Argo CD: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in Argo CD ausnutzen, um beliebigen Programmcode auszuführen, vertrauliche Informationen und Zugangsdaten auszulesen, Zugriffsbeschränkungen zu umgehen oder einen Denial of Service zu verursachen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2026-38025 linked CVEs
Open advisory with all CVEs
More on Argo
Other advisories
- Highosv:MAL-2026-19436Malicious code in dowload_ebok_hidden_figures_by_margot_lee_shetterly_tdnn8 (npm)
- MediumCVE-2026-106025Cargo Shipping Location for WooCommerce: unzureichende Zugriffskontrolle
- MediumCVE-2026-106025Cargo Shipping Location for WooCommerce: unzureichende Zugriffskontrolle
- MediumCVE-2026-106025The Cargo Shipping Location for WooCommerce WordPress plugin before 6.0 does not properly restrict access to a REST API endpoint that updates order shipment …
- MediumCVE-2026-124684Samsung Open Source Escargot: Use-After-Free
- MediumCVE-2026-124684Samsung Open Source Escargot: Use-After-Free
- Not ratedosv:openSUSE-SU-2026:12452-1argocd-cli-3.6.1-1.1 on GA media
- MediumCVE-2026-88982Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the legacy V1/raw-Argo execution cache m…
Other news entries
- Neues LLM: Gemini 4 Carbon ist Exploit-ExperteNewsheise Security
- Major U.S. banks detect unauthorized third-party AI agents inside customer accountsBreachpwn.watch
- Argo CD: Schwachstelle ermöglicht Offenlegung von InformationenVulnerabilityBSI CERT-Bund
- Argo CD: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Google makes Gemini 4 AI model available to a trusted fewNewsCSO Online
- Google Launches Gemini 4 Argon With Guardrail-Free Access for Vetted DefendersNewsSecurityWeek
- Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free VersionNewsThe Hacker News
- AI-Assisted Tool Helped Secure Satellite Communication System After 2022 Russian HackingNewsSecurityWeek
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3802
ID