跳到正文
cve.now·· 3 小时前推荐指数41

CVE-2026-121374:Checkmk Kubernetes special agent 通过 excluded node roles 实现任意文件写入与代码执行(CVSS 9.4)

CVE-2026-121374: Arbitrary file write and code execution via excluded node roles in Kubernetes special agent

AI 导读

Checkmk 的 Kubernetes special agent 存在参数注入漏洞 CVE-2026-121374(CVSS 9.4 Critical),可在至少一个文件夹中编辑规则的登录用户通过 "Exclude nodes based on their role" 规则选项构造 node roles。

来源:cve.now · cve.now