Product by Red Hat

    Multicluster Engine For Kubernetes 2.8

    13 known vulnerabilities in Multicluster Engine For Kubernetes 2.8 (Red Hat), 0 of them actively exploited (CISA KEV).

    Key figures

    13

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Multicluster Engine For Kubernetes 2.8 (Red Hat)
    CriticalCVE-2026-73268

    Red Hat multicluster engine for Kubernetes: Code Injection

    also in 5 other products

    		9.9
    CriticalCVE-2026-16242

    Red Hat multicluster engine for Kubernetes 2.1: Missing Authentication for Critical Function

    also in 18 other products

    		9.4
    CriticalCVE-2026-66794

    Red Hat multicluster engine for Kubernetes: Server-Side Request Forgery (SSRF)

    also in 5 other products

    		9.3
    CriticalCVE-2026-73269

    Red Hat multicluster engine for Kubernetes: Improper Privilege Management

    also in 5 other products

    		9.9
    CriticalCVE-2026-10059

    Red Hat multicluster engine for Kubernetes: Incorrect Privilege Assignment

    also in 4 other products

    		9.1
    CriticalCVE-2026-66795

    Red Hat multicluster engine for Kubernetes: Improper Certificate Validation

    also in 5 other products

    		9.9
    HighCVE-2026-73267

    Red Hat multicluster engine for Kubernetes: Client-Side Enforcement of Server-Side Security

    also in 5 other products

    		7.7
    HighCVE-2026-17107

    Cluster-proxy: impersonation-header injection grants cluster-admin on every managed cluster

    also in 5 other products

    		8.5
    HighCVE-2026-75569

    Mce-operator-bundle: all github actions pinned by mutable tag, not commit sha

    also in 5 other products

    		7.7
    HighCVE-2026-73266

    Red Hat multicluster engine for Kubernetes: Confused Deputy

    also in 5 other products

    		7.1
    MediumCVE-2026-19130

    Red Hat multicluster engine for Kubernetes: Authorization Bypass Through User-Controlled Key

    also in 5 other products

    		5.8
    HighCVE-2026-4740

    Red Hat multicluster engine for Kubernetes: Improper Certificate Validation

    also in 7 other products

    		8.2
    MediumCVE-2025-7195

    Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd

    also in 17 other products

    		6.4

    News

    All products by Red Hat