Product by Red Hat
Red Hat Advanced Cluster Management For Kubernetes 2.17
38 known vulnerabilities in Red Hat Advanced Cluster Management For Kubernetes 2.17 (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
38
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
12
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-66786 | Submariner: submariner: ipsec.conf stanza injection via remote-supplied cablename and subnets | 9.1 | |
| Critical | CVE-2026-71471 | Red Hat Advanced Cluster Management for Kubernetes: Inclusion of Functionality from Untrusted Control Sphere | 9.0 | |
| Critical | CVE-2026-72508 | Red Hat Advanced Cluster Management for Kubernetes: Execution with Unnecessary Privileges | 9.9 | |
| Critical | CVE-2026-71472 | Red Hat Advanced Cluster Management for Kubernetes: OS Command Injection | 9.1 | |
| Critical | CVE-2026-66792 | Red Hat Multicluster Global Hub 1.4.9: Incorrect Authorization | 9.9 | |
| Critical | CVE-2026-72526 | Red Hat Advanced Cluster Management for Kubernetes: Confused Deputy | 9.9 | |
| Critical | CVE-2026-66788 | Lighthouse: lighthouse: arbitrary namespace injection via attacker-controlled broker label | 9.9 | |
| High | CVE-2026-66793 | Red Hat Advanced Cluster Management for Kubernetes: Improper Input Validation | 8.8 | |
| Critical | CVE-2026-67567 | Red Hat Advanced Cluster Management for Kubernetes: Confused Deputy | 9.9 | |
| Critical | CVE-2026-71470 | Red Hat Advanced Cluster Management for Kubernetes: Improper Control of Dynamically-Managed Code Resources | 9.1 | |
| Critical | CVE-2026-70496 | Red Hat Advanced Cluster Management for Kubernetes: Execution with Unnecessary Privileges | 9.9 | |
| High | CVE-2026-76139 | Red Hat Advanced Cluster Management for Kubernetes: Inclusion of Functionality from Untrusted Control Sphere | 8.0 | |
| High | CVE-2026-71467 | Red Hat Advanced Cluster Management for Kubernetes 2.17: Improper Authentication | 7.5 | |
| Critical | CVE-2026-70398 | Red Hat Advanced Cluster Management for Kubernetes: Confused Deputy | 9.6 | |
| Critical | CVE-2026-10090 | Red Hat Advanced Cluster Management for Kubernetes: Privilege Defined With Unsafe Actions | 9.0 | |
| High | CVE-2026-71469 | Red Hat Advanced Cluster Management for Kubernetes: Allocation of Resources Without Limits or Throttling | 7.5 | |
| Medium | CVE-2026-71475 | Red Hat Advanced Cluster Management for Kubernetes: Path Traversal | 6.8 | |
| High | CVE-2026-71473 | Red Hat Advanced Cluster Management for Kubernetes: Improperly Controlled Modification of Dynamically-Determined Object Attributes | 8.5 | |
| High | CVE-2026-89060 | Multicluster-observability-addon: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization | 7.7 | |
| High | CVE-2026-73137 | Red Hat Advanced Cluster Management for Kubernetes: Exposure of Sensitive Information to an Unauthorized Actor | 7.7 | |
| High | CVE-2026-71845 | Red Hat Advanced Cluster Management for Kubernetes: Insertion of Sensitive Information into Log File | 7.7 | |
| High | CVE-2026-73122 | Red Hat Advanced Cluster Management for Kubernetes: Improper Privilege Management | 7.7 | |
| High | CVE-2026-66878 | Red Hat Advanced Cluster Management for Kubernetes: Authorization Bypass Through User-Controlled Key | 7.7 | |
| Medium | CVE-2026-66780 | Submariner-operator: broker serviceaccount secret (token + ca) logged in full at trace verbosity | 6.5 | |
| Medium | CVE-2026-76827 | Red Hat Advanced Cluster Management for Kubernetes: Protection Mechanism Failure | 6.8 |
News
- September 2026 Patch Tuesday roundup: Plugs for two zero day holes among almost 1,000 fixes in Windowscsoonline,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 33sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 32sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 31sans-atrisk-mail,