CVE-2026-120656
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Nov 02, 2026
Vendor
unknown
Description
OpenKruise kruise-manager exposes an unauthenticated ppof endpoint when enabled, opening it on 0.0.0.0:8090, which can enable a DoS attack triggerable by any RBAC pod.