CVE ID :CVE-2026-122312 Published : Nov. 5, 2026, 2:25 a.m. | 41 minutes ago Description :Kyverno from 1.19.1 before 1.19.2 contains a namespace isolation bypass in APICall Fetch() in pkg/engine/apicall/apiCall.go because path.Clean treats '?' as a path character, letting the namespace regex...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-122312 - Kyverno 1.19.1 before 1.19.2 Namespace Isolation Bypass via APICall URLPath Query String

VERWANDTEARTIKEL

CVE-2026-122992 - DStarGateway Integer Underflow

CVE-2026-122323 - Kyverno 1.11.0 before 1.19.2 Memory Exhaustion via Notary Signature Decompression

CVE-2026-122321 - Kyverno 1.18.0 before 1.19.2 verifyImages Cache Signature Verification Bypass

CVE-2026-122320 - Kyverno before 1.19.2 Cross-Namespace Resource Read via generate.clone

CVE-2026-122319 - Kyverno before 1.19.2 Denial of Service via In/NotIn Operator Panic

CVE-2026-122316 - Kyverno 1.17.0 before 1.19.2 Cross-Namespace Write via NamespacedMutatingPolicy mutateExisting