{
  "document" : {
    "aggregate_severity" : {
      "text" : "hoch"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "Kyverno ist eine Open-Source-Richtlinien-Engine für Kubernetes, die Richtlinien als Code validiert, mutiert und generiert.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein Angreifer kann mehrere Schwachstellen in Kyverno ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren und um Sicherheitsvorkehrungen zu umgehen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Linux\n- UNIX",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-4096 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-4096.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-4096 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4096"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-24cc-9745-hxfc vom 2026-10-21",
      "url" : "https://github.com/kyverno/kyverno/security/advisories/GHSA-24cc-9745-hxfc"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-338x-hgrv-626h vom 2026-10-21",
      "url" : "https://github.com/kyverno/kyverno/security/advisories/GHSA-338x-hgrv-626h"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-3f2c-hfj8-542w vom 2026-10-21",
      "url" : "https://github.com/kyverno/kyverno/security/advisories/GHSA-3f2c-hfj8-542w"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-3xfv-vq8x-qhg4 vom 2026-10-21",
      "url" : "https://github.com/kyverno/kyverno/security/advisories/GHSA-3xfv-vq8x-qhg4"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-493q-9xvg-9xf3 vom 2026-10-21",
      "url" : "https://github.com/kyverno/kyverno/security/advisories/GHSA-493q-9xvg-9xf3"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-4pqm-wqq6-h9q2 vom 2026-10-21",
      "url" : "https://github.com/kyverno/kyverno/security/advisories/GHSA-4pqm-wqq6-h9q2"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-5gq8-3xxc-jm92 vom 2026-10-21",
      "url" : "https://github.com/kyverno/kyverno/security/advisories/GHSA-5gq8-3xxc-jm92"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-8mrj-27wr-599g vom 2026-10-21",
      "url" : "https://github.com/kyverno/kyverno/security/advisories/GHSA-8mrj-27wr-599g"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-f96w-622v-rqpq vom 2026-10-21",
      "url" : "https://github.com/kyverno/kyverno/security/advisories/GHSA-f96w-622v-rqpq"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-fcfr-fr8g-qjqv vom 2026-10-21",
      "url" : "https://github.com/kyverno/kyverno/security/advisories/GHSA-fcfr-fr8g-qjqv"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-fr24-3hvf-393q vom 2026-10-21",
      "url" : "https://github.com/kyverno/kyverno/security/advisories/GHSA-fr24-3hvf-393q"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-h3pm-q9ww-f439 vom 2026-10-21",
      "url" : "https://github.com/kyverno/kyverno/security/advisories/GHSA-h3pm-q9ww-f439"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-hg5v-hwm3-956r vom 2026-10-21",
      "url" : "https://github.com/kyverno/kyverno/security/advisories/GHSA-hg5v-hwm3-956r"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-jcw5-3wcg-fqx5 vom 2026-10-21",
      "url" : "https://github.com/kyverno/kyverno/security/advisories/GHSA-jcw5-3wcg-fqx5"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-m8p2-qqmx-j53x vom 2026-10-21",
      "url" : "https://github.com/kyverno/kyverno/security/advisories/GHSA-m8p2-qqmx-j53x"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-p58h-r4j3-h5vx vom 2026-10-21",
      "url" : "https://github.com/kyverno/kyverno/security/advisories/GHSA-p58h-r4j3-h5vx"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-pcx2-xcq4-65vf vom 2026-10-21",
      "url" : "https://github.com/kyverno/kyverno/security/advisories/GHSA-pcx2-xcq4-65vf"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-qc9c-3fgf-cgq8 vom 2026-10-21",
      "url" : "https://github.com/kyverno/kyverno/security/advisories/GHSA-qc9c-3fgf-cgq8"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-r2p2-3892-5jjf vom 2026-10-21",
      "url" : "https://github.com/kyverno/kyverno/security/advisories/GHSA-r2p2-3892-5jjf"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-rcxg-3f92-3mgr vom 2026-10-21",
      "url" : "https://github.com/kyverno/kyverno/security/advisories/GHSA-rcxg-3f92-3mgr"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-vm98-8c25-h274 vom 2026-10-21",
      "url" : "https://github.com/kyverno/kyverno/security/advisories/GHSA-vm98-8c25-h274"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-x4xq-p8g4-6fwg vom 2026-10-21",
      "url" : "https://github.com/kyverno/kyverno/security/advisories/GHSA-x4xq-p8g4-6fwg"
    } ],
    "source_lang" : "en-US",
    "title" : "Kyverno: Mehrere Schwachstellen",
    "tracking" : {
      "current_release_date" : "2026-11-04T23:00:00.000+00:00",
      "generator" : {
        "date" : "2026-11-05T09:52:48.753+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.7.0"
        }
      },
      "id" : "WID-SEC-W-2026-4096",
      "initial_release_date" : "2026-10-21T22:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-10-21T22:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      }, {
