Threats tagged 'ghsa-hfc3-r2m8-qf97'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-120656OpenKruise kruise-manager exposes an unauthenticated ppof endpoint when enabled, opening it on 0.0.0.0:8090, which can High2026-11-02GCVE DatabaseCVE-2026-120656 OpenKruise's kruise-manager component exposes an unauthenticated ppof endpoint on all network interfaces (0.0.0.0) at port 8090 when enabled. This exposure allows any pod with RBAC permissions to trigger a denial-of-service (DoS) attack against the service. Report on CVE-2026-120656 Vulnerability #ghsa-hfc3-r2m8-qf97	GCVE Database	2026-11-02

Page 1 of 1