Red Hat Red Hat Openshift Data Foundation 4

• CVE-2026-86330 High 7.2 Noobaa-core: noobaa-core: os command injection in cluster_internal_api.set_hostname_internal 2.2%
• CVE-2026-94368 High 7.1 Noobaa-core: noobaa-core: presigned put url escalation to copyobject via unsigned x-amz-copy-source header 0.2%
• CVE-2026-66792 Critical 9.9 Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clusters 0.7%
• CVE-2026-15416 High 8.9 Argo-cd: argo cd unauthenticated remote code execution in repo-server via generatemanifest grpc endpoint 0.5%
• CVE-2024-12401 Medium 4.4 Cert-manager: potential dos when parsing specially crafted pem inputs 0.7%
• CVE-2023-3089 High 7.0 Ocp & fips mode 0.5%