Cclastix

Products

Exploited and recent CVEs

• CVE-2026-62845 Medium 4.7 Kamaji: SQL injection via unescaped datastore identifiers in PostgreSQL/MySQL drivers 0.3%
• CVE-2026-62246 High 8.5 Kamaji: TenantControlPlane namespace/name collision binds two tenants to the same SQL datastore schema + DB user, breaking per-tenant isolation 0.4%
• CVE-2024-42480 High 8.1 Kamaji's RBAC Roles for `etcd` are not disjunct 0.6%
• CVE-2022-46167 High 8.8 Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace 0.9%
• CVE-2022-23652 High 8.8 Privilege escalation using hop-by-hop Connection header 1.4%