{"id":"EUVD-2026-26726","enisaUuid":"ba72c112-4400-3f56-817c-53cbc3d185c1","description":"In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.","datePublished":"May 2, 2026, 1:20:33 AM","dateUpdated":"Jul 15, 2026, 12:55:34 AM","baseScore":9.6,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","references":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3\n","aliases":"CVE-2026-43824\n","assigner":"mitre","epss":0.27,"enisaIdProduct":[{"id":"68805186-b088-33a6-b42a-a83f37105f20","product":{"name":"Argo CD","vendor":{"name":"argoproj"}},"product_version":"3.3.0 \u003c3.3.9"},{"id":"8edbbd2b-d176-3f0a-b4cf-621ae768b1dc","product":{"name":"Argo CD","vendor":{"name":"argoproj"}},"product_version":"3.2.0 \u003c3.2.11"}],"enisaIdVendor":[{"id":"f536b341-2213-371c-9e3c-a6ef5ed74a75","vendor":{"name":"argoproj"}}],"enisaIdVulnerability":[{"id":"0a90c330-80ce-33fd-9a68-d0b9b707f1b5","vulnerability":{"id":"GHSA-c7mp-5hg2-gfh8","description":"In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.","datePublished":"May 2, 2026, 3:31:12 AM","dateUpdated":"Jun 30, 2026, 3:36:29 AM","baseScore":0.0,"references":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-43824\nhttps://access.redhat.com/security/cve/CVE-2026-43824\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d2464613\nhttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43824.json\n","enisa_id":"EUVD-2026-26726\n","aliases":"CVE-2026-43824\nGHSA-c7mp-5hg2-gfh8\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:55:50 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"d7836997-3d60-313c-8231-b2561a7135ae","vulnerability":{"id":"CVE-2026-43824","description":"In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.","datePublished":"May 2, 2026, 1:20:33 AM","dateUpdated":"Jul 15, 2026, 12:55:34 AM","status":"PUBLISHED","baseScore":9.6,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","references":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3\n","enisa_id":"EUVD-2026-26726\n","assigner":"mitre","epss":0.27,"dataProcessed":"Oct 28, 2026, 7:16:27 AM","vulnerabilityProduct":[{"id":"098c470b-8f96-3b87-902f-98839d03b1e2","product":{"name":"Argo CD","vendor":{"name":"argoproj"}},"product_version":"3.3.0 \u003c3.3.9"},{"id":"b84b84df-9c00-3108-8813-19ad2a613062","product":{"name":"Argo CD","vendor":{"name":"argoproj"}},"product_version":"3.2.0 \u003c3.2.11"}],"vulnerabilityVendor":[{"id":"9e5d362a-610a-3355-92f1-3d6d790e052b","vendor":{"name":"argoproj"}}]}}],"enisaIdAdvisory":[]}