Topic

Kubernetes: news, advisories and analysis

12 articlesUpdated 10 Oct 2026

CyberSecureToday covers Kubernetes across 12 articles published between 16 Sep 2026 and 10 Oct 2026. The coverage includes 11 vulnerability advisories and 1 analysis or guidance piece. 11 advisories are rated critical or high severity.

Stories on Kubernetes most often intersect with Cloud Security, Container Security and GKE, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Azure Kubernetes Service Cilium eBPF Network Policy Engine Memory Corruption Flaw Enables Host Kernel Escape”, was published 10 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSCritical
Azure Kubernetes Service Cilium eBPF Network Policy Engine Memory Corruption Flaw Enables Host Kernel Escape
A high-severity memory corruption flaw in Azure Kubernetes Service's Cilium eBPF dataplane allows unprivileged pods to compromise Linux worker nodes.
CST Editorial Desk10 Oct 20268 min read
ThreatsCloud & SaaSCritical
Dell Container Storage Modules Flaws Expose Storage Admin Credentials Without Authentication
Dell DSA-2026-448 fixes two CVSS 10 missing-authentication flaws in Container Storage Modules that expose storage admin credentials. Upgrade CSM to 1.18.0.
Aisha Noor4 Oct 20265 min read
ThreatsCloud & SaaSCritical
SUSE Rancher Flaw Lets Unauthenticated Attackers Plant Login-Page Script and Seize Kubernetes Fleets (CVE-2026-88804)
SUSE Rancher CVE-2026-88804 (CVSS 9.6) lets unauthenticated attackers rewrite UI settings, plant login-page script and take over managed Kubernetes clusters.
Aisha Noor3 Oct 20265 min read
ThreatsCloud & SaaSCritical
Kubernetes MCP Server Structured Tool Argument Injection Exposes Cluster Service Credentials (CVE-2026-61459)
A critical flaw in Model Context Protocol (MCP) Kubernetes bridge servers allows attackers to inject malicious flags into kubectl tool calls, exposing cluster service tokens.
CST Editorial Desk30 Sep 202611 min read
ThreatsCloud & SaaSCritical
Microsoft Azure Arc Confused Deputy Flaw Enables Privilege Escalation Across Hybrid Clusters
Microsoft discloses critical CVSS 10.0 flaw CVE-2026-69399 in Azure Arc, enabling unauthenticated attackers to exploit confused deputy proxies across hybrid cloud nodes.
Daniel Okafor25 Sep 202618 min read
ThreatsCloud & SaaSHigh
Google Kubernetes Engine Container Escape Vulnerability Enables Node Compromise Across Multi-Tenant Clusters
Google Cloud discloses and mitigates a high-severity container escape flaw in GKE node kernels, preventing unprivileged workloads from compromising host nodes.
Aisha Noor24 Sep 202617 min read
ThreatsCloud & SaaSHigh
ORAS-Go Symlink Path Traversal Flaw Opens OCI Artifact Supply Chain to Compromise
A high-severity CVSS 8.8 path traversal vulnerability in oras-go allows malicious OCI container artifacts to escape extraction roots and execute arbitrary code.
CST Editorial Desk23 Sep 202616 min read
ThreatsCloud & SaaSCritical
Google Cloud Patches Critical GKE Multi-Cloud Flaw Enabling Cross-Project Cluster Hijack and Service Account Impersonation
Google Cloud remediates critical GCP-2026-058 flaw in GKE Multi-Cloud APIs where missing project checks enabled unauthorized cluster registration and IAM impersonation.
CST Editorial Desk23 Sep 202616 min read
ThreatsCloud & SaaSHigh
containerd CRI Checkpoint Flaw CVE-2026-50195 Enables Local Node Image Cache Poisoning Across Kubernetes Clusters
High-severity vulnerability CVE-2026-50195 in containerd allows privileged containers to poison the host image cache via CRI Checkpoint API tar archive injection.
Aisha Noor21 Sep 202615 min read
ThreatsCloud & SaaSHigh
Azure Kubernetes Service Container Path Traversal Flaw Enables Node Escape and Code Execution
Microsoft patches high-severity vulnerability CVE-2026-32193 in Azure Kubernetes Service allowing container workloads to escape sandboxes via path traversal.
Priya Raman19 Sep 202611 min read
ThreatsCloud & SaaSCritical
Amazon EKS Network Policy Agent Flaw Allows Pod Isolation Bypass Across Kubernetes Clusters
AWS patches high-severity flaw CVE-2026-86831 in Amazon EKS aws-network-policy-agent allowing unauthorized pod communication and network isolation bypass.
Daniel Okafor19 Sep 202611 min read
InsightsCloud & SaaS
Google Cloud GKE Workload Identity Privilege Escalation: Cloud Threat Forensics & Hardening
Technical analysis of Google Cloud Platform (GCP) Kubernetes Workload Identity metadata impersonation vectors, token theft forensics, and enterprise IAM hardening.
Mei-Lin Chen16 Sep 202612 min read