Red Hat Red Hat Advanced Cluster Management for Kubernetes 2

• CVE-2026-92982 High 8.5 Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection 0.5%
• CVE-2026-89091 High 8.8 Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution 0.5%
• CVE-2026-93685 Medium 5.4 Multicluster-observability-addon: multicluster-observability-addon: possible unauthenticated debug/metrics endpoint via cmdfactory.newcontrollercommandconfig (confirmed exposed by engineering) 0.4%
• CVE-2026-92615 Medium 6.6 Flightctl: flightctl: package-global go-git https transport mutated per-repo -- cross-tenant tls-config bleed 0.2%
• CVE-2026-66786 Critical 9.1 Submariner: submariner: ipsec.conf stanza injection via remote-supplied cablename and subnets 1.4%
• CVE-2026-66785 High 8.7 Submariner: submariner: missing validation of remote endpoint subnets and clusterid enables cross-cluster traffic hijack 0.2%
• CVE-2026-70496 Critical 9.9 Search-v2-operator: search-v2-operator: operator clusterrole is cluster-admin equivalent via impersonate, rbac write, csr approve, and manifestwork 0.6%
• CVE-2026-66780 Medium 6.5 Submariner-operator: broker serviceaccount secret (token + ca) logged in full at trace verbosity 0.6%
• CVE-2026-66783 Medium 4.4 Submariner-operator: release workflow consumes same-org composite action via mutable @devel branch ref 0.4%
• CVE-2026-66782 Medium 5.8 Submariner-operator: operator clusterrole grants cluster-wide create/update on all configmaps 0.4%
• CVE-2026-66781 Medium 5.4 Submariner-operator: pprof debug endpoint enabled by default on 0.0.0.0:8082 without authentication 0.4%
• CVE-2026-75924 High 8.7 Managed-serviceaccount: managed-serviceaccount: hub addon-manager clusterrole grants cluster-wide secret read/write and csr approval 0.3%
• CVE-2026-70495 High 8.8 Search-v2-operator: search-v2-operator: cluster-wide impersonate on users/groups shared across 4 pods grants hub system:masters 0.2%
• CVE-2026-66792 Critical 9.9 Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clusters 0.7%
• CVE-2026-16242 Critical 9.4 Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates 0.9%
• CVE-2026-11332 High 7.8 Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution 0.2%
• CVE-2025-11065 Medium 5.3 Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure 0.5%
• CVE-2025-14874 High 7.5 Nodemailer: nodemailer: denial of service via crafted email address header 0.6%
• CVE-2025-13033 High 7.5 Nodemailer: nodemailer: email to an unintended domain can occur due to interpretation conflict 0.6%
• CVE-2025-10894 Critical 9.6 Nx: nx/devkit: malicious versions of nx and plugins published to npm 0.6%
• CVE-2025-8556 Low 3.7 Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results 0.5%
• CVE-2025-2241 High 8.2 Hive: exposure of vcenter credentials via clusterprovision in hive / mce / acm 0.5%
• CVE-2024-11831 Medium 5.4 Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript 1.1%
• CVE-2024-9779 High 7.5 Open-cluster-management-io/ocm: cluster-manager permissions may allow a worker node to obtain service account tokens 0.4%
• CVE-2024-5042 Medium 6.6 Submariner-operator: rbac permissions can allow for the spread of node compromises 0.5%
• CVE-2024-0874 Medium 5.3 Coredns: cd bit response is cached and served later 0.8%
• CVE-2022-3248 Medium 4.4 Openshift api admission checks does not enforce "custom-host" permissions 0.5%
• CVE-2023-3089 High 7.0 Ocp & fips mode 0.5%