Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how kubevirt compares to other vendors in security performance

View Risk Score →

Kubevirt containerized-data-importer (CDI)Virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated clusterrole grants create on datavolumes/source, allowing unauthorized pvc clone

Risk 44
Severity
7.7
First published (updated )
CVE-2026-17527

Kubevirt virt-handler-rhel9Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host

Risk 72
Severity
8.8
First published (updated )
CVE-2026-13622

KubeVirtVirt-controller-rhel9: kubevirt: kubevirt: multus default-network annotation injection via unvalidated tenant networkname when externalnetresourceinjection is enabled

Risk 32
Severity
4.9
First published (updated )
CVE-2026-13434

Kubevirt network annotation generatorInput Validation

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2493576

Kubevirt migration proxy (pkg/virt-handler/migration-proxy/migration-proxy.go)A flaw was found in KubeVirt's migration proxy (pkg/virt-handler/migration-proxy/migration-proxy.go)…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2493378
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

KubeVirtKubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of service

Risk 20
Severity
3.8
First published (updated )
CVE-2026-13322

KubeVirt virt-apiVirt-api-rhel9: kubevirt: kubevirt: ssrf in virt-api port-forward via unvalidated guest-agent-reported ip

Risk 39
Severity
6.4
First published (updated )
CVE-2026-13318

Kubevirt virt-handlerKubevirt: kubevirt: symlink following in writetocachedfile allows host file overwrite from virt-launcher

Risk 28
Severity
4.2
First published (updated )
CVE-2026-13218

Kubevirt virt-handlerKubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request body

Risk 36
Severity
6.5
First published (updated )
CVE-2026-13208

Kubevirt virt-handlerA flaw was found in KubeVirt's virt-handler domain notify server (pkg/virt-handler/notify-server/ser…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2492220
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Kubevirt virt-handlerKubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption

Risk 47
Severity
7.3
First published (updated )
CVE-2026-13201

Kubevirt KubeVirt safepath (pkg/safepath)A flaw was found in KubeVirt's safepath package (pkg/safepath/safepath_linux.go). The OpenAtNoFollow…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2492203

Kubevirt virt-exportserverKubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file read

Risk 31
Severity
7.7
EPSS
0.52%
First published (updated )
CVE-2026-9804

Kubevirt virt-exportserverPath Traversal

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2482487

Kubevirt virt-handlerKubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability

Risk 82
Severity
9.9
First published (updated )
CVE-2026-7374
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Kubevirt virt-handlerA flaw was found in KubeVirt's virt-handler component. virt-handler connects to VM console sockets b…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2463728

Kubevirt KubeVirtKubevirt: kubevirt: unauthorized subresource access due to improper rbac evaluation

Risk 25
Severity
5.4
EPSS
0.03%
First published (updated )
CVE-2026-6383

Kubevirt KubeVirtA flaw was found in KubeVirt's RBAC (Role-Based Access Control) evaluation logic. The authorization …

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2458741

Kubevirt Kubevirt KubernetesKubeVirt Vulnerable to Arbitrary Host File Read and Write

Risk 60
Severity
8.5
First published (updated )
CVE-2025-64324

go/kubevirt.io/kubevirtKubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes

Risk 35
Severity
5
First published (updated )
CVE-2025-64437
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Kubevirt Kubevirt KubernetesKubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes

Risk 33
Severity
6.9
First published (updated )
CVE-2025-64436

Kubevirt Kubevirt KubernetesKubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation

Risk 32
Severity
5.3
First published (updated )
CVE-2025-64435

go/kubevirt.io/kubevirtKubeVirt Improper TLS Certificate Management Handling Allows API Identity Spoofing

Risk 47
Severity
6.3
First published (updated )
CVE-2025-64434

Kubevirt Kubevirt KubernetesKubeVirt Arbitrary Container File Read

Risk 38
Severity
6.5
First published (updated )
CVE-2025-64433

Kubevirt Kubevirt KubernetesKubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer

Risk 28
Severity
4.7
First published (updated )
CVE-2025-64432
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

go/kubevirt.io/kubevirtCode Injection

Risk 32
Severity
5.9
EPSS
0.04%
First published (updated )
CVE-2024-33394

Kubevirt Kubevirt KubernetesOn a compromised KubeVirt node, the virt-handler service account can be used to modify all node specs

Risk 60
Severity
8.2
First published (updated )
CVE-2023-26484

Kubevirt Kubevirt KubernetesPath Traversal vulnerability in Kubevirt

Risk 70
Severity
8.7
First published (updated )
CVE-2022-1798

redhat/kubevirtVirtual Machine Instances (VMIs) can be used to gain access to the host's filesystem. Upstream fix: …

Risk 87
Severity
10
First published (updated )
CVE-2020-14316

go/kubevirt.io/kubevirtA flaw was found in the KubeVirt main virt-handler versions before 0.26.0 regarding the access permi…

Risk 40
Severity
6.5
First published (updated )
CVE-2020-1701
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203