cert-manager-controller DoS via Specially Crafted DNS Response

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-25518 · CVE overview and exploitation status

EUVD-2026-5341

GHSA-gx3x-vq4p-mhhv

BIT-cert-manager-2026-25518

GO-2026-4399

cve-program · CVE-2026-25518

• https://github.com/cert-manager/cert-manager/security/advisories/GHSA-gx3x-vq4p-mhhv
• https://github.com/cert-manager/cert-manager/pull/8467
• https://github.com/cert-manager/cert-manager/pull/8468
• https://github.com/cert-manager/cert-manager/pull/8469
• https://github.com/cert-manager/cert-manager/commit/409fc24e539711a07aae45ed45abbe03dfdad2cc
• https://github.com/cert-manager/cert-manager/commit/9a73a0b3853035827edd37ac463e4803ba10327d
• https://github.com/cert-manager/cert-manager/commit/d4faed26ae12115cceb807cdc12507ebc28980e2

euvd · EUVD-2026-5341

• https://github.com/cert-manager/cert-manager/security/advisories/GHSA-gx3x-vq4p-mhhv
• https://github.com/cert-manager/cert-manager/pull/8467
• https://github.com/cert-manager/cert-manager/pull/8468
• https://github.com/cert-manager/cert-manager/pull/8469
• https://github.com/cert-manager/cert-manager/commit/409fc24e539711a07aae45ed45abbe03dfdad2cc
• https://github.com/cert-manager/cert-manager/commit/9a73a0b3853035827edd37ac463e4803ba10327d
• https://github.com/cert-manager/cert-manager/commit/d4faed26ae12115cceb807cdc12507ebc28980e2

nvd · CVE-2026-25518

• https://github.com/cert-manager/cert-manager/commit/409fc24e539711a07aae45ed45abbe03dfdad2cc
• https://github.com/cert-manager/cert-manager/commit/9a73a0b3853035827edd37ac463e4803ba10327d
• https://github.com/cert-manager/cert-manager/commit/d4faed26ae12115cceb807cdc12507ebc28980e2
• https://github.com/cert-manager/cert-manager/pull/8467
• https://github.com/cert-manager/cert-manager/pull/8468
• https://github.com/cert-manager/cert-manager/pull/8469
• https://github.com/cert-manager/cert-manager/security/advisories/GHSA-gx3x-vq4p-mhhv

osv · GHSA-gx3x-vq4p-mhhv

• https://github.com/cert-manager/cert-manager/security/advisories/GHSA-gx3x-vq4p-mhhv
• https://nvd.nist.gov/vuln/detail/CVE-2026-25518
• https://github.com/cert-manager/cert-manager/pull/8467
• https://github.com/cert-manager/cert-manager/pull/8468
• https://github.com/cert-manager/cert-manager/pull/8469
• https://github.com/cert-manager/cert-manager/commit/409fc24e539711a07aae45ed45abbe03dfdad2cc
• https://github.com/cert-manager/cert-manager/commit/9a73a0b3853035827edd37ac463e4803ba10327d
• https://github.com/cert-manager/cert-manager/commit/d4faed26ae12115cceb807cdc12507ebc28980e2
• https://github.com/cert-manager/cert-manager
• https://pkg.go.dev/vuln/GO-2026-4399

osv · GO-2026-4399

• https://github.com/cert-manager/cert-manager/security/advisories/GHSA-gx3x-vq4p-mhhv
• https://github.com/cert-manager/cert-manager/commit/409fc24e539711a07aae45ed45abbe03dfdad2cc
• https://github.com/cert-manager/cert-manager/commit/9a73a0b3853035827edd37ac463e4803ba10327d
• https://github.com/cert-manager/cert-manager/commit/d4faed26ae12115cceb807cdc12507ebc28980e2
• https://github.com/cert-manager/cert-manager/pull/8467
• https://github.com/cert-manager/cert-manager/pull/8468
• https://github.com/cert-manager/cert-manager/pull/8469

• cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. In versions from 1.18.0 to before 1.18.5 and from 1.19.0 to bef… · Advisory content revised · 15 Nov 2026