{"uuid": "dac9e525-653b-4dfb-8b00-a0ac537ad676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91923", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117318945299045763", "content": "CVE-2026-91923: SSRF in KubeSphere (through 4.1.3) lets authed users hit internal services via the git credential endpoint and leak Secret basic-auth creds. CVSS 7.7. No patch yet, review underway - restrict endpoint access now. https://www.valtersit.com/cve/CVE-2026-91923/ #CVE #infosec #Kubernetes", "creation_timestamp": "2026-09-23T06:30:49.441777Z"}