CVE Daily – cert-manager https://cvedaily.com/pages/tags/cert-manager.html CVE Daily – cert-manager en Wed, 03 Jun 2026 21:26:56 +0000 [Medium] CVE-2026-39350 – Istio is an open platform to connect, manage, and secure microservices. In versi... https://nvd.nist.gov/vuln/detail/CVE-2026-39350 https://nvd.nist.gov/vuln/detail/CVE-2026-39350 Wed, 15 Apr 2026 23:16:09 +0000 Medium CVE-2026-39350

Istio is an open platform to connect, manage, and secure microservices. In versions 1.25.0 through 1.27.8, 1.28.0 through 1.28.5, 1.29.0, and 1.29.1, the serviceAccounts and notServiceAccounts fields in AuthorizationPolicy incorrectly interpret dots (.) as a regular expression matcher. Because . is a valid character in a service account name, an AuthorizationPolicy ALLOW rule targeting a service…

CVSS: 5.4 · CWE: CWE-185

View on NVD

]]> [Medium] CVE-2026-25518 – cert-manager adds certificates and certificate issuers as resource types in Kube... https://nvd.nist.gov/vuln/detail/CVE-2026-25518 https://nvd.nist.gov/vuln/detail/CVE-2026-25518 Wed, 04 Feb 2026 22:15:58 +0000 Medium CVE-2026-25518

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. In versions from 1.18.0 to before 1.18.5 and from 1.19.0 to before 1.19.3, the cert-manager-controller performs DNS lookups during ACME DNS-01 processing (for zone discovery and propagation self-checks). By default, these…

CVSS: 5.9 · CWE: CWE-129

View on NVD

]]> [Medium] CVE-2024-12401 – A flaw was found in the cert-manager package. This flaw allows an attacker who c... https://nvd.nist.gov/vuln/detail/CVE-2024-12401 https://nvd.nist.gov/vuln/detail/CVE-2024-12401 Thu, 12 Dec 2024 09:15:05 +0000 Medium CVE-2024-12401

A flaw was found in the cert-manager package. This flaw allows an attacker who can modify PEM data that the cert-manager reads, for example, in a Secret resource, to use large amounts of CPU in the cert-manager controller pod to effectively create a denial-of-service (DoS) vector for the cert-manager in the cluster.

CVSS: 4.4 · CWE: CWE-20

View on NVD

]]> [High] CVE-2024-36537 – Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitiv... https://nvd.nist.gov/vuln/detail/CVE-2024-36537 https://nvd.nist.gov/vuln/detail/CVE-2024-36537 Wed, 24 Jul 2024 19:15:04 +0000 High CVE-2024-36537

Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

CVSS: 7.2 · CWE: CWE-284

View on NVD

]]> [Critical] CVE-2024-28718 – An issue in OpenStack magnum yoga-eom version allows a remote attacker to execut... https://nvd.nist.gov/vuln/detail/CVE-2024-28718 https://nvd.nist.gov/vuln/detail/CVE-2024-28718 Fri, 12 Apr 2024 13:15:15 +0000 Critical CVE-2024-28718

An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the cert_manager.py. component.

CVSS: 9.8 · CWE: CWE-367

View on NVD

]]> [Medium] CVE-2023-39002 – A cross-site scripting (XSS) vulnerability in the act parameter of system_certma... https://nvd.nist.gov/vuln/detail/CVE-2023-39002 https://nvd.nist.gov/vuln/detail/CVE-2023-39002 Wed, 09 Aug 2023 19:15:14 +0000 Medium CVE-2023-39002

A cross-site scripting (XSS) vulnerability in the act parameter of system_certmanager.php in OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]>