Threats Tagged 'cve-2026-12564'
View all threats tagged with 'cve-2026-12564'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-12564'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-12564: Server-Side Request Forgery (SSRF) in Red Hat Red Hat Ansible Automation Platform 2CVE-2026-12564 0 CVE-2026-12564 is a critical Server-Side Request Forgery (SSRF) vulnerability in the HashiCorp Vault credential plugin of Red Hat Ansible Automation Platform 2. The vulnerability allows an authenticated attacker with credential-creation privileges to exfiltrate the Kubernetes service account token from the controller pod. This token grants Kubernetes API access with full pod CRUD and secret read permissions, including sensitive credentials such as database passwords and the Django SECRET_KEY. The flaw affects all AAP Controller deployments using the hashivault credential plugin with kubernetes_role authentication. Mitigations include restricting network egress from controller pods, limiting RBAC permissions, auditing credential creation, monitoring Kubernetes audit logs, rotating tokens if compromise is suspected, and restricting credential creation privileges until a fix is available. Join the discussion | CVE Database V5 | 08/18/2026, 15:50:54 UTC Added: 08/18/2026, 16:06:11 UTC |
Showing 1 to 1 of 1 result