CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products

Kubevirt — security advisories

5 advisories1 sourcelatest 2026-06-09⚡ RSS feed

Every advisory CSIRTS.com has correlated to Kubevirt, newest first — across national CERTs, vendor PSIRTs and vulnerability databases.

⚡ Watch Kubevirt

Get an email when a new Kubevirt advisory drops — max one per day, one-click unsubscribe.

CVE-2026-13201: Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption

mediumCVSS 6.3CVE-2026-13201msrc2026-06-09

CVE-2026-13218: Kubevirt: kubevirt: symlink following in writetocachedfile allows host file overwrite from virt-launcher

mediumCVSS 4.2CVE-2026-13218msrc2026-06-09

CVE-2026-13322: Kubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of service

lowCVSS 3.8CVE-2026-13322msrc2026-06-09

CVE-2026-13208: Kubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request body

mediumCVSS 6.5CVE-2026-13208msrc2026-06-09

CVE-2026-13318: Virt-api-rhel9: kubevirt: kubevirt: ssrf in virt-api port-forward via unvalidated guest-agent-reported ip

mediumCVSS 6.4CVE-2026-13318msrc2026-06-09

Kubevirt security advisories · CSIRTS