CVE WATCH / VULNERABILITY DETAIL
CVE-2026-113708
CRITICALCVSS 9.9NVD feed
Published 20 October 2026 · tracked since 21 October 2026
Description
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.7.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Kustomize passes ref or version query values from remote resource, base, or component URLs to git fetch without an end-of-options separator. A leading-hyphen value can be
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-113719 MEDIUM 4.5
- CVE-2026-113716 MEDIUM 4.5
- CVE-2026-113709 CRITICAL 9.9
- CVE-2026-113643 MEDIUM 4.3
- CVE-2026-113710 MEDIUM 5.9
- CVE-2026-113711 HIGH 7.5
- CVE-2026-113666 HIGH 7.1
- CVE-2026-113668 MEDIUM 5.3
- CVE-2026-113670 MEDIUM 5.3
- CVE-2026-113671 MEDIUM 4.3