Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-122306

Kyverno before 1.19.2 contains a denial of service vulnerability that allows namespaced policy authors to exhaust admission controller CPU by submitting pathological wildcard patterns. Attackers can create a Policy with crafted match and exclude names evaluated by ValidateMatchExcludeConflict, pinning cores and causing cluster-wide webhook timeouts that block resource operations.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 23.0%
CVSS Severity
CVSS v3 Score 7.7
Products affected by CVE-2026-122306


Contact Us

Shodan ® - All rights reserved