https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:17:59.231441+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2019-9946 Withdrawn: BELL-CVE-2019-9946 — CVE-2019-9946 does not affect BellSoft software 2026-10-03T04:17:59.240002+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/cleanstart-2025-ig62048 CLEANSTART-2025-IG62048 — Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0 2026-10-03T04:17:59.240038+00:00

Affected: CleanStart: containerd

Security vulnerability affects the containerd package. Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.

 https://cve.radiocsirt.org/vuln/cnvd-2019-23129 cnvd-2019-23129 2026-10-03T04:17:59.240067+00:00 cnvd-2019-23129 https://cve.radiocsirt.org/vuln/euvd-2026-53253 EUVD-2026-53253 2026-10-03T04:17:59.240081+00:00 EUVD-2026-53253 https://cve.radiocsirt.org/vuln/fkie_cve-2019-9946 fkie_cve-2019-9946 2026-10-03T04:17:59.240092+00:00

Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI 'portmap' plugin, used to setup HostPorts for CNI, inserts rules at the front of the iptables nat chains; which take precedence over the KUBE- SERVICES chain. Because of this, the HostPort/portmap rule could match incoming traffic even if there were better fitting, more specific service definition rules like NodePorts later in the chain. The issue is fixed in CNI 0.7.5 and Kubernetes 1.11.9, 1.12.7, 1.13.5, and 1.14.0.

 https://cve.radiocsirt.org/vuln/ghsa-6g96-g4m6-hw69 GHSA-6g96-g4m6-hw69 2026-10-03T04:17:59.240116+00:00

Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI 'portmap' plugin, used to setup HostPorts for CNI, inserts rules at the front of the iptables nat chains; which take precedence over the KUBE- SERVICES chain. Because of this, the HostPort/portmap rule could match incoming traffic even if there were better fitting, more specific service definition rules like NodePorts later in the chain. The issue is fixed in CNI 0.7.5 and Kubernetes 1.11.9, 1.12.7, 1.13.5, and 1.14.0.

 https://cve.radiocsirt.org/vuln/gsd-2019-9946 gsd-2019-9946 2026-10-03T04:17:59.240132+00:00 gsd-2019-9946 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10884-1 openSUSE-SU-2024:10884-1 — k3s-1.21.3+k3s1-1.2 on GA media 2026-10-03T04:17:59.240142+00:00

k3s-1.21.3+k3s1-1.2 on GA media

 https://cve.radiocsirt.org/vuln/rhba-2019:0862 RHBA-2019:0862 — Red Hat Bug Fix Advisory: containernetworking-plugins bug fix and enhancement update 2026-10-03T04:17:59.240158+00:00

kubernetes: Incorrect rule injection in CNI portmap plugin

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-9946 Withdrawn: UBUNTU-CVE-2019-9946 2026-10-03T04:17:59.240172+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:20.04:LTS: kubernetes, Ubuntu:22.04:LTS: kubernetes, Ubuntu:24.04:LTS: kubernetes

Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI 'portmap' plugin, used to setup HostPorts for CNI, inserts rules at the front of the iptables nat chains; which take precedence over the KUBE- SERVICES chain. Because of this, the HostPort/portmap rule could match incoming traffic even if there were better fitting, more specific service definition rules like NodePorts later in the chain. The issue is fixed in CNI 0.7.5 and Kubernetes 1.11.9, 1.12.7, 1.13.5, and 1.14.0.