cloudark records
2 published records for vendor cloudark.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2026-29955Proof of concept | The `/registercrd` endpoint in KubePlus 4.14 in the kubeconfiggenerator component is vulnerable to command injection.cloudark · kubeplus · CWE-94 | High8.8 | — | 2.8% | Apr 13, 2026 |
30Monitor | CVE-2026-29954Proof of concept | In KubePlus 4.1.4, the mutating webhook and kubeconfiggenerator components have an SSRF vulnerability when processing the chartURL field of cloudark · kubeplus · CWE-88 | High7.6 | — | 0.3% | Mar 30, 2026 |
- CVE-2026-2995536Monitor
The `/registercrd` endpoint in KubePlus 4.14 in the kubeconfiggenerator component is vulnerable to command injection.
HighCVSS 8.8Proof of conceptEPSS 2%cloudark · kubeplusApr 13, 2026
- CVE-2026-2995430Monitor
In KubePlus 4.1.4, the mutating webhook and kubeconfiggenerator components have an SSRF vulnerability when processing the chartURL field of
HighCVSS 7.6Proof of conceptEPSS 0%cloudark · kubeplusMar 30, 2026