nuclio

Products

ProductCVEsExploitedLatest
nuclio8–Sep 2, 2026

Exploited and recent CVEs

  • CVE-2026-52831 High 8.0 Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCE 0.5%
  • CVE-2026-79756 High 8.7 Nuclio: Unauthenticated OS command injection via namespace header in list-all resource path on local platform 7.5%
  • CVE-2026-79755 High 8.0 Nuclio: Unauthenticated OS command injection via function namespace in docker ps --filter label (local Docker platform) 0.7%
  • CVE-2026-79754 High 7.1 Nuclio: Kaniko build tempDir command injection 0.7%
  • CVE-2026-52833 High 8.0 Nuclio: Unsanitized runtimeAttributes.repositories injected into Groovy build.gradle leads to build-time RCE 0.6%
  • CVE-2026-52832 Medium 4.9 Nuclio: Unauthenticated path traversal in spec.handler allows arbitrary file write in Dashboard container 0.6%
  • CVE-2026-45730 High 8.3 Nuclio: Missing authorization on project write paths allows any authenticated user to modify or delete any project 0.5%
  • CVE-2026-29042 High 8.9 Nuclio Shell Runtime Command Injection Leading to Privilege Escalation 2.6%