Tag: CVE-2026-42880

Critical CVEs

Unpatched Argo CD Repo-Server Flaw Enables Full Kubernetes Cluster Takeover

An unpatched vulnerability in the Argo CD repo-server component allows unauthenticated attackers to execute arbitrary code and potentially take over Kubernetes clusters.…

Argo CD argo-cdown cluster takeover Code Execution

July 1, 2026

Critical CVEs

CVE-2026-42880: Argo CD Read-Only User Secret Exposure

A vulnerability in Argo CD allowing read-only users to read plaintext Kubernetes secrets. Patched in May 2026.

Argo CD CVE-2026-42880 information disclosure Kubernetes secrets

July 1, 2026