Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 1.6.15, the SSO configuration API endpoints are exposed on the same public routing boundary as the SSO login and callback endpoints, so SSO, OIDC, and SAML management operations can be reached without administrator authorization. Because reading, creating, and updating the global SSO configuration is not restricted to administrators, an unauthorized or low-privileged user can inspect or alter the authentication configuration, which under certain conditions can lead to account takeover or privilege escalation. The SSO connectivity-test function can additionally be abused as a server-side request forgery primitive, and the user list API returns user objects without consistently clearing authentication-related fields. This issue is fixed in version 2.0.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-27 | 4 | Disclosure2Exploit1Patch1 |
| 2026-08-28 | 1 | General1 |
| 2026-09-01 | 1 | Patch1 |
⚠️ Vulnerabilidad en productos Kubernetes ❗ CVE-2026-65956 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-en-productos-kubernetes-2/ https://t.co/CAQZFXzc95
Post summary
The post merely alerts to a Kubernetes vulnerability (CVE-2026-65956) and directs readers to an external link for details, without disclosing exploitation methods or mitigations.
[CVE] CVE-2026-65956 [HIGH PRIORITY] #KubePi: Unauthenticated SSO/OIDC configuration allows admin account takeover ... 🔗 https://exploitgrid.net/cve/CVE-2026-65956
Post summary
The post announces a new KubePi vulnerability (CVE‑2026‑65956) that lets attackers impersonate an admin via misconfigured SSO/OIDC, marking it as high priority and providing a link that likely contains further details or a PoC.
🛡️ ExploitGrid Daily Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2026-60004 - EXPLOIT CVE-2026-65956 CVE-2026-77537 CVE-2026-77550 CVE-2026-77554 ..🧵👇
Post summary
The digest lists several CVEs and labels CVE‑2026‑60004 as an exploit, but it does not provide PoC details, exploitation methods, patches, or technical specifics.
☸️ KubePi CVE-2026-65956: unauthenticated SSO/OIDC config API endpoints expose full admin account takeover + SSRF. CVSS 10. Affects v1.6.15 and below. Upgrade to v2.0.0 now. #cybersecurity #ciso #cto #kubernetes #vulnerabilities https://secalerts.co/vulnerability/CVE-2026-65956?utm_campaign=x https://t.co/h3HLBEVeza
Post summary
The tweet announces CVE-2026-65956, a critical SSO/OIDC API flaw enabling admin takeover and SSRF, and urges upgrading to v2.0.0 for remediation.
🚨 Ransomware groups Qilin and Lockbit5 are active, targeting organizations like SCA Logistik & Fulfillment GmbH and Displaydata. Patch high-severity vulnerabilities like CVE-2026-77537 and CVE-2026-65956 to prevent exploitation #ThreatIntel #Ransomware https://pranithjain.qzz.io/threatintel/telegram?tab=firehose
Post summary
The message urges patching CVE‑2026‑77537 and CVE‑2026‑65956 to mitigate potential ransomware exploitation.
CVE-2026-65956 KubePi SSO Configuration API Allows Account Takeover and Privilege Escalation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-65956
Post summary
A new vulnerability, CVE-2026-65956, affecting KubePi's SSO Configuration API has been identified, enabling account takeover and privilege escalation, with no further details on exploitation or remediation provided.