8.5
HIGH
CVSS 3.1
CVE-2025-14459
Virt-cdi-controller: unauthorized pvc cloning via dataimportcron
Overview
Description
A flaw was found in KubeVirt Containerized Data Importer (CDI). This vulnerability allows a user to clone PersistentVolumeClaims (PVCs) from unauthorized namespaces, resulting in unauthorized access to data via the DataImportCron PVC source mechanism.
Details
INFO
Published Date :
Jan. 26, 2026, 8:16 p.m.
Last Modified :
July 15, 2026, 2:17 a.m.
Remotely Exploit :
Yes !
Source :
[email protected]
Scoring
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework
for assessing the severity of vulnerabilities in software and systems.
We collect and displays CVSS scores from various sources for each CVE.
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | |||||
| CVSS 3.1 | HIGH | 53f830b8-0a3f-465b-8143-3b8a9948e749 | ||||
| CVSS 3.1 | HIGH | [email protected] | ||||
| CVSS 3.1 | HIGH | MITRE-CVE | ||||
| CVSS 3.1 | HIGH | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c |
Solution
Restrict PVC cloning to authorized namespaces and apply the vendor patch.
- Restrict PVC cloning to authorized namespaces.
- Apply the vendor patch for CDI.
- Review access controls for PVCs.
- Monitor CDI logs for suspicious activity.
References
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2025-14459.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2025-14459 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2025-14459
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2025-14459 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2025-14459 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Jul. 15, 2026
Action Type Old Value New Value Changed Affected [{'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'CNV 4.19 for RHEL 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Virtualization 4', 'defaultStatus': 'unaffected'}] [{'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/aaq-controller-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/aaq-operator-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/aaq-server-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/bridge-marker-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/cluster-network-addons-operator-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-4', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/cnv-containernetworking-plugins-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-3', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/cnv-must-gather-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17.rhel9-82', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/hco-bundle-registry-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-4', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/hostpath-csi-driver-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-4', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/hostpath-provisioner-operator-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-4', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/hostpath-provisioner-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-7', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/hyperconverged-cluster-operator-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-7', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/hyperconverged-cluster-webhook-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubemacpool-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubesecondarydns-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubevirt-api-lifecycle-automation-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-6', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubevirt-apiserver-proxy-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubevirt-common-instancetypes-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-85', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubevirt-console-plugin-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubevirt-dpdk-checkup-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubevirt-ipam-controller-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubevirt-realtime-checkup-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubevirt-ssp-operator-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubevirt-storage-checkup-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-11', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubevirt-template-validator-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/libguestfs-tools-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/multus-dynamic-networks-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-19', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/ocp-virt-validation-checkup-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/ovs-cni-plugin-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/passt-network-binding-plugin-cni-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/pr-helper-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-88', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/sidecar-shim-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-api-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-8', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-artifacts-server-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-8', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-cdi-apiserver-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-8', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-cdi-cloner-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-7', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-cdi-controller-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-7', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-cdi-importer-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-7', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-cdi-operator-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-8', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-cdi-uploadproxy-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-8', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-cdi-uploadserver-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-controller-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-exportproxy-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-exportserver-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-handler-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-4', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virtio-win-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-launcher-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-12', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-operator-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/vm-console-proxy-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/vm-network-latency-checkup-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/wasp-agent-rhel9', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Virtualization 4', 'packageName': 'container-native-virtualization/virt-cdi-controller', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'unaffected'}] -
CVE Modified by 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Jun. 30, 2026
Action Type Old Value New Value Added Affected [{'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'CNV 4.19 for RHEL 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Virtualization 4', 'defaultStatus': 'unaffected'}] Added CVSS V3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N Added CWE CWE-639 Added Reference https://access.redhat.com/errata/RHSA-2026:0950 Added Reference https://access.redhat.com/security/cve/CVE-2025-14459 Added Reference https://bugzilla.redhat.com/show_bug.cgi?id=2420938 Added Reference https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14459.json -
CVE Modified by [email protected]
Jun. 17, 2026
Action Type Old Value New Value Added Affected [{'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/aaq-controller-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/aaq-operator-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/aaq-server-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/bridge-marker-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/cluster-network-addons-operator-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-4', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/cnv-containernetworking-plugins-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-3', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/cnv-must-gather-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17.rhel9-82', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/hco-bundle-registry-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-4', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/hostpath-csi-driver-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-4', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/hostpath-provisioner-operator-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-4', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/hostpath-provisioner-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-7', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/hyperconverged-cluster-operator-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-7', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/hyperconverged-cluster-webhook-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubemacpool-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubesecondarydns-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubevirt-api-lifecycle-automation-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-6', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubevirt-apiserver-proxy-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubevirt-common-instancetypes-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-85', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubevirt-console-plugin-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubevirt-dpdk-checkup-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubevirt-ipam-controller-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubevirt-realtime-checkup-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubevirt-ssp-operator-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubevirt-storage-checkup-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-11', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/kubevirt-template-validator-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/libguestfs-tools-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/multus-dynamic-networks-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-19', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/ocp-virt-validation-checkup-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/ovs-cni-plugin-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/passt-network-binding-plugin-cni-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/pr-helper-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-88', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/sidecar-shim-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-api-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-8', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-artifacts-server-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-8', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-cdi-apiserver-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-8', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-cdi-cloner-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-7', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-cdi-controller-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-7', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-cdi-importer-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-7', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-cdi-operator-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-8', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-cdi-uploadproxy-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-8', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-cdi-uploadserver-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-controller-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-exportproxy-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-exportserver-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-handler-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-4', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virtio-win-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-launcher-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-12', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/virt-operator-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/vm-console-proxy-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/vm-network-latency-checkup-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4.19::el9'], 'vendor': 'Red Hat', 'product': 'RHEL-9-CNV-4.19', 'versions': [{'status': 'unaffected', 'version': 'v4.19.17-5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-native-virtualization/wasp-agent-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Virtualization 4', 'packageName': 'container-native-virtualization/virt-cdi-controller', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'unaffected'}] -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Jun. 17, 2026
Action Type Old Value New Value Added SSVC {'id': 'CVE-2025-14459', 'role': 'CISA Coordinator', 'options': [{'exploitation': 'none'}, {'automatable': 'no'}, {'technicalImpact': 'partial'}], 'version': '2.0.3', 'timestamp': '2026-01-26T21:01:20.724005Z'} -
New CVE Received by [email protected]
Jan. 26, 2026
Action Type Old Value New Value Added Description A flaw was found in KubeVirt Containerized Data Importer (CDI). This vulnerability allows a user to clone PersistentVolumeClaims (PVCs) from unauthorized namespaces, resulting in unauthorized access to data via the DataImportCron PVC source mechanism. Added CVSS V3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N Added CWE CWE-639 Added Reference https://access.redhat.com/errata/RHSA-2026:0950 Added Reference https://access.redhat.com/security/cve/CVE-2025-14459 Added Reference https://bugzilla.redhat.com/show_bug.cgi?id=2420938
EPSS is a daily estimate of the probability of exploitation activity
being observed over the next 30 days. Following chart shows the EPSS
score history of the vulnerability.