https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:58:18.917950+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-1260 CVE-2023-1260 — Kube-apiserver: privesc 2026-10-04T04:58:18.936706+00:00

Affected: github.com/openshift/apiserver-library-go, Red Hat OpenShift Container Platform 4.10, Red Hat OpenShift Container Platform 4.11, Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4

An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions "update, patch" the "pods/ephemeralcontainers" subresource beyond what the default is. They would then need to create a new pod or patch one that they already have access to. This might allow evasion of SCC admission restrictions, thereby gaining control of a privileged pod.