Where
-Infinity
0

Trending

Last week
Last month
Last year

KubeVirtVirt-controller-rhel9: kubevirt: kubevirt: multus default-network annotation injection via unvalidated tenant networkname when externalnetresourceinjection is enabled

Risk 32
Severity
4.9
First published (updated )
CVE-2026-13434

KubeVirtKubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of service

Risk 20
Severity
3.8
First published (updated )
CVE-2026-13322

KubeVirt virt-apiVirt-api-rhel9: kubevirt: kubevirt: ssrf in virt-api port-forward via unvalidated guest-agent-reported ip

Risk 39
Severity
6.4
First published (updated )
CVE-2026-13318

Kubevirt virt-handlerKubevirt: kubevirt: symlink following in writetocachedfile allows host file overwrite from virt-launcher

Risk 28
Severity
4.2
First published (updated )
CVE-2026-13218

Kubevirt virt-handlerKubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request body

Risk 36
Severity
6.5
First published (updated )
CVE-2026-13208
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Kubevirt virt-handlerKubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption

Risk 47
Severity
7.3
First published (updated )
CVE-2026-13201

Kubevirt Kubevirt KubernetesKubeVirt Vulnerable to Arbitrary Host File Read and Write

Risk 60
Severity
8.5
First published (updated )
CVE-2025-64324

go/kubevirt.io/kubevirtKubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes

Risk 35
Severity
5
First published (updated )
CVE-2025-64437

Kubevirt Kubevirt KubernetesKubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes

Risk 33
Severity
6.9
First published (updated )
CVE-2025-64436

Kubevirt Kubevirt KubernetesKubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation

Risk 32
Severity
5.3
First published (updated )
CVE-2025-64435
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

go/kubevirt.io/kubevirtKubeVirt Improper TLS Certificate Management Handling Allows API Identity Spoofing

Risk 47
Severity
6.3
First published (updated )
CVE-2025-64434

Kubevirt Kubevirt KubernetesKubeVirt Arbitrary Container File Read

Risk 38
Severity
6.5
First published (updated )
CVE-2025-64433

Kubevirt Kubevirt KubernetesKubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer

Risk 28
Severity
4.7
First published (updated )
CVE-2025-64432

Kubevirt Kubevirt KubernetesOn a compromised KubeVirt node, the virt-handler service account can be used to modify all node specs

Risk 60
Severity
8.2
First published (updated )
CVE-2023-26484

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203