CVE Watch2 nov 2026

CVE-2026-120656

OpenKruise kruise-manager exposes an unauthenticated ppof endpoint when enabled, opening it on 0.0.0.0:8090, which can enable a DoS attack t

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 2 nov 2026 · Última mod.: 2 nov 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

OpenKruise kruise-manager exposes an unauthenticated ppof endpoint when enabled, opening it on 0.0.0.0:8090, which can enable a DoS attack triggerable by any RBAC pod.

Referencias oficiales

github.comhttps://github.com/openkruise/kruise/pull/2613
github.comhttps://github.com/openkruise/kruise/releases/tag/v1.9.2
github.comhttps://github.com/tommitelman-orca/advisories/blob/main/openkruise-pprof-2026.md

CVEs relacionados

Sin CVEs relacionados por CWE o producto.