        "date" : "2026-11-04T23:00:00.000+00:00",
        "number" : "2",
        "summary" : "Referenz(en) aufgenommen: CVE-2026-122319, EUVD-2026-117229, CVE-2026-122303, EUVD-2026-117214, CVE-2026-122312, EUVD-2026-117223, CVE-2026-122313, EUVD-2026-117224, CVE-2026-122314, EUVD-2026-117225, CVE-2026-122316, EUVD-2026-117227, CVE-2026-122320, EUVD-2026-117230, CVE-2026-122311, EUVD-2026-117222, CVE-2026-122304, EUVD-2026-117215, CVE-2026-122305, EUVD-2026-117216, CVE-2026-122308, EUVD-2026-117219, CVE-2026-122309, EUVD-2026-117220, CVE-2026-122310, EUVD-2026-117221, CVE-2026-122315, EUVD-2026-117226, CVE-2026-122318, EUVD-2026-117228, CVE-2026-122306, EUVD-2026-117217, CVE-2026-122307, EUVD-2026-117218, CVE-2026-122323, EUVD-2026-117233, CVE-2026-122322, EUVD-2026-117232"
      } ],
      "status" : "final",
      "version" : "2"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<1.19.2",
          "product" : {
            "name" : "Open Source Kyverno <1.19.2",
            "product_id" : "T061707"
          }
        }, {
          "category" : "product_version",
          "name" : "1.19.2",
          "product" : {
            "name" : "Open Source Kyverno 1.19.2",
            "product_id" : "T061707-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:kyverno:kyverno:1.19.2"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Kyverno"
      } ],
      "category" : "vendor",
      "name" : "Open Source"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-122303",
    "product_status" : {
      "known_affected" : [ "T061707" ]
    },
    "release_date" : "2026-10-21T22:00:00.000+00:00",
    "title" : "CVE-2026-122303"
  }, {
    "cve" : "CVE-2026-122304",
    "product_status" : {
      "known_affected" : [ "T061707" ]
    },
    "release_date" : "2026-10-21T22:00:00.000+00:00",
    "title" : "CVE-2026-122304"
  }, {
    "cve" : "CVE-2026-122305",
    "product_status" : {
      "known_affected" : [ "T061707" ]
    },
    "release_date" : "2026-10-21T22:00:00.000+00:00",
    "title" : "CVE-2026-122305"
  }, {
    "cve" : "CVE-2026-122306",
    "product_status" : {
      "known_affected" : [ "T061707" ]
    },
    "release_date" : "2026-10-21T22:00:00.000+00:00",
    "title" : "CVE-2026-122306"
  }, {
    "cve" : "CVE-2026-122307",
    "product_status" : {
      "known_affected" : [ "T061707" ]
    },
    "release_date" : "2026-10-21T22:00:00.000+00:00",
    "title" : "CVE-2026-122307"
  }, {
    "cve" : "CVE-2026-122308",
    "product_status" : {
      "known_affected" : [ "T061707" ]
    },
    "release_date" : "2026-10-21T22:00:00.000+00:00",
    "title" : "CVE-2026-122308"
  }, {
    "cve" : "CVE-2026-122309",
    "product_status" : {
      "known_affected" : [ "T061707" ]
    },
    "release_date" : "2026-10-21T22:00:00.000+00:00",
    "title" : "CVE-2026-122309"
  }, {
    "cve" : "CVE-2026-122310",
    "product_status" : {
      "known_affected" : [ "T061707" ]
    },
    "release_date" : "2026-10-21T22:00:00.000+00:00",
    "title" : "CVE-2026-122310"
  }, {
    "cve" : "CVE-2026-122311",
    "product_status" : {
      "known_affected" : [ "T061707" ]
    },
    "release_date" : "2026-10-21T22:00:00.000+00:00",
    "title" : "CVE-2026-122311"
  }, {
    "cve" : "CVE-2026-122312",
    "product_status" : {
      "known_affected" : [ "T061707" ]
    },
    "release_date" : "2026-10-21T22:00:00.000+00:00",
    "title" : "CVE-2026-122312"
  }, {
    "cve" : "CVE-2026-122313",
    "product_status" : {
      "known_affected" : [ "T061707" ]
    },
    "release_date" : "2026-10-21T22:00:00.000+00:00",
    "title" : "CVE-2026-122313"
  }, {
    "cve" : "CVE-2026-122314",
    "product_status" : {
      "known_affected" : [ "T061707" ]
    },
    "release_date" : "2026-10-21T22:00:00.000+00:00",
    "title" : "CVE-2026-122314"
  }, {
    "cve" : "CVE-2026-122315",
    "product_status" : {
      "known_affected" : [ "T061707" ]
    },
    "release_date" : "2026-10-21T22:00:00.000+00:00",
    "title" : "CVE-2026-122315"
  }, {
    "cve" : "CVE-2026-122316",
    "product_status" : {
      "known_affected" : [ "T061707" ]
    },
    "release_date" : "2026-10-21T22:00:00.000+00:00",
    "title" : "CVE-2026-122316"
  }, {
    "cve" : "CVE-2026-122318",
    "product_status" : {
      "known_affected" : [ "T061707" ]
    },
    "release_date" : "2026-10-21T22:00:00.000+00:00",
    "title" : "CVE-2026-122318"
  }, {
    "cve" : "CVE-2026-122319",
    "product_status" : {
      "known_affected" : [ "T061707" ]
    },
    "release_date" : "2026-10-21T22:00:00.000+00:00",
    "title" : "CVE-2026-122319"
  }, {
    "cve" : "CVE-2026-122320",
    "product_status" : {
      "known_affected" : [ "T061707" ]
    },
    "release_date" : "2026-10-21T22:00:00.000+00:00",
    "title" : "CVE-2026-122320"
  }, {
    "cve" : "CVE-2026-122322",
    "product_status" : {
      "known_affected" : [ "T061707" ]
    },
    "release_date" : "2026-10-21T22:00:00.000+00:00",
    "title" : "CVE-2026-122322"
  }, {
    "cve" : "CVE-2026-122323",
    "product_status" : {
      "known_affected" : [ "T061707" ]
    },
    "release_date" : "2026-10-21T22:00:00.000+00:00",
    "title" : "CVE-2026-122323"
  } ]
}