Kubernetes security note

CVE-2026-62994 — Check if you run it

CoreDNS headless AXFR can emit an empty transfer batch that panics the plugin

Affected: 1.9.4 → 1.14.5, >= 1.9.4, <= 1.14.4

CVE-2025-5987 — Check if you run it

A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library.

Affected: patch: 4.20.9.6.202601211057-0

CVE-2026-77524 — Check if you run it

KEDA is a Kubernetes-based Event Driven Autoscaling component.

Affected: 0 → 2.21.0, <= 1.5.0, < 2.21.0

CVE-2026-77564 — Check if you run it

Talos Linux is a Linux distribution built for Kubernetes deployments.

Affected: < 1.14.0-alpha.0.0.20260513110206-76080416beee

CVE-2026-77459 — Check if you run it

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.

Affected: >= 2.10.0, <= 2.14.21, >=2.10.0 <=2.14.21, >= 3.0.0

CVE-2026-3012 — Check if you run it

A flaw was found in Samba’s certificate auto-enrollment Group Policy handling.

Affected: 7.0, 9.0, 4.0

CVE-2026-2340 — Check if you run it

A flaw was found in Samba’s vfs_worm module.

Affected: 10.0, 7.0, 8.0, 9.0

CVE-2025-71424 — Check if you run it

Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versions up to and including 1.9.0.

Affected: <= 1.9.0

CVE-2026-75887 — Check if you run it

A flaw was found in the OpenShift console.

No version range is stored, so an installed version cannot be checked.

CVE-2026-75885 — Check if you run it

A flaw was found in the OpenShift console.

No version range is stored, so an installed version cannot be checked.

CVE-2026-75888 — Check if you run it

A flaw was found in the OpenShift console.

No version range is stored, so an installed version cannot be checked.

CVE-2025-2586 — Check if you run it

A flaw was found in the OpenShift Lightspeed Service, which is vulnerable to unauthenticated API request flooding.

No version range is stored, so an installed version cannot be checked.

CVE-2026-83589 — Check if you run it

A flaw was found in oauth-proxy.

No version range is stored, so an installed version cannot be checked.

CVE-2025-66626 — Check if you run it

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.

No version range is stored, so an installed version cannot be checked.

CVE-2025-5278 — Check if you run it

A flaw was found in GNU Coreutils.

No version range is stored, so an installed version cannot be checked.

CVE-2025-13281 — Check if you run it

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass.

No version range is stored, so an installed version cannot be checked.