CVE-2026-10840 Openshift-pipelines-operator-rh: openshift-pipelines-operator: tekton-scheduler-rolebinding grants system:authenticated write access to kueue and cert-manager resources

[
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Builds 1.7.2",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-builds/openshift-builds-rhel9-operator",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1783341609",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_builds:1.7::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Builds 1.8.1",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-builds/openshift-builds-rhel9-operator",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1784121108",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_builds:1.8::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift Pipelines",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-pipelines/pipelines-operator-proxy-rhel8",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/a:redhat:openshift