CVE-2026-4789

CVE-2026-4789

Critical · published March 30, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
50.7
In the wild
Unconfirmed
What it is

Kyverno, versions 1.16.0 and later, are vulnerable to SSRF due to unrestricted CEL HTTP functions.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00653 · 50.7th percentile
Published
2026-03-30T20:44Z
EPSS history
Timeline
  • 30 MAR 20:44Z
    CVE-2026-4789
    cvelistv5