Severity:
HIGH RISK
(8.8)
Command Injection via Unsanitized chartName (CWE-94) in KubePlus kubeconfiggenerator /registercrd Endpoint
CVE-2026-29955
Published:
Apr 13, 2026
Status:
Awaiting Analysis
Summary
Affected Context
Exploit Preconditions
Why This Happens
Potential Impact
General Mitigation Guidance
How Teams Detect Issues Like This
Frequently Asked Questions
Source
NDV
Recent Vulnerabilities
CWE-74;CWE-89
(7.3)
SQL Injection via Unsanitized ID Parameter (CWE-89) in Pharmacy Sales and Inventory System /ajax.php
Database Compromise and Data Integrity Loss
April 27, 2026
CWE-863
(8.5)
Incorrect Authorization (CWE-863) in OpenClaw chat.send Session Management
Privilege Escalation and Unauthorized Session Control
April 27, 2026
