Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, a low-privilege developer who could create a KubernetesWatchTrigger (KWT) in their own namespace was able to establish a persistent surveillance channel over any other namespace. This issue has been patched in version 1.24.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🔴 Fission KubernetesWatchTrigger, Improper Access Control, #CVE-2026-49822 (HIGH) -DC-Jun2026-751 https://dailycve.com/fission-kuberneteswatchtrigger-improper-access-control-cve-2026-49822-high-dc-jun2026-751/
Post summary
The post announces CVE‑2026‑49822, noting an Improper Access Control flaw rated HIGH, but provides no additional details such as a PoC, exploit tool, or mitigation.