9.5-sweet32-medium-strength-cipher-suites"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-54356","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-04T01:49:24.251513Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-04T01:49:34.948Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-08T15:21:05.553Z"}}},"related_cves":[{"value":"CVE-2023-54356","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:e9a6ef3f-4447-4b83-a73f-e6b9a9548dcb","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-54356","advisory_id":"e9a6ef3f-4447-4b83-a73f-e6b9a9548dcb","event_types":["advisory"],"published_at":"2026-10-25T00:10:20.236691+00:00","technologies":["core-cve","kyverno"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-01T11:33:51.281+00:00","detail_url":"/events/12607"}]}}],"next_after":60444,"next_before":12671}