Kyverno

4 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-23881 HIGH POC PATCH This Week

Kyverno versions up to 1.16.3 is affected by allocation of resources without limits or throttling (CVSS 7.7).

Denial Of Service Kyverno Suse

NVD GitHub

CVSS 3.1

7.7

EPSS

0.1%

CVE-2026-22039 CRITICAL POC PATCH Act Now

Kyverno Kubernetes policy engine prior to 1.x has a privilege escalation vulnerability (CVSS 9.9) allowing policy bypass and unauthorized cluster operations.

Kubernetes Kyverno Suse

NVD GitHub

CVSS 3.1

9.9

EPSS

0.1%

CVE-2025-46342 HIGH POC PATCH This Week

Kyverno is a policy engine designed for cloud native platform engineering teams. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.

Kubernetes Authentication Bypass Kyverno Suse

NVD GitHub

CVSS 3.1

8.5

EPSS

0.3%

CVE-2025-29778 MEDIUM POC PATCH This Month

Kyverno is a policy engine designed for cloud native platform engineering teams. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable. Public exploit code available.

Authentication Bypass Kubernetes Kyverno Suse

NVD GitHub

CVSS 3.1

5.8

EPSS

0.1%

CVE-2026-23881

EPSS 0% CVSS 7.7

HIGH POC PATCH This Week

Kyverno versions up to 1.16.3 is affected by allocation of resources without limits or throttling (CVSS 7.7).

Denial Of Service Kyverno Suse

NVD GitHub

CVE-2026-22039

EPSS 0% CVSS 9.9

CRITICAL POC PATCH Act Now

Kyverno Kubernetes policy engine prior to 1.x has a privilege escalation vulnerability (CVSS 9.9) allowing policy bypass and unauthorized cluster operations.

Kubernetes Kyverno Suse

NVD GitHub

CVE-2025-46342

EPSS 0% CVSS 8.5

HIGH POC PATCH This Week

Kyverno is a policy engine designed for cloud native platform engineering teams. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.

Kubernetes Authentication Bypass Kyverno +1

NVD GitHub

CVE-2025-29778

EPSS 0% CVSS 5.8

MEDIUM POC PATCH This Month

Kyverno is a policy engine designed for cloud native platform engineering teams. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable. Public exploit code available.

Authentication Bypass Kubernetes Kyverno +1

NVD GitHub