https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T04:48:33.314418+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-13281 CVE-2025-13281 — Portworx Half-Blind SSRF in kube-controller-manager 2026-10-06T04:48:33.472892+00:00

Affected: Kubernetes

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).

 https://cve.radiocsirt.org/vuln/ghsa-4x4m-3c2p-qppc GHSA-4x4m-3c2p-qppc — Kubernetes Nodes can delete themselves by adding an OwnerReference 2026-10-06T04:48:33.472968+00:00

Affected: Go: k8s.io/kubernetes

A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped resource. If the OwnerReference resource does not exist or is subsequently deleted, the given node object will be deleted via garbage collection.