CVE WATCH / VULNERABILITY DETAIL
CVE-2026-91163
LOWCVSS 3.7NVD feed
Published 4 November 2026 · tracked since 5 November 2026
Description
Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. Prior to 0.29.0, the Kubernetes protocol listener uses AcceptAnyClientCert in warpgate-protocol-kubernetes/src/server/client_certs.rs to accept certificates at the TLS layer and defer validation to warpgate-protocol-kubernetes/
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-54372 HIGH 8.8
- CVE-2026-121751 LOW 3.1
- CVE-2026-121746 MEDIUM 5.5
- CVE-2026-121747 MEDIUM 5.5
- CVE-2026-121748 LOW 3.6
- CVE-2026-121749 LOW 3.3
- CVE-2026-121750 LOW 3.1
- CVE-2026-121745 LOW 2.5
- CVE-2026-103002 HIGH 8.8
- CVE-2026-102280