CVE-2026-122315High· 7.5▾ TwilightKyverno before 1.19.2 contains an unchecked type assertion in buildStatementMap that allows unauthenticated attackers to crash the policy engine via crafted attestation statements. Attackers can push an OCI referrer manifest with a non-s…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Kyverno before 1.19.2 contains an unchecked type assertion in buildStatementMap that allows unauthenticated attackers to crash the policy engine via crafted attestation statements. Attackers can push an OCI referrer manifest with a non-string type field to bypass image verification under failurePolicy Ignore or crash-loop the reports-controller.
kyverno < 1.19.2Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-122314High· 7.5Kyverno before 1.19.2 Denial of Service via Shallow Variable Substitution Panic
CVE-2026-122323High· 7.5Kyverno 1.11.0 before 1.19.2 Memory Exhaustion via Notary Signature Decompression
CVE-2026-122319High· 7.5Kyverno before 1.19.2 Denial of Service via In/NotIn Operator Panic
CVE-2026-122321Critical· 9.1Kyverno 1.18.0 before 1.19.2 verifyImages Cache Signature Verification Bypass
CVE-2026-122318High· 7.7Kyverno before 1.19.2 Cosign Identity Check Bypass via Empty SAN Certificates
CVE-2026-122316High· 8.5Kyverno 1.17.0 before 1.19.2 Cross-Namespace Write via NamespacedMutatingPolicy mutateExisting