Kubernetes (kubelet, kube-controller-manager): Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kubernetes ausnutzen, um Sicherheitsvorkehrungen zu umgehen und vertrauliche Informationen offenzulegen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Mediumbsi:WID-SEC-2026-35442 linked CVEs
Open advisory with all CVEs
More on kube-controller-manager
Other advisories
- Not ratedosv:CLEANSTART-2025-RW12960Kubernetes kube-controller-manager in versions v1
- Not ratedosv:CLEANSTART-2026-SM33325half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass
- Not ratedosv:CLEANSTART-2026-WQ14385flaw was found in kube-controller-manager
- Not ratedosv:CLEANSTART-2026-HH25229half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass
- Not ratedosv:CLEANSTART-2026-YE64155half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass
- MediumCVE-2026-2270Kubernetes (kubelet, kube-controller-manager): Mehrere Schwachstellen
- Not ratedosv:CLEANSTART-2026-RX78395Security fix for GHSA-gcjh-h69q-9w9g applied in: kube-state-metrics-fips 2.20.0-r3, eks-distro-kube-scheduler 1.36.9-r2, eks-distro-kube-controller-manager-fips 1.36.8-r0, eks-distro-kube-apiserver 1.36.8-r0, eks-distro-kube-apiserver-fips 1.36.8-r0
- Not ratedosv:CLEANSTART-2026-ZS73776Security fix for GHSA-8wmf-6v46-5gfg applied in: eks-distro-kube-scheduler-fips 1.35.14-r0, eks-distro-kube-controller-manager-fips 1.36.8-r1, eks-distro-kube-apiserver 1.36.8-r2, eks-distro-kube-apiserver-fips 1.36.8-r1
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3544
ID