CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

Kubevirt — security advisories

5 advisorieslatest 2026-06-09⚡ RSS feed

Tracked Kubevirt products:

Kubevirt virt-handler

⚡ Watch Kubevirt

Get an email when a new Kubevirt advisory drops — max one per day, one-click unsubscribe.

CVE-2026-13201: Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption

mediumCVSS 6.3CVE-2026-13201msrc2026-06-09

CVE-2026-13218: Kubevirt: kubevirt: symlink following in writetocachedfile allows host file overwrite from virt-launcher

mediumCVSS 4.2CVE-2026-13218msrc2026-06-09

CVE-2026-13325: Virt-handler-rhel9: kubevirt: kubevirt: disabletls migration setting removes authentication, exposing unauthenticated virtqemud proxy on all interfaces

highCVSS 8.5CVE-2026-13325msrc2026-06-09

CVE-2026-13322: Kubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of service

lowCVSS 3.8CVE-2026-13322msrc2026-06-09

CVE-2026-13208: Kubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request body

mediumCVSS 6.5CVE-2026-13208msrc2026-06-09