CVE-2026-100705
Kyverno before 1.19.1 SSRF via legacy apiCall service executor
CVSS score
8.3
EPSS probability
%0.2
Risk score
0.0
Published
19 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.4
CVE-2026-100706
kyverno before 1.19.1 Privilege Escalation via Policy apiCall urlPath
K
Patch status unknownEPSS %1
9.6
CVE-2026-54523
Kyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system
K
Patch status unknownEPSS %0
8.3
CVE-2026-100707
Kyverno before 1.19.1 Namespace Isolation Bypass via Percent-Encoded Path
K
Patch status unknownEPSS %0
8.3
CVE-2026-84195
Kyverno before 1.16.4 Credential Leak via apiCall
K
Patch status unknownEPSS %0
8.3
CVE-2026-84196
Kyverno before 1.18.0 Server-Side Request Forgery via apiCall
K
Patch status unknownEPSS %0
9.4
CVE-2026-84200
Kyverno before v1.13.0 Policy Bypass via Multiple Exceptions
K
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-100705"