{"schema":"vulnpedia.research/1","cve":"CVE-2026-113708","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-9v9p-x54c-58gc","tags":["x_refsource_CONFIRM","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:03:17.219Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:03:17.219Z","url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-9v9p-x54c-58gc"},{"source":"nvd","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:59:00.607","url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-9v9p-x54c-58gc"},{"source":"redhat","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:55:20+00:00","url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-9v9p-x54c-58gc"}]},{"url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-j6cw-g6p4-7hch","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:03:17.219Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:03:17.219Z","url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-j6cw-g6p4-7hch"},{"source":"nvd","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:59:00.607","url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-j6cw-g6p4-7hch"}]},{"url":"https://github.com/argoproj/argo-cd/pull/12299","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:03:17.219Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:03:17.219Z","url":"https://github.com/argoproj/argo-cd/pull/12299"},{"source":"nvd","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:59:00.607","url":"https://github.com/argoproj/argo-cd/pull/12299"}]},{"url":"https://github.com/argoproj/argo-cd/commit/25badeb7a1e154805340bb7237e0ce671f3772dd","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:03:17.219Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:03:17.219Z","url":"https://github.com/argoproj/argo-cd/commit/25badeb7a1e154805340bb7237e0ce671f3772dd"},{"source":"nvd","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:59:00.607","url":"https://github.com/argoproj/argo-cd/commit/25badeb7a1e154805340bb7237e0ce671f3772dd"}]},{"url":"https://argo-cd.readthedocs.io/en/stable/user-guide/kustomize/#custom-kustomize-versions","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:03:17.219Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:03:17.219Z","url":"https://argo-cd.readthedocs.io/en/stable/user-guide/kustomize/#custom-kustomize-versions"},{"source":"nvd","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:59:00.607","url":"https://argo-cd.readthedocs.io/en/stable/user-guide/kustomize/#custom-kustomize-versions"}]},{"url":"https://github.com/argoproj/argo-cd/releases/tag/v3.3.15","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:03:17.219Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:03:17.219Z","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.3.15"},{"source":"nvd","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:59:00.607","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.3.15"}]},{"url":"https://github.com/argoproj/argo-cd/releases/tag/v3.4.10","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:03:17.219Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:03:17.219Z","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.4.10"},{"source":"nvd","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:59:00.607","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.4.10"}]},{"url":"https://github.com/argoproj/argo-cd/releases/tag/v3.5.4","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:03:17.219Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:03:17.219Z","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.5.4"},{"source":"nvd","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:59:00.607","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.5.4"}]},{"url":"https://github.com/argoproj/argo-cd/releases/tag/v3.6.0-rc2","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:03:17.219Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:03:17.219Z","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.6.0-rc2"},{"source":"nvd","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:59:00.607","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.6.0-rc2"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113708.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:55:20+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:55:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113708.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-113708","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:55:20+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:55:20+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-113708"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550612","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:55:20+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:55:20+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550612"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-113708","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:55:20+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:55:20+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-113708"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113708","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:55:20+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:55:20+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113708"}]},{"url":"https://github.com/argoproj/argo-cd/commit/d5dd7019e","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:55:20+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:55:20+00:00","url":"https://github.com/argoproj/argo-cd/commit/d5dd7019e"}]},{"source":"euvd","sourceId":"EUVD-2026-105249","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-105249","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-105249","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-105249"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:55:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113708.json","productId":"red_hat_openshift_data_foundation_4:odf4/odf-multicluster-rhel9-operator","product":"odf4/odf-multicluster-rhel9-operator as a component of Red Hat Openshift Data Foundation 4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odf-multicluster-rhel9-operator?repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator","origins":[{"source":"redhat","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:55:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113708.json"}]},{"source":"redhat","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:55:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113708.json","productId":"red_hat_openshift_gitops:openshift-gitops-1/argocd-agent-rhel9","product":"openshift-gitops-1/argocd-agent-rhel9 as a component of Red Hat OpenShift GitOps","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/argocd-agent-rhel9?repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:55:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113708.json"}]},{"source":"redhat","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:55:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113708.json","productId":"red_hat_openshift_gitops:openshift-gitops-1/argocd-image-updater-rhel9","product":"openshift-gitops-1/argocd-image-updater-rhel9 as a component of Red Hat OpenShift GitOps","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/argocd-image-updater-rhel9?repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:55:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113708.json"}]},{"source":"redhat","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:55:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113708.json","productId":"red_hat_openshift_gitops:openshift-gitops-1/argocd-rhel9","product":"openshift-gitops-1/argocd-rhel9 as a component of Red Hat OpenShift GitOps","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/argocd-rhel9?repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:55:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113708.json"}]},{"source":"redhat","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:55:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113708.json","productId":"red_hat_openshift_gitops:openshift-gitops-1/gitops-rhel9","product":"openshift-gitops-1/gitops-rhel9 as a component of Red Hat OpenShift GitOps","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/gitops-rhel9?repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:55:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113708.json"}]},{"source":"redhat","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:55:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113708.json","productId":"red_hat_openshift_gitops:openshift-gitops-1/gitops-rhel9-operator","product":"openshift-gitops-1/gitops-rhel9-operator as a component of Red Hat OpenShift GitOps","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/gitops-rhel9-operator?repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator","origins":[{"source":"redhat","sourceId":"CVE-2026-113708","modified":"2026-10-20T19:55:20+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113708.json"}]}],"vendorCoverage":{"total":6,"shown":6,"omitted":0,"source":"redhat"}}