{"schema":"vulnpedia.research/1","cve":"CVE-2026-113709","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-fw5c-w8rc-j7fx","tags":["x_refsource_CONFIRM","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:08:36.565Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:08:36.565Z","url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-fw5c-w8rc-j7fx"},{"source":"nvd","sourceId":"CVE-2026-113709","modified":"2026-10-21T16:17:24.917","url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-fw5c-w8rc-j7fx"},{"source":"redhat","sourceId":"CVE-2026-113709","modified":"2026-10-21T03:00:00+00:00","url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-fw5c-w8rc-j7fx"}]},{"url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-j6cw-g6p4-7hch","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:08:36.565Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:08:36.565Z","url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-j6cw-g6p4-7hch"},{"source":"nvd","sourceId":"CVE-2026-113709","modified":"2026-10-21T16:17:24.917","url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-j6cw-g6p4-7hch"}]},{"url":"https://github.com/argoproj/argo-cd/pull/6059","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:08:36.565Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:08:36.565Z","url":"https://github.com/argoproj/argo-cd/pull/6059"},{"source":"nvd","sourceId":"CVE-2026-113709","modified":"2026-10-21T16:17:24.917","url":"https://github.com/argoproj/argo-cd/pull/6059"}]},{"url":"https://github.com/kubernetes-sigs/kustomize/pull/3784","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:08:36.565Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:08:36.565Z","url":"https://github.com/kubernetes-sigs/kustomize/pull/3784"},{"source":"nvd","sourceId":"CVE-2026-113709","modified":"2026-10-21T16:17:24.917","url":"https://github.com/kubernetes-sigs/kustomize/pull/3784"}]},{"url":"https://github.com/argoproj/argo-cd/commit/b6d5c23bce2f8a46c52975ba438a3b93d242d96c","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:08:36.565Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:08:36.565Z","url":"https://github.com/argoproj/argo-cd/commit/b6d5c23bce2f8a46c52975ba438a3b93d242d96c"},{"source":"nvd","sourceId":"CVE-2026-113709","modified":"2026-10-21T16:17:24.917","url":"https://github.com/argoproj/argo-cd/commit/b6d5c23bce2f8a46c52975ba438a3b93d242d96c"}]},{"url":"https://argo-cd.readthedocs.io/en/stable/user-guide/kustomize/#kustomizing-helm-charts","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:08:36.565Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:08:36.565Z","url":"https://argo-cd.readthedocs.io/en/stable/user-guide/kustomize/#kustomizing-helm-charts"},{"source":"nvd","sourceId":"CVE-2026-113709","modified":"2026-10-21T16:17:24.917","url":"https://argo-cd.readthedocs.io/en/stable/user-guide/kustomize/#kustomizing-helm-charts"}]},{"url":"https://github.com/argoproj/argo-cd/releases/tag/v3.3.15","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:08:36.565Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:08:36.565Z","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.3.15"},{"source":"nvd","sourceId":"CVE-2026-113709","modified":"2026-10-21T16:17:24.917","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.3.15"}]},{"url":"https://github.com/argoproj/argo-cd/releases/tag/v3.4.10","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:08:36.565Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:08:36.565Z","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.4.10"},{"source":"nvd","sourceId":"CVE-2026-113709","modified":"2026-10-21T16:17:24.917","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.4.10"}]},{"url":"https://github.com/argoproj/argo-cd/releases/tag/v3.5.4","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:08:36.565Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:08:36.565Z","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.5.4"},{"source":"nvd","sourceId":"CVE-2026-113709","modified":"2026-10-21T16:17:24.917","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.5.4"}]},{"url":"https://github.com/argoproj/argo-cd/releases/tag/v3.6.0-rc2","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:08:36.565Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:08:36.565Z","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.6.0-rc2"},{"source":"nvd","sourceId":"CVE-2026-113709","modified":"2026-10-21T16:17:24.917","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.6.0-rc2"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113709.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-113709","modified":"2026-10-21T03:00:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113709","modified":"2026-10-21T03:00:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113709.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-113709","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-113709","modified":"2026-10-21T03:00:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113709","modified":"2026-10-21T03:00:00+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-113709"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550667","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-113709","modified":"2026-10-21T03:00:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113709","modified":"2026-10-21T03:00:00+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550667"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-113709","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-113709","modified":"2026-10-21T03:00:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113709","modified":"2026-10-21T03:00:00+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-113709"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113709","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-113709","modified":"2026-10-21T03:00:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113709","modified":"2026-10-21T03:00:00+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113709"}]},{"url":"https://github.com/argoproj/argo-cd/commit/d5dd7019e","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-113709","modified":"2026-10-21T03:00:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113709","modified":"2026-10-21T03:00:00+00:00","url":"https://github.com/argoproj/argo-cd/commit/d5dd7019e"}]},{"source":"euvd","sourceId":"EUVD-2026-105250","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-105250","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-105250","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-105250"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-113709","modified":"2026-10-21T03:00:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113709.json","productId":"red_hat_openshift_data_foundation_4:odf4/odf-multicluster-rhel9-operator","product":"odf4/odf-multicluster-rhel9-operator as a component of Red Hat Openshift Data Foundation 4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odf-multicluster-rhel9-operator?repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator","origins":[{"source":"redhat","sourceId":"CVE-2026-113709","modified":"2026-10-21T03:00:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113709.json"}]},{"source":"redhat","sourceId":"CVE-2026-113709","modified":"2026-10-21T03:00:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113709.json","productId":"red_hat_openshift_gitops:openshift-gitops-1/argocd-agent-rhel9","product":"openshift-gitops-1/argocd-agent-rhel9 as a component of Red Hat OpenShift GitOps","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/argocd-agent-rhel9?repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-113709","modified":"2026-10-21T03:00:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113709.json"}]},{"source":"redhat","sourceId":"CVE-2026-113709","modified":"2026-10-21T03:00:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113709.json","productId":"red_hat_openshift_gitops:openshift-gitops-1/argocd-image-updater-rhel9","product":"openshift-gitops-1/argocd-image-updater-rhel9 as a component of Red Hat OpenShift GitOps","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/argocd-image-updater-rhel9?repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-113709","modified":"2026-10-21T03:00:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113709.json"}]},{"source":"redhat","sourceId":"CVE-2026-113709","modified":"2026-10-21T03:00:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113709.json","productId":"red_hat_openshift_gitops:openshift-gitops-1/argocd-rhel9","product":"openshift-gitops-1/argocd-rhel9 as a component of Red Hat OpenShift GitOps","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/argocd-rhel9?repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-113709","modified":"2026-10-21T03:00:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113709.json"}]},{"source":"redhat","sourceId":"CVE-2026-113709","modified":"2026-10-21T03:00:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113709.json","productId":"red_hat_openshift_gitops:openshift-gitops-1/gitops-rhel9","product":"openshift-gitops-1/gitops-rhel9 as a component of Red Hat OpenShift GitOps","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/gitops-rhel9?repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-113709","modified":"2026-10-21T03:00:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113709.json"}]},{"source":"redhat","sourceId":"CVE-2026-113709","modified":"2026-10-21T03:00:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113709.json","productId":"red_hat_openshift_gitops:openshift-gitops-1/gitops-rhel9-operator","product":"openshift-gitops-1/gitops-rhel9-operator as a component of Red Hat OpenShift GitOps","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/gitops-rhel9-operator?repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator","origins":[{"source":"redhat","sourceId":"CVE-2026-113709","modified":"2026-10-21T03:00:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113709.json"}]}],"vendorCoverage":{"total":6,"shown":6,"omitted":0,"source":"redhat"}}