Crd — PoC Archivehttps://poc.intelseclab.com/tags/crd/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000OS Command Injection in KubeAI via Model URL (CVE-2026-34940)https://poc.intelseclab.com/pocs/cloud/2026-07-05_cve-2026-34940-kubeai-ollama-command-injection/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-07-05_cve-2026-34940-kubeai-ollama-command-injection/High severity (CVSS 8.7) — cloud · CVE-2026-34940. Status: PoC. Affects: KubeAI (github.com/kubeai-project/kubeai). Tags: kubernetes, kubeai, command-injection, ollama, crd, kubectl, model-serving, cwe-78.cloudHighkuberneteskubeaicommand-injectionollamacrdkubectlmodel-servingcwe-78Apache Flink Kubernetes Operator SSRF via jarURI (CVE-2026-40564)https://poc.intelseclab.com/pocs/cloud/2026-07-05_cve-2026-40564-flink-k8s-operator-ssrf/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-07-05_cve-2026-40564-flink-k8s-operator-ssrf/High severity — cloud · CVE-2026-40564. Status: PoC. Affects: Apache flink-kubernetes-operator. Tags: ssrf, kubernetes, flink, operator, kubernetes-operator, jarURI, cloud-metadata, crd.cloudHighssrfkubernetesflinkoperatorkubernetes-operatorjarURIcloud-metadatacrd