CVE-2026-15140
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
A privilege-escalation issue in the Portworx Operator when deployed on Red Hat OpenShift (OCP). Only under specific conditions during the initial provisioning of a Portworx storage cluster, a user holding only limited, namespace-scoped permissions could cause the operator to grant broader access than intended, potentially resulting in elevated privileges within the Kubernetes cluster.
| CWE | CWE-266 |
| Vendor | everpure |
| Product | portworx operator |
| Published | Sep 9, 2026 |
| Last Updated | Sep 9, 2026 |
Stay Ahead of the Next One
Get instant alerts for everpure portworx operator
Be the first to know when new unknown vulnerabilities affecting everpure portworx operator are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Everpure / Portworx Operator
0 ≤ 26.3.1