https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T17:10:42.490643+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-194931 EUVD-2026-194931 2026-10-07T17:10:42.493071+00:00 EUVD-2026-194931 https://cve.radiocsirt.org/vuln/fkie_cve-2023-37917 fkie_cve-2023-37917 2026-10-07T17:10:42.493103+00:00

KubePi is an opensource kubernetes management panel. A normal user has permission to create/update users, they can become admin by editing the `isadmin` value in the request. As a result any user may take administrative control of KubePi. This issue has been addressed in version 1.6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-757p-vx43-fp9r GHSA-757p-vx43-fp9r — KubePi Privilege Escalation vulnerability 2026-10-07T17:10:42.493134+00:00

Affected: Go: github.com/KubeOperator/kubepi

### Summary A normal user has permission to create/update users, they can become admin by editing the `isadmin` value in the request

### PoC Change the value of the `isadmin` field in the request to true: https://drive.google.com/file/d/1e8XJbIFIDXaFiL-dqn0a0b6u7o3CwqSG/preview

### Impact Elevate user privileges

 https://cve.radiocsirt.org/vuln/gsd-2023-37917 gsd-2023-37917 2026-10-07T17:10:42.493160+00:00 gsd-2023-37917