Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
Kubernetes CVE-2026-116472
A security issue was discovered in ingress-nginx where a user with permission to create an Ingress may be able to cause denial of service of the ingress-nginx d
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
Kubernetes CVE-2026-76654
An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a symbolic link that points to an attacker-co
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Kubernetes CVE-2026-2270
A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions on StatefulSet and ControllerRevision o
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit