CVE-2026-102623

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances (VMIs) can cause a Denial of Service (DoS) by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume configuration, leading to an unhandled exception and application crash during processing. Because the malformed definition persists in the cluster, the controller enters a continuous crash loop, disrupting virtual machine lifecycle operations across the entire environment.

• CWE-476

• https://access.redhat.com/security/cve/CVE-2026-102623
• https://bugzilla.redhat.com/show_bug.cgi?id=2543219

Published

Sep 29, 2026

Last Modified

Sep 29, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-102615HeyForm is an open-source form builder. Prior to 3.0.1, /api…7.6
• CVE-2026-102616A vulnerability was detected in risesoft-y9 WorkFlow-Engine …7.3
• CVE-2026-102618IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated us…3.6
• CVE-2026-10262A vulnerability has been found in code-projects Real State S…7.3
• CVE-2026-102620A vulnerability was determined in Freedesktop Poppler 26.06.…3.3
• CVE-2026-102621A vulnerability was identified in Freedesktop Poppler up to …3.3
• CVE-2026-102626An authenticated LimeSurvey Community Edition 7.4.0 user wit…7.2
• CVE-2026-102627IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could a…8.8
• CVE-2026-102628The Cadmos LTI application hosted at cadmos.eummena.io had L…9.3
• CVE-2026-10263A vulnerability was found in SourceCodester Computer Repair …7.3
• CVE-2026-102630UnoPim versions before 2.0.1 and 2.1.1 trust all connecting …4.7
• CVE-2026-102631In authd before 0.7.1, the user identity matching in UpdateU…5.9