https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:17:35.664109+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-04110 bdu:2024-04110 2026-10-03T06:17:36.025070+00:00 bdu:2024-04110 https://cve.radiocsirt.org/vuln/cleanstart-2026-if32046 Withdrawn: CLEANSTART-2026-IF32046 — Security fixes in local-static-provisioner 2.6.0-r1 2026-10-03T06:17:36.025111+00:00

Withdrawn by the publisher.

Affected: CleanStart: local-static-provisioner

Package local-static-provisioner version 2.6.0-r1 fixes 18 vulnerabilities: ghsa-7fxm-f474-hf8w, ghsa-q78c-gwqw-jcmc, CVE-2023-3676, CVE-2023-3955, ghsa-hq6q-c2x6-hmch...

 https://cve.radiocsirt.org/vuln/cnvd-2024-24974 cnvd-2024-24974 2026-10-03T06:17:36.025147+00:00 cnvd-2024-24974 https://cve.radiocsirt.org/vuln/euvd-2026-162496 EUVD-2026-162496 2026-10-03T06:17:36.025162+00:00 EUVD-2026-162496 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3177 fkie_cve-2024-3177 2026-10-03T06:17:36.025174+00:00

A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the kubernetes.io/enforce-mountable-secrets annotation are used together with containers, init containers, and ephemeral containers with the envFrom field populated.

 https://cve.radiocsirt.org/vuln/ghsa-pxhw-596r-rwq5 GHSA-pxhw-596r-rwq5 — Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin 2026-10-03T06:17:36.025203+00:00

Affected: Go: k8s.io/kubernetes

A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the kubernetes.io/enforce-mountable-secrets annotation are used together with containers, init containers, and ephemeral containers with the envFrom field populated.

 https://cve.radiocsirt.org/vuln/gsd-2024-3177 gsd-2024-3177 2026-10-03T06:17:36.025230+00:00 gsd-2024-3177 https://cve.radiocsirt.org/vuln/msrc_cve-2024-3177 msrc_CVE-2024-3177 — Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin 2026-10-03T06:17:36.025242+00:00 msrc_CVE-2024-3177 https://cve.radiocsirt.org/vuln/oesa-2024-1550 OESA-2024-1550 — kubernetes security update 2026-10-03T06:17:36.025257+00:00

Affected: openEuler:20.03-LTS-SP1: kubernetes

Container cluster management. Security Fix(es): A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the kubernetes.io/enforce-mountable-secrets annotation are used together with containers, init containers, and ephemeral containers with the envFrom field populated. (CVE-2024-3177)

 https://cve.radiocsirt.org/vuln/rhsa-2024:0043 RHSA-2024:0043 — Red Hat Security Advisory: Red Hat build of MicroShift 4.16.0 security update 2026-10-03T06:17:36.025281+00:00

kubernetes: kube-apiserver: bypassing mountable secrets policy imposed by the ServiceAccount admission plugin golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON

 https://cve.radiocsirt.org/vuln/suse-su-2024:1403-1 SUSE-SU-2024:1403-1 — Security update for kubernetes1.24 2026-10-03T06:17:36.025300+00:00

Security update for kubernetes1.24

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-3177 Withdrawn: UBUNTU-CVE-2024-3177 2026-10-03T06:17:36.025315+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:20.04:LTS: kubernetes, Ubuntu:22.04:LTS: kubernetes, Ubuntu:24.04:LTS: kubernetes

A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the kubernetes.io/enforce-mountable-secrets annotation are used together with containers, init containers, and ephemeral containers with the envFrom field populated.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0904 WID-SEC-W-2024-0904 — Kubernetes: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-03T06:17:36.025341+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Kubernetes ausnutzen, um Informationen offenzulegen.