container native virtualization 4.13 güvenlik açıkları (CVE)

8.8Yüksek

CVE-2026-13622 2 ay önce

Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host

Red Hat Red Hat Container Native Virtualization 4.12; Red Hat Red Hat Container Native Virtualization 4.13; Red Hat Red Hat Container Native Virtualization 4.14; Red Hat Red Hat Container Native Virtualization 4.15

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc/<pid>/root/ paths using net.Dial() without symlink protection. These s…

7.3Yüksek

CVE-2026-13201 4 ay önce

Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption

Red Hat Red Hat Container Native Virtualization 4.12; Red Hat Red Hat Container Native Virtualization 4.13; Red Hat Red Hat Container Native Virtualization 4.14; Red Hat Red Hat Container Native Virtualization 4.15

A flaw was found in KubeVirt's safepath package used by virt-handler. The OpenAtNoFollow function uses O_PATH|O_NOFOLLOW to obtain a file descriptor to a path leaf, but downstream operations resolve the path via /proc/self/fd/N using link-following syscalls. …

7.0Yüksek

CVE-2026-44495 4 ay önce

Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge

axios axios; Red Hat Red Hat AMQ Broker 7.13.6; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9

Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in request config processing. If another vulnerability in the same JavaScript process has already polluted Ob…

8.7Yüksek

CVE-2026-44494 4 ay önce

Axios: Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`

axios axios; Red Hat Red Hat AMQ Broker 7.13.6; Red Hat Red Hat AMQ Broker 7.14.1; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8

Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.16.0, the Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows any Object.prototype pollution in the application's dependency tree to be escal…

1.1%EPSS

8.6Yüksek

CVE-2026-44492 4 ay önce

Axios: shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)

axios axios; Red Hat Red Hat AMQ Broker 7.13.6; Red Hat Red Hat AMQ Broker 7.14.1; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8

Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios does not normalise IPv4-mapped IPv6 addresses. When NO_PROXY lists an IPv4 address such as 127.0.0.1 or 169.254.169.254, a request URL using the IPv4-mapped IP…

12%EPSS

9.9Kritik

CVE-2026-7374 5 ay önce

Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability

kubevirt; Red Hat Red Hat Container Native Virtualization 4.12; Red Hat Red Hat Container Native Virtualization 4.13; Red Hat Red Hat Container Native Virtualization 4.14

A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual machine console sockets. By replacin…

8.7Yüksek

CVE-2026-35469 6 ay önce

SpdyStream: DOS on CRI

moby spdystream; Red Hat Red Hat OpenShift Container Platform 4.19; Red Hat RHEM 1.0 for RHEL 9; Red Hat RHEM 1.1 for RHEL 10

spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTING…

4.8Orta

CVE-2026-40175 7 ay önce

Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain

axios axios; Siemens gWAP; Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9; Red Hat Streams for Apache Kafka 3.2.0

Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leveraged to inject unsanitized header …

2.0%EPSS