https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 26 Oct 2026 15:18:58 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-374958 EUVD-2026-374958 https://cve.radiocsirt.org/vuln/euvd-2026-374958 https://cve.radiocsirt.org/vuln/fkie_cve-2026-82277 <p>Argo Rollouts dashboard through 1.10.0 binds to all interfaces and exposes mutating Rollout operations without authentication, authorization, or CSRF protection. Attackers on the same network can invoke PromoteRollout, AbortRollout, RestartRollout, SetRolloutImage, UndoRollout, and RetryRollout operations across all namespaces accessible to the operator&#39;s kubeconfig.</p> <p>Argo Rollouts dashboard through 1.10.0 binds to all interfaces and exposes mutating Rollout operations without authentication, authorization, or CSRF protection. Attackers on the same network can invoke PromoteRollout, AbortRollout, RestartRollout, SetRolloutImage, UndoRollout, and RetryRollout operations across all namespaces accessible to the operator&#39;s kubeconfig.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-82277 https://cve.radiocsirt.org/vuln/ghsa-366v-5xmx-36vh <p>Argo Rollouts dashboard through 1.10.0 binds to all interfaces and exposes mutating Rollout operations without authentication, authorization, or CSRF protection. Attackers on the same network can invoke PromoteRollout, AbortRollout, RestartRollout, SetRolloutImage, UndoRollout, and RetryRollout operations across all namespaces accessible to the operator&#39;s kubeconfig.</p> <p>Argo Rollouts dashboard through 1.10.0 binds to all interfaces and exposes mutating Rollout operations without authentication, authorization, or CSRF protection. Attackers on the same network can invoke PromoteRollout, AbortRollout, RestartRollout, SetRolloutImage, UndoRollout, and RetryRollout operations across all namespaces accessible to the operator&#39;s kubeconfig.</p> https://cve.radiocsirt.org/vuln/ghsa-366v-5xmx-36vh https://cve.radiocsirt.org/vuln/rhsa-2026:83629 <p>argo-rollouts: argo-rollouts: Argo Rollouts Dashboard Unauthenticated Mutating Operations</p> <p>argo-rollouts: argo-rollouts: Argo Rollouts Dashboard Unauthenticated Mutating Operations</p> https://cve.radiocsirt.org/vuln/rhsa-2026:83629