CyberSecBulletin

Cloudark vulnerabilities

We track 2 vulnerabilities in Cloudark products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 13, 2026.

2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score

Latest Cloudark vulnerabilities

  • 8.8 High severity

    Kubeplus: Improper Control of Generation of Code

    CVE-2026-29955CloudarkEPSS 2.22%

    The `/registercrd` endpoint in KubePlus 4.14 in the kubeconfiggenerator component is vulnerable to command injection. The component uses `subprocess.Popen()` with `shell=True` parameter to execute shell commands, and the user-supplied `chartName` parameter is

  • 7.6 High severity

    Kubeplus: Improper Neutralization of Argument Delimiters in a Command

    CVE-2026-29954Cloudark

    In KubePlus 4.1.4, the mutating webhook and kubeconfiggenerator components have an SSRF vulnerability when processing the chartURL field of ResourceComposition resources. The field is only URL-encoded without validating the target address. More critically, whe