defenseunicorns
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| pepr | 1 | – | Jan 16, 2026 |
| uds-identity-config | 1 | – | Jun 5, 2026 |
Exploited and recent CVEs
- CVE-2026-46389 UDS Identity Config has a client authentication bypass in `ClientIdAndKubernetesSecretAuthenticator` 0.3%
- CVE-2026-23634 Pepr Overly Permissive RBAC ClusterRole in Admin Mode 0.2%