← Database

CVE-2026-120656

N/A CVSS: N/A Published: 2026-11-02 Modified: 2026-11-02

Description

OpenKruise kruise-manager exposes an unauthenticated ppof endpoint when enabled, opening it on 0.0.0.0:8090, which can enable a DoS attack triggerable by any RBAC pod.

Affected Platforms

Unknown

Weakness Type

Unknown

References