Red Hat multicluster engine for Kubernetes 2.1

• CVE-2026-10059 Critical 9.1 Cluster-curator-controller: cluster-curator-controller: namespace admin can escalate to cluster-wide curator authority via clustercurator serviceaccount token 0.6%
• CVE-2026-16242 Critical 9.4 Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates 0.9%
• CVE-2026-7163 Medium 6.1 Assisted-service: assisted-service: authenticated users can gain administrative access to openshift clusters via credential disclosure 0.2%
• CVE-2026-4740 High 8.2 Rhacm: open cluster management (ocm): cross-cluster privilege escalation via improper kubernetes client certificate renewal validation 0.2%