https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:27:25.898421+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-44958 cnvd-2021-44958 2026-10-03T13:27:26.004860+00:00 cnvd-2021-44958 https://cve.radiocsirt.org/vuln/euvd-2026-35551 EUVD-2026-35551 2026-10-03T13:27:26.004903+00:00 EUVD-2026-35551 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1701 fkie_cve-2020-1701 2026-10-03T13:27:26.004918+00:00

A flaw was found in the KubeVirt main virt-handler versions before 0.26.0 regarding the access permissions of virt-handler. An attacker with access to create VMs could attach any secret within their namespace, allowing them to read the contents of that secret.

 https://cve.radiocsirt.org/vuln/ghsa-849r-8wvp-4wwg GHSA-849r-8wvp-4wwg — Permissions bypass in KubeVirt 2026-10-03T13:27:26.004951+00:00

Affected: Go: kubevirt.io/kubevirt

A flaw was found in the KubeVirt main virt-handler versions before 0.26.0 regarding the access permissions of virt-handler. An attacker with access to create VMs could attach any secret within their namespace, allowing them to read the contents of that secret.

 https://cve.radiocsirt.org/vuln/gsd-2020-1701 gsd-2020-1701 2026-10-03T13:27:26.004977+00:00 gsd-2020-1701 https://cve.radiocsirt.org/vuln/rhea-2020:2011 RHEA-2020:2011 — Red Hat Enhancement Advisory: CNV 2.3.0 Images 2026-10-03T13:27:26.004990+00:00

virt-handler: virt-handler daemonset clusterroles allows retrieval of secrets nmstate/kubernetes-nmstate-handler: /etc/passwd is given incorrect privileges