Control-plane

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Control-plane records in CISA KEV

No Control-plane vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Flux Operator · all components

TI-2026-19331 CVE-2026-23990 · GHSA-4xh5-jcj2-ch8q

LOW 24

The Flux Operator is a Kubernetes CRD controller that manages the lifecycle of CNCF Flux CD and the ControlPlane enterprise distribution.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00442 Published 2026-01-21 Fixed in 0.40.0 CWE-269