If you learned from my posts, inspired, or encouraged to grow in the cybersecurity and digital forensics, I would really appreciate your vote and support - Husam Shbib!
MyCyberNews

Search

Find merged stories by title or summary.

Vulnerabilities & Patches
Emerging1 src

CVE-2026-73843 - OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs

CVE ID : CVE-2026-73843 Published : Aug. 13, 2026, 10:17 p. m. • 48 minutes ago Description : OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1. 0. 2 and 1. 1. 2, internal/cluster-gateway/server. go served caller-facing management APIs on the externally reachable agent listener without authentication, allowing network-reachable attackers to invoke /api/proxy/ and /api/exec/ operations, proxy the data-plane Kubernetes API, and execute commands in workload pods in multi-cluster deployments. This issue is fixed in versions 1. 0. 2 and 1. 1. 2. Severity: 9.6 • CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

·CVEFeed
Read →

You've reached the end of current stories for this search.