Към съдържанието
Търсене

CVE-2026-66792: Red Hat Multicluster Global Hub 1.4.9, заобикаляне на

9.9

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, с обикновен потребителски вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription with specific, crafted annotations. Successful exploitation grants the attacker the ability to deploy resources into any namespace with the elevated permissions of the controller's Service Account, potentially leading to unauthorized access and control over cluster resources.

Засегнати продукти

  • Red Hat Multicluster Global Hub 1.4.9: 1788355439 преди *
  • Red Hat Multicluster Global Hub 1.4.9: 1788355599 преди *
  • Red Hat Multicluster Global Hub 1.4.9: 1788355417 преди *
  • Red Hat Multicluster Global Hub 1.5.8: 1789515408 преди *
  • Red Hat Multicluster Global Hub 1.5.8: 1789515288 преди *
  • Red Hat Multicluster Global Hub 1.5.8: 1789478830 преди *
  • Red Hat Multicluster Global Hub 1.6.6: 1790085494 преди *
  • Red Hat Multicluster Global Hub 1.6.6: 1790086176 преди *
  • Red Hat Multicluster Global Hub 1.6.6: 1790085268 преди *
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11: 1787262214 преди *
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11: 1787263584 преди *
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13: 1787259284 преди *
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13: 1787263693 преди *
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14: 1786976940 преди *
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14: 1787170830 преди *
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.15: 1787238598 преди *
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.15: 1787240030 преди *
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16: 1787242135 преди *
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16: 1787242321 преди *
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.17: 1787242131 преди *
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.17: 1787242108 преди *
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat Openshift Data Foundation 4
  • Red Hat Red Hat Openshift Data Foundation 4
  • Red Hat Red Hat Openshift Data Foundation 4

Вид слабост

История

  • 17 август 2026 Публикувано

Други уязвимости в Red Hat Multicluster Global Hub 1.4.9

Първоизточници

CVE-2026-66792: Red Hat Multicluster Global Hub 1.4.9, заобикаляне на | freedomonline.bg