IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
6.8Orta

CVE-2025-9708Kubernetes C# Client: improper certificate validation in custom CA mode may lead to man-in-the-middle attacks

Kubernetes Kubernetes CSharp Client Yayım: (1 yıl önce)

Açıklama

A vulnerability exists in the Kubernetes C# client where the certificate validation logic accepts properly constructed certificates from any Certificate Authority (CA) without properly verifying the trust chain. This flaw allows a malicious actor to present a forged certificate and potentially intercept or manipulate communication with the Kubernetes API server, leading to possible man-in-the-middle attacks and API impersonation.

Zayıflık türü (CWE): CWE-295

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Kubernetes Kubernetes CSharp Client ≤ 17.0.13, fixed 17.0.14

Kaynaklar ve yamalar

Aynı üründe son açıklar — Kubernetes

2.7Düşük
CVE-2026-116472

ingress-nginx mirror-target self-DOS

Kubernetes ingress-nginx; SUSE Rancher Prime RKE2 ingress-nginx

A security issue was discovered in ingress-nginx where a user with permission to create an Ingress may be able to cause denial of service of the ingress-nginx data plane, or possibly redirect traffic from other Ingresses. Kubernetes clusters are only affected…

5.8Orta
CVE-2026-76654

Subpath symlinking on Windows nodes permits NTLM coercion

Kubernetes Kubernetes

An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a symbolic link that points to an attacker-controlled network share. When a kubelet resolves symlinks, it does not reject a target that resolves…

2.7Düşük
CVE-2026-15687

Path traversal via non-tar copyDirectoryFromPod

Kubernetes kubernetes-client/java

A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false.