Product by Red Hat

    Multicluster Engine For Kubernetes

    15 known vulnerabilities in Multicluster Engine For Kubernetes (Red Hat), 0 of them actively exploited (CISA KEV).

    Key figures

    15

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Multicluster Engine For Kubernetes (Red Hat)
    CriticalCVE-2026-16242

    Red Hat multicluster engine for Kubernetes 2.1: Missing Authentication for Critical Function

    also in 18 other products

    		9.4
    HighCVE-2024-3727

    Containers/image: digest type does not guarantee valid type

    also in 24 other products

    		8.3
    HighCVE-2026-101919

    Hypershift: hypershift: unsanitized kubeconfig passthrough from tenant namespace to control plane

    		8.8
    HighCVE-2026-75924

    Red Hat Multicluster Engine for Kubernetes: Improper Privilege Management

    also in 1 other product

    		8.7
    MediumCVE-2026-71299

    Maestro: maestro: rest api write endpoints registered without authentication middleware

    		6.5
    MediumCVE-2026-71298

    Maestro: sql identifier injection via properties.* search filter and orderby field

    		6.4
    HighCVE-2025-2241

    Hive: exposure of vcenter credentials via clusterprovision in hive / mce / acm

    also in 2 other products

    		8.2
    MediumCVE-2026-10805

    Red Hat Enterprise Linux 8: OS Command Injection

    also in 19 other products

    		6.7
    MediumCVE-2026-71297

    Maestro: maestro: grpc broker has no auth interceptor and client mtls is optional

    		5.4
    HighCVE-2026-4740

    Red Hat multicluster engine for Kubernetes: Improper Certificate Validation

    also in 7 other products

    		8.2
    MediumCVE-2024-12401

    Cert-manager: potential dos when parsing specially crafted pem inputs

    also in 7 other products

    		4.4
    MediumCVE-2026-10101

    Red Hat Multicluster Engine for Kubernetes: Insertion of Sensitive Information Into Sent Data

    		6.3
    MediumCVE-2025-57851

    Mce: privilege escalation via excessive /etc/passwd permissions

    also in 1 other product

    		6.4
    LowCVE-2026-114236

    Red Hat Confidential Compute Attestation: Missing Release of Resource after Effective Lifetime

    also in 16 other products

    		3.3
    MediumCVE-2025-7195

    Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd

    also in 17 other products

    		6.4

    All products by Red Hat