PT-2026-6308 · Cert Manager · Cert-Manager

1Seal

·

CVE-2026-25518

·

Published

2026-02-02

·

Updated

2026-07-30

CVSS v3.1

5.9

Medium

VectorAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions cert-manager versions 1.18.0 through 1.18.4 cert-manager versions 1.19.0 through 1.19.2
Description cert-manager simplifies the process of obtaining, renewing, and using certificates in Kubernetes clusters. The cert-manager-controller performs DNS lookups during ACME DNS-01 processing, which by default use unencrypted DNS. An attacker intercepting and modifying DNS traffic to the cert-manager-controller pod can insert a crafted entry into cert-manager’s DNS cache. Accessing this entry causes a panic, leading to a denial-of-service (DoS) condition of the cert-manager controller. Exploitation is also possible if a malicious actor controls the authoritative DNS server for the validated domain.
Recommendations Update to cert-manager version 1.18.5 or later. Update to cert-manager version 1.19.3 or later.

Exploit

Fix

Improper Validation of Array Index

Incorrect Type Conversion or Cast

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-129CWE-704

Related Identifiers

BIT-CERT-MANAGER-2026-25518
CLEANSTART-2026-AC65885
CLEANSTART-2026-BB70412
CLEANSTART-2026-GZ35045
CLEANSTART-2026-JI51299
CLEANSTART-2026-KX80654
CLEANSTART-2026-OL32822
CLEANSTART-2026-TZ92532
CLEANSTART-2026-VZ35122
CLEANSTART-2026-WY50383
CVE-2026-25518
GHSA-GX3X-VQ4P-MHHV
GO-2026-4399
OPENSUSE-SU-2026:21483-1
SUSE-SU-2026:0757-1

Affected Products

Cert-Manager