CVE Watch2 de nov. de 2026

CVE-2026-113951

If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential plugin in /etc/kubernetes

CVSS

7.8

Alta

EPSS

0.2%

p10

KEV

—

Exploit Today

0-100

Publicado: 23 de out. de 2026 · Última mod.: 2 de nov. de 2026 · CWE-276

EPSS · 30d

0.2%EPSS · 30 dias0.3%

2026-10-252026-11-07

Descrição técnica

If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential plugin in /etc/kubernetes/admin.conf. kubectl will run that plugin as the macOS host user the next time someone pulls the cluster's kubeconfig onto the host with container k8s write-config or create and then runs kubectl against it — turning filesystem access inside an untrusted Linux container into arbitrary command execution on the host. This vulnerability is addressed in Container version 1.5.0.

Referências oficiais

github.comhttps://github.com/apple/container/security/advisories/GHSA-44v5-vx46-ghv6

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-1235055.5 MÉD

—

———Vikunja before 2.7.1 contains an insecure file permissions vulnerability that allows local users to read stored data because localStorage.Write creates blobs world-readable. Local attackers on a shared host can read attachments, project backgrounds and exports, and copy the SQLite database to crack password hashes offline.15h CVE-2026-1235006.2 MÉD

—

———Vikunja before 2.7.1 contains an insecure file permissions vulnerability that allows local users to read dump archives created with umask permissions by the vikunja dump command. Local attackers on a shared host can read the world-readable zip in the rootpath to obtain config, password hashes, TOTP secrets, tokens, and stored files.15h CVE-2026-448757.8 ALT

2.8%

——1In HPE Cray Programming Environment versions 25.03 and 25.09, prior to 26.03, the method that CPE is deployed on HPCM potentially allows elevated access by a local unprivileged user.3d CVE-2026-94460—

8.1%

——2IRISPowerscan contain an insecure default configuration where the built-in installation account is assigned elevated privileges with a predictable password, which could allow an unauthenticated attacker to gain unauthorised access to privileged application functionality.4d CVE-2026-163057.8 ALT

7.8%

——2Local privilege escalation in `SmartUpdate.exe` and `SmartExecute.exe` in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a local low-privileged attacker to execute arbitrary commands with administrator privileges via modification of a world-writable `execlist.txt` command manifest that is processed during application updates.2d CVE-2026-918957.1 ALT

1.6%

——0Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Tampering.5d