https://seclists.org/oss-sec/2026/q3/20: [CONFIDENTIAL] cert-manager v1.15-v1.17+main — flected SSRF via Issuer.spec.vault.server (CVSS 7.2 HIGH)
Published Jul 4, 2026
·Updated
Affected Software
1 affected component
cert-manager cert-manager>=1.15.5<=1.17.4, =main
Frequently Asked Questions
1
What is the severity of CVE-2026-XXXX?
The severity of CVE-2026-XXXX is rated as HIGH with a CVSS score of 7.2.
2
How do I fix CVE-2026-XXXX?
To fix CVE-2026-XXXX, upgrade to cert-manager versions v1.18 or later where the vulnerability is addressed.
3
What impact does CVE-2026-XXXX have on cert-manager?
CVE-2026-XXXX allows for reflected server-side request forgery (SSRF) through Issuer.spec.vault.server which can expose sensitive data.
4
Which versions of cert-manager are affected by CVE-2026-XXXX?
CVE-2026-XXXX affects cert-manager versions v1.15 to v1.17 inclusive.
5
Is there a workaround for CVE-2026-XXXX?
As a temporary workaround for CVE-2026-XXXX, restrict access to the vault server configuration until an upgrade can be performed.