The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Additionally, an attacker who is able to patch the status (which is considered a privileged operation and should not typically be granted to users) of a LoadBalancer service can set the status.loadBalancer.ingress.ip to similar effect.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade kubernetes | Jul 28, 2026 | Jul 28, 2026 |
| Oracle_linux | — | Upgrade kata-imageUpgrade kubectlUpgrade olcne-prometheus-chartUpgrade kata-shimUpgrade olcne-agentUpgrade olcne-utilsUpgrade olcne-api-serverUpgrade kataUpgrade kata-ksm-throttlerUpgrade olcne-istio-chartUpgrade kata-runtimeUpgrade olcne-nginxUpgrade olcnectlUpgrade kubeadmUpgrade kata-proxyUpgrade kubeletUpgrade kata-agent | Feb 11, 2021 | Jan 21, 2021 |
| Redhat Openshift | — | Upgrade atomic-openshift | Jan 21, 2021 | Dec 7, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 21, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub