CVE-2021-25736

score

<0.1

cvss

5.8

epss

0.9%

published

2023-10-30

kev added

—

first seen

2026-10-21

Kube-proxy on Windows contains an unintentional traffic forwarding issue caused by missing 'status.loadBalancer.ingress[].ip' field in LoadBalancer Service, letting traffic be forwarded to local processes listening on the same port, exploit requires specific LoadBalancer controller configuration.