CVE-2026-120656EPSS p6.3%

CVE-2026-120656CVE-2026-120656

Description

OpenKruise kruise-manager exposes an unauthenticated pprof endpoint, enabled by default, opening it on 0.0.0.0:8090, which can enable a DoS attack triggerable by any pod on the cluster network.

Scoring

EPSS0.17% probability of exploitation · percentile 6.3% · 2026-11-03T12:00:27Z
Last modified2026-11-03
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.