> CVE-2026-4789

« BACK_TO_HOME
PUBLISHED
2026-03-30 21:17
MODIFIED
2026-03-30 21:17
EPSS (Prob. Exploit)
0.71%
Top 46.3%
DATA SOURCES:
NVD 🔗 2026-03-30 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-10-28 OSV 🔗 2026-11-01

> DESCRIPTION

Kyverno, versions 1.16.0 and later, are vulnerable to SSRF due to unrestricted CEL HTTP functions.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-9qf2-26p9-2q2q CRITICAL

Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints

AFFECTED PACKAGES:
MAVEN / org.springframework:spring-webflux
>= 7.0.0, <= 7.0.8
Fixed in: 7.0.9
MAVEN / org.springframework:spring-webflux
>= 6.2.0, <= 6.2.19
MAVEN / org.springframework:spring-webflux
>= 6.1.0, <= 6.1.28
MAVEN / org.springframework:spring-webflux
>= 6.0.0, <= 6.0.30
MAVEN / org.springframework:spring-webflux
>= 5.3.0, <= 5.3.49
MAVEN / org.springframework:spring-webflux
>= 5.2.5.RELEASE, <= 5.2.25.RELEASE

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

CVE-2026-4789

AFFECTED PACKAGES:
Unknown / Unknown
4 versions affected
ALIASES:
BIT-kyverno-2026-4789, GHSA-rggm-jjmc-3394, GO-2026-5621

> HISTORIQUE DES MODIFICATIONS

Première apparition
30/03/2026 21:17
Source: NVD
Total des modifications: 0 Dernière mise à jour: 7 months ago

> REFERENCES

https://github.com/kyverno/kyverno
https://kb.cert.org/vuls/id/655822
https://portswigger.net/web-security/ssrf
« BACK_TO_HOME