VULNERABILITY INTELLIGENCE
CVE-2026-43824
CVSS score7.7 HIGH
EPSS probability0.27%
CISA KEVNot currently listed
Published2026-05-02
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Description
In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.
Weakness classification
- cve@mitre.org: CWE-212
- 0b0ca135-0b70-47e7-9f44-1890c2a1c46c: CWE-312