Skip to content

CVE record · 1 source

CVE-2026-122318

CVSS 7.7

Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and subjectRegExp checks when the…

Vendor: Kyverno
Product: kyverno
CVSS v3.1: 7.7 AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L
Weakness: CWE-295

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

25

CVE NVD 20h ago

Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and subjectRegExp checks when the…

Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and subjectRegExp checks when the signing certificate has no Subject Alternative Name. Attackers holding a leaf…

CVSS 7.7 CVE-2026-122318 Kyverno