{"uuid": "3df78593-280e-4957-8f66-e38c8ed9e3e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105223", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117385712345555544", "content": "CVE-2026-105223 (CRITICAL, CVSS 9.1): maclof kubernetes-client v0.17.0 \u2013 0.31.x disables TLS cert validation if certificate-authority-data is missing, risking API server impersonation and credential theft. Check configs & vendor advisories. https://radar.offseq.com/threat/cve-2026-105223-improper-certificate-validation-in-maclof-kubernetes-client-8fb4f3aba9271610 #OffSeq #kubernetes #security", "creation_timestamp": "2026-10-05T01:30:24.357081Z"}