CVE-2026-18544

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-18544
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-18544.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-18544
Published
2026-08-19T21:16:54.400Z
Modified
2026-09-04T14:03:35.435349Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
[none]
Details

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references.

References

Affected packages

Git / github.com/ibm/portieris

Affected ranges

Type
GIT
Repo
https://github.com/ibm/portieris
Events
Introduced
1a74a4e6b4964c044c640e298ee44df23d508755
Fixed
06c722c46aca274a054ef321a79b9297084dd6a4
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:ibm:portieris:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "0.5.0"
        },
        {
            "fixed": "0.14.3"
        }
    ]
}

Affected versions

0.*
0.5.0
0.5.1
0.5.3
0.6.0
0.7.0
0.8.0
0.8.1
0.8.2
0.9.0
0.9.1
0.9.2
0.9.4
v0.*
v0.10.0
v0.10.1
v0.10.2
v0.11.0
v0.12.0
v0.12.1
v0.12.2
v0.13.0
v0.13.1
v0.13.10
v0.13.11
v0.13.12
v0.13.13
v0.13.14
v0.13.15
v0.13.16
v0.13.17
v0.13.18
v0.13.19
v0.13.2
v0.13.20
v0.13.21
v0.13.22
v0.13.23
v0.13.25
v0.13.26
v0.13.27
v0.13.28
v0.13.29
v0.13.3
v0.13.30
v0.13.31
v0.13.32
v0.13.33
v0.13.34
v0.13.35
v0.13.36
v0.13.38
v0.13.4
v0.13.5
v0.13.6
v0.13.7
v0.13.8
v0.13.9
v0.14.0
v0.14.1
v0.14.2
v0.9.1
v0.9.4
v0.9.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-18544.json"