https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:14:52.859317+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-03571 bdu:2026-03571 2026-10-02T16:14:53.031700+00:00 bdu:2026-03571 https://cve.radiocsirt.org/vuln/cleanstart-2026-aa33691 Withdrawn: CLEANSTART-2026-AA33691 — Security fixes in calico-fips 3.28.5-r4 2026-10-02T16:14:53.031739+00:00

Withdrawn by the publisher.

Affected: CleanStart: calico-fips

Package calico-fips version 3.28.5-r4 fixes 5 vulnerabilities: CVE-2026-33186, CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2025-13281

 https://cve.radiocsirt.org/vuln/euvd-2026-263520 EUVD-2026-263520 2026-10-02T16:14:53.031771+00:00 EUVD-2026-263520 https://cve.radiocsirt.org/vuln/fkie_cve-2025-13281 fkie_cve-2025-13281 2026-10-02T16:14:53.031784+00:00

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).

 https://cve.radiocsirt.org/vuln/ghsa-r6j8-c6r2-37rr GHSA-r6j8-c6r2-37rr — kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass 2026-10-02T16:14:53.031808+00:00

Affected: Go: k8s.io/kubernetes

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-13281 msrc_CVE-2025-13281 — Portworx Half-Blind SSRF in kube-controller-manager 2026-10-02T16:14:53.031832+00:00 msrc_CVE-2025-13281 https://cve.radiocsirt.org/vuln/oesa-2025-2815 OESA-2025-2815 — kubernetes security update 2026-10-02T16:14:53.031848+00:00

Affected: openEuler:20.03-LTS-SP4: kubernetes

Container cluster management. Security Fix(es):

A vulnerability was found in Kubernetes kube-controller-manager up to versions 1.30.14, 1.31.14, 1.32.9, 1.33.5 and 1.34.1. It has been classified as CWE-918 (Server-Side Request Forgery). The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination. This vulnerability impacts confidentiality, integrity, and availability.(CVE-2025-13281)

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2705 WID-SEC-W-2025-2705 — Kubernetes: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-02T16:14:53.031870+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Kubernetes ausnutzen, um Informationen offenzulegen.