high · CVSS v3 7.7 · CVSS v4 8.3

CVE-2026-122312

Kyverno from 1.19.1 before 1.19.2 contains a namespace isolation bypass in APICall Fetch() in pkg/engine/apicall/apiCall…

Description

Kyverno from 1.19.1 before 1.19.2 contains a namespace isolation bypass in APICall Fetch() in pkg/engine/apicall/apiCall.go because path.Clean treats '?' as a path character, letting the namespace regex match segments inside the query string. Users who can create namespaced policies can supply a URLPath like /api/v1/nodes?x=/namespaces/default/ that passes validation while client-go requests the cluster-scoped endpoint, reading resources outside their namespace.

Scores

Severity
high
CVSS v2
6.8
CVSS v3
7.7
CVSS v4
8.3
EPSS
—

← All CVEs

Related CVEs

high

CVE-2026-122009

DataLinkDC Dinky versions up to 1.2.5 contain a Server-Side Request Forgery (SSRF) vulnerability in the FlinkWebURITemplateProxyServlet component. This flaw allows remote attackers to manipulate the _authority argument to force the server to make requests to unintended internal or external targets. The vulnerability is critical for environments where Dinky acts as a proxy for Flink web interfaces.

View analysis

high

CVE-2026-122188

A path traversal vulnerability exists in DeepGraphLearning's KnowledgeGraphEmbedding component, allowing remote attackers to manipulate the data_path argument during checkpoint loading. The flaw can lead to arbitrary file access and potential code execution. It is currently unpatched and publicly disclosed.

View analysis

high

CVE-2026-86442

The WP Event Manager WordPress plugin before 3.4.2 does not verify the ownership or the post type of a user supplied post identifier in its front-end event submission flow, allowing unauthenticated attackers to read and overwrite the content of arbitrary unpublished posts and pages, and to convert them into events.

View analysis

high

CVE-2026-90965

The Essential Real Estate WordPress plugin before 5.3.5 does not perform a publication-status or authorization check in two of its AJAX actions, allowing unauthenticated users to retrieve the images attached to property listings that have not been published.

View analysis