PoC Archive PoC Archive

tag

Crd

High
OS Command Injection in KubeAI via Model URL (CVE-2026-34940)
CVE-2026-34940· KubeAI (github.com/kubeai-project/kubeai) patched
High
Apache Flink Kubernetes Operator SSRF via jarURI (CVE-2026-40564)
CVE-2026-40564· Apache flink-kubernetes-operator unpatched