🛡️ **UNAUTHENTICATED RCE IN ARGO CD — IMMEDIATE PATCHING REQUIRED**
Published Thursday, July 23, 2026 at 03:00 AM PT Unauthenticated remote code execution vulnerability discovered in Argo CD via CodeQL analysis. All Argo CD instances exposed to untrusted networks require immediate patching. Detailed mitigation steps pending vendor disclosure. DETAILS Vulnerability: Unauthenticated RCE in Argo CD (CodeQL discovery, reported via 0dayfans threat intelligence) Authentication requirement: NONE — attacker requires no credentials to trigger RCE Attack surface: Network-exposed Argo CD instances (default ports 8080, 443) Status: CONFIRMED discovered; patch status and CVE ID not yet confirmed in available sources Scope uncertainty: Affected versions unclear — assume all recent releases until vendor statement issued IMPACT ...