by Kastro
Paper/Archive/CVE-2026-92720

CVE-2026-92720

kubero-dev kubero — Kubero through 3.1.1 Unauthenticated Notifications API Access

EPSS 0.6%CVSS 9.3
critical.is priorityof 100
38
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 50.3.503 × 2010.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Kubero through 3.1.1 fails to apply authentication guards to the notifications API endpoints, allowing unauthenticated attackers to read webhook secrets and service URLs. Attackers can retrieve stored credentials and register malicious webhooks to intercept pipeline events or suppress alerting by deleting existing configurations.

Affected

ProductAffectedFixed inSource
kubero≤ 3.1.1–CNA

Scores by source

VulnCheck (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
VulnCheck (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refgithub.com/kubero-dev/kubero/issues/753refgithub.com/kubero-dev/kuberowriteupgithub.com/kubero-dev/kubero/blob/v3.1.1/server/src/notifications/notifications.controller.ts#L23-L33writeupgithub.com/kubero-dev/kubero/blob/v3.1.1/server/src/main.tswriteupvulncheck.com/advisories/kubero-through-3.1.1-unauthenticated-notifications-api-access