Product by Red Hat
Red Hat Advanced Cluster Management For Kubernetes 2.14
32 known vulnerabilities in Red Hat Advanced Cluster Management For Kubernetes 2.14 (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
32
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
10
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-71471 | Red Hat Advanced Cluster Management for Kubernetes: Inclusion of Functionality from Untrusted Control Sphere | 9.0 | |
| Critical | CVE-2026-72508 | Red Hat Advanced Cluster Management for Kubernetes: Execution with Unnecessary Privileges | 9.9 | |
| Critical | CVE-2026-71472 | Red Hat Advanced Cluster Management for Kubernetes: OS Command Injection | 9.1 | |
| Critical | CVE-2026-66792 | Red Hat Multicluster Global Hub 1.4.9: Incorrect Authorization | 9.9 | |
| Critical | CVE-2026-72526 | Red Hat Advanced Cluster Management for Kubernetes: Confused Deputy | 9.9 | |
| High | CVE-2026-66793 | Red Hat Advanced Cluster Management for Kubernetes: Improper Input Validation | 8.8 | |
| Critical | CVE-2026-67567 | Red Hat Advanced Cluster Management for Kubernetes: Confused Deputy | 9.9 | |
| Critical | CVE-2026-71470 | Red Hat Advanced Cluster Management for Kubernetes: Improper Control of Dynamically-Managed Code Resources | 9.1 | |
| Critical | CVE-2026-70496 | Red Hat Advanced Cluster Management for Kubernetes: Execution with Unnecessary Privileges | 9.9 | |
| High | CVE-2026-76139 | Red Hat Advanced Cluster Management for Kubernetes: Inclusion of Functionality from Untrusted Control Sphere | 8.0 | |
| Critical | CVE-2026-70398 | Red Hat Advanced Cluster Management for Kubernetes: Confused Deputy | 9.6 | |
| Critical | CVE-2026-10090 | Red Hat Advanced Cluster Management for Kubernetes: Privilege Defined With Unsafe Actions | 9.0 | |
| High | CVE-2026-71469 | Red Hat Advanced Cluster Management for Kubernetes: Allocation of Resources Without Limits or Throttling | 7.5 | |
| Medium | CVE-2026-71475 | Red Hat Advanced Cluster Management for Kubernetes: Path Traversal | 6.8 | |
| High | CVE-2026-71473 | Red Hat Advanced Cluster Management for Kubernetes: Improperly Controlled Modification of Dynamically-Determined Object Attributes | 8.5 | |
| High | CVE-2026-89060 | Multicluster-observability-addon: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization | 7.7 | |
| High | CVE-2026-73137 | Red Hat Advanced Cluster Management for Kubernetes: Exposure of Sensitive Information to an Unauthorized Actor | 7.7 | |
| High | CVE-2026-71845 | Red Hat Advanced Cluster Management for Kubernetes: Insertion of Sensitive Information into Log File | 7.7 | |
| High | CVE-2026-73122 | Red Hat Advanced Cluster Management for Kubernetes: Improper Privilege Management | 7.7 | |
| High | CVE-2026-66878 | Red Hat Advanced Cluster Management for Kubernetes: Authorization Bypass Through User-Controlled Key | 7.7 | |
| Medium | CVE-2026-66780 | Submariner-operator: broker serviceaccount secret (token + ca) logged in full at trace verbosity | 6.5 | |
| Medium | CVE-2026-76827 | Red Hat Advanced Cluster Management for Kubernetes: Protection Mechanism Failure | 6.8 | |
| Medium | CVE-2026-18874 | Red Hat Advanced Cluster Management for Kubernetes: Code Injection | 6.2 | |
| High | CVE-2026-70495 | Red Hat Advanced Cluster Management for Kubernetes: Improper Privilege Management | 8.8 | |
| Medium | CVE-2026-64927 | Red Hat Advanced Cluster Management for Kubernetes: Authorization Bypass Through User-Controlled Key | 6.4 |
News
- September 2026 Patch Tuesday roundup: Plugs for two zero day holes among almost 1,000 fixes in Windowscsoonline,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 33sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 32sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 31sans-atrisk-mail,