Advisories · Technology

Apache Software Foundation Apache Flink Kubernetes Operator.

Every CVE that names Apache Software Foundation Apache Flink Kubernetes Operator among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-40564 CVE record

CVSS 6.5 Medium

Apache Flink Kubernetes Operator: Server-Side Request Forgery and local file access in Kubernetes Operator
- Apache Software Foundation Apache Flink Kubernetes Operator
- Information disclosure
- Server-side request forgery (SSRF)
Not analysed yet 26 May 2026