Kubernetes
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Kubernetes | 33 | – | Oct 26, 2026 |
| ingress-nginx | 18 | – | Nov 5, 2026 |
| Kubelet | 7 | – | Mar 13, 2025 |
| Kubernetes ingress-nginx | 4 | – | May 24, 2023 |
| Image Builder | 3 | – | Aug 17, 2025 |
| Kubernetes Java Client | 2 | – | Oct 11, 2021 |
| Kubernetes Secrets Store CSI Driver | 2 | – | Jan 21, 2021 |
| minikube | 2 | – | May 24, 2023 |
| kube-apiserver | 2 | – | Mar 20, 2025 |
| aws-iam-authenticator | 1 | – | Jul 12, 2022 |
| secrets-store-sync-controller | 1 | – | Sep 5, 2025 |
| azure-file-csi-driver | 1 | – | May 15, 2024 |
| CSI Driver for NFS | 1 | – | Mar 20, 2026 |
| csi-proxy | 1 | – | Nov 3, 2023 |
| CSI Snapshotter | 1 | – | Jan 21, 2021 |
| kops | 1 | – | Oct 11, 2023 |
| kubernetes-client/java | 1 | – | Jul 23, 2026 |
| Kubernetes CSharp Client | 1 | – | Sep 16, 2025 |
| secrets-store-csi-driver | 1 | – | Jun 7, 2023 |
Exploited and recent CVEs
- CVE-2026-116472 ingress-nginx mirror-target self-DOS 0.4%
- CVE-2026-2270 StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation 0.3%
- CVE-2026-76654 Subpath symlinking on Windows nodes permits NTLM coercion 0.4%
- CVE-2026-19444 Kubernetes kubectl cp path traversal on Windows allows arbitrary file writes 0.2%
- CVE-2026-15687 Path traversal via non-tar copyDirectoryFromPod 0.4%
- CVE-2026-3864 CSI Driver for NFS path traversal via subDir may delete unintended directories on the NFS server 0.7%
- CVE-2026-4342 ingress-nginx comment-based nginx configuration injection 1.5%
- CVE-2026-3288 ingress-nginx rewrite-target nginx configuration injection 7.0%
- CVE-2025-15566 ingress-nginx auth-proxy-set-headers nginx configuration injection 0.5%
- CVE-2026-24514 ingress-nginx Admission Controller denial of service 0.5%
- CVE-2026-24513 ingress-nginx auth-url protection bypass 0.3%
- CVE-2026-24512 ingress-nginx auth-method nginx configuration injection 0.5%
- CVE-2026-1580 ingress-nginx auth-method nginx configuration injection 0.5%
- CVE-2025-13281 Portworx Half-Blind SSRF in kube-controller-manager 0.4%
- CVE-2025-9708 Kubernetes C# Client: improper certificate validation in custom CA mode may lead to man-in-the-middle attacks 0.3%
- CVE-2025-7445 Kubernetes secrets-store-sync-controller discloses service account tokens in logs 0.2%
- CVE-2025-5187 Nodes can delete themselves by adding an OwnerReference 0.6%
- CVE-2025-7342 VM images built with Kubernetes Image Builder Nutanix or OVA providers use default credentials for Windows images if user did not override 0.4%
- CVE-2025-4563 Nodes can bypass dynamic resource allocation authorization checks 0.8%
- CVE-2025-24514 ingress-nginx controller - configuration injection via unsanitized auth-url annotation 37.3%
- CVE-2025-24513 ingress-nginx controller - auth secret file path traversal vulnerability 3.3%
- CVE-2025-1098 ingress-nginx controller - configuration injection via unsanitized mirror annotations 86.1%
- CVE-2025-1097 ingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation 37.0%
- CVE-2025-1974 ingress-nginx admission controller RCE escalation 99.4%
- CVE-2024-7598 Network restriction bypass via race condition during namespace termination 0.3%
- CVE-2025-1767 This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been depr 0.7%
- CVE-2024-9042 This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below. 1.4%
- CVE-2025-0426 A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by fi 0.4%
- CVE-2024-10220 Arbitrary command execution through gitRepo volume 3.0%
- CVE-2024-9594 VM images built with Image Builder with some providers use default credentials during builds 1.7%