https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:06:06.607765+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-11452 bdu:2025-11452 2026-10-02T12:06:06.666207+00:00 bdu:2025-11452 https://cve.radiocsirt.org/vuln/cnvd-2025-22093 cnvd-2025-22093 2026-10-02T12:06:06.666247+00:00 cnvd-2025-22093 https://cve.radiocsirt.org/vuln/euvd-2026-260102 EUVD-2026-260102 2026-10-02T12:06:06.666262+00:00 EUVD-2026-260102 https://cve.radiocsirt.org/vuln/fkie_cve-2025-9708 fkie_cve-2025-9708 2026-10-02T12:06:06.666273+00:00

A vulnerability exists in the Kubernetes C# client where the certificate validation logic accepts properly constructed certificates from any Certificate Authority (CA) without properly verifying the trust chain. This flaw allows a malicious actor to present a forged certificate and potentially intercept or manipulate communication with the Kubernetes API server, leading to possible man-in-the-middle attacks and API impersonation.

 https://cve.radiocsirt.org/vuln/ghsa-w7r3-mgwf-4mqq GHSA-w7r3-mgwf-4mqq — Kubernetes C# client accepts certificates from any CA without properly verifying the trust chain 2026-10-02T12:06:06.666303+00:00

Affected: NuGet: KubernetesClient

A vulnerability exists in the Kubernetes C# client where the certificate validation logic accepts properly constructed certificates from any Certificate Authority (CA) without properly verifying the trust chain. This flaw allows a malicious actor to present a forged certificate and potentially intercept or manipulate communication with the Kubernetes API server, leading to possible man-in-the-middle attacks and API impersonation.