https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:34:32.765074+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-03899 bdu:2023-03899 2026-10-02T17:34:32.898456+00:00 bdu:2023-03899 https://cve.radiocsirt.org/vuln/euvd-2026-216300 EUVD-2026-216300 2026-10-02T17:34:32.898494+00:00 EUVD-2026-216300 https://cve.radiocsirt.org/vuln/fkie_cve-2023-2431 fkie_cve-2023-2431 2026-10-02T17:34:32.898508+00:00

A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in unconfined (seccomp disabled) mode. This bug affects Kubelet.

 https://cve.radiocsirt.org/vuln/ghsa-xc8m-28vv-4pjc GHSA-xc8m-28vv-4pjc — Kubelet vulnerable to bypass of seccomp profile enforcement 2026-10-02T17:34:32.898538+00:00

Affected: Go: k8s.io/kubernetes

A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in unconfined (seccomp disabled) mode. This bug affects Kubelet.

 https://cve.radiocsirt.org/vuln/gsd-2023-2431 gsd-2023-2431 2026-10-02T17:34:32.898564+00:00 gsd-2023-2431 https://cve.radiocsirt.org/vuln/oesa-2023-1413 OESA-2023-1413 — kubernetes security update 2026-10-02T17:34:32.898576+00:00

Affected: openEuler:20.03-LTS-SP3: kubernetes

Container cluster management.

Security Fix(es):

Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group without authorization. Clusters are impacted by this vulnerability if all of the following are true: 1. There are 2+ CustomResourceDefinitions sharing the same API group 2. Users have cluster-wide list or watch authorization on one of those custom resources. 3. The same users are not authorized to read another custom resource in the same API group.(CVE-2022-3162)

Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can modify Node objects and send proxy requests to them. Kubernetes supports node proxying, which allows clients of kube-apiserver to access endpoints of a Kubelet to establish connections to Pods, retrieve container logs, and more. While Kubernetes already validates the proxying address for Nodes, a bug in kube-apiserver made it possible to bypass this validation. Bypassing this validation could allow authenticated requests destined for Nodes to to the API server's private network.(CVE-2022-3294)

A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in unconfined…

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13013-1 openSUSE-SU-2024:13013-1 — kubernetes1.23-apiserver-1.23.17-5.1 on GA media 2026-10-02T17:34:32.898620+00:00

kubernetes1.23-apiserver-1.23.17-5.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:6156 RHSA-2023:6156 — Red Hat Security Advisory: Red Hat OpenShift support for Windows Containers 8.1.0 security update 2026-10-02T17:34:32.898637+00:00

kubernetes: Bypass of seccomp profile enforcement golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487)

 https://cve.radiocsirt.org/vuln/suse-su-2023:2691-1 SUSE-SU-2023:2691-1 — Security update for kubernetes1.23 2026-10-02T17:34:32.898654+00:00

Security update for kubernetes1.23

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-2431 Withdrawn: UBUNTU-CVE-2023-2431 2026-10-02T17:34:32.898667+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:20.04:LTS: kubernetes, Ubuntu:22.04:LTS: kubernetes, Ubuntu:24.04:LTS: kubernetes

A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in unconfined (seccomp disabled) mode. This bug affects Kubelet.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1488 WID-SEC-W-2023-1488 — Kubernetes: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-02T17:34:32.898698+00:00

Ein lokaler Angreifer kann eine Schwachstelle in Kubernetes ausnutzen, um Sicherheitsvorkehrungen zu umgehen.