The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Additionally, an attacker who is able to patch the status (which is considered a privileged operation and should not typically be granted to users) of a LoadBalancer service can set the status.loadBalancer.ingress.ip to similar effect.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade kubernetes | Jul 28, 2026 | Jul 28, 2026 |
| Oracle_linux | — | Upgrade kubectlUpgrade kata-shimUpgrade olcne-istio-chartUpgrade olcne-utilsUpgrade kataUpgrade olcne-agentUpgrade kata-runtimeUpgrade olcne-prometheus-chartUpgrade kata-ksm-throttlerUpgrade olcne-api-serverUpgrade kata-imageUpgrade kubeadmUpgrade kata-proxyUpgrade kata-agentUpgrade kubeletUpgrade olcne-nginxUpgrade olcnectl | Feb 11, 2021 | Jan 21, 2021 |
| Redhat Openshift | — | Upgrade atomic-openshift | Jan 21, 2021 | Dec 7, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 21, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub