CVE-2026-87114

Published 28 September 2026 · tracked since 29 September 2026

Description

A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote attacker to achieve arbitrary code execution on the operator's w

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-97395
• CVE-2026-71898 MEDIUM 4.3
• CVE-2026-71899
• CVE-2026-78214 MEDIUM 5.3
• CVE-2026-81569 MEDIUM 4.3
• CVE-2026-71897 MEDIUM 4.3
• CVE-2026-98164
• CVE-2026-82804 HIGH 8.8
• CVE-2026-82973 CRITICAL 9.4
• CVE-2026-73599 MEDIUM 5.4

→ Open the live CVE board · all tools