CVE-2024-9042
Code Execution Vulnerability Found in Kubernetes Windows Nodes

A new security flaw traced, CVE-2024-9042, poses a serious risk to Kubernetes clusters with Windows worker nodes. It has a Medium rating and a CVSS v3.1 score of 5.9, allowing attackers to execute commands on the host machine through the node’s /logs endpoint.

A vulnerability in the Kubelet component of Kubernetes affects Windows worker nodes. Attackers who can query a node’s /logs endpoint can exploit this flaw to execute commands on the host.

• Alert

Cloudflare Unveils Emergency WAF Ruleset Update on Brotli flaw

By infosecbulletin / Monday , October 26 2026

Cloudflare has shared an urgent update to its Web Application Firewall (WAF) rules due to CVE-2026-111497, a Brotli issue. The release...

Read More

• Daily Security Update
• Data Breach

Daily Cyber security update for 26.10. 2026

By infosecbulletin / Monday , October 26 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...

Read More

• Hot Topic

The Washington Post report
Ex-DOGE AI startup Cathedral Breaches Anthropic Internal Systems within 12 Hours

By infosecbulletin / Monday , October 26 2026

AI startup Cathedral gained a limited access to internal systems at Anthropic in less than 12 hours, exposing employee information,...

Read More

• Daily Security Update
• Data Breach

Daily Cyber security update for 25. 10. 2026

By infosecbulletin / Sunday , October 25 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...

Read More

• Daily Security Update
• Data Breach

Daily Cyber security update for 24. 10. 2026

By infosecbulletin / Saturday , October 24 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...

Read More

• Alert

PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation

By infosecbulletin / Friday , October 23 2026

The PHP security team shared ways to protect against a new flaw that lets someone run unwanted code on certain...

Read More

• Hot Topic

US banks faced unauthorized access by AI agents in customer accounts: Axios reports

By infosecbulletin / Friday , October 23 2026

Major US banks have detected unauthorized access to customer accounts by third-party AI agents, with some systems taking actions beyond...

Read More

• Alert

Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager

By infosecbulletin / Thursday , October 22 2026

Fortinet has urged customers to prioritize security updates for FortiOS, FortiManager, and FortiAnalyzer scheduled for October 22, 2026. The coordinated...

Read More

• Cyber Attack
• Data Breach

Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed

By infosecbulletin / Wednesday , October 21 2026

Hacker offers to sell Rajasthan Government’s Department of Information Technology & Communication (DoIT&C) data in a underground forum. The threat...

Read More

• Alert

Update now! PHP2Shell: Critical PHP vulnerabilities patched

By infosecbulletin / Wednesday , October 21 2026

The PHP team released urgent security updates to fix PHP2Shell, two serious flaws (CVE-2026-109618 and CVE-2026-109619) that let attackers run...

Read More

Organizations should evaluate their Kubernetes environments for these conditions:

Component: Kubelet
Affected Versions:
v1.32.0
v1.31.0 to v1.31.4
v1.30.0 to v1.30.8
<=v1.29.12

Clusters with the affected versions on Windows worker nodes are at risk. Upgrade the Kubelet on your Windows worker nodes to the updated patched versions for better system security.

v1.32.1
v1.31.5
v1.30.9
v1.29.13

It is recommended to update promptly to prevent potential exploitation.

System administrators can identify potential exploitation by reviewing cluster audit logs for unusual queries to the /logs endpoint. Focus on entries with unexpected input patterns.

CVE-2024-9042 has a Medium severity rating, but its impact on Kubernetes environments requires prompt mitigation.

Organizations using Kubernetes with Windows worker nodes should quickly apply fixes to avoid exploitation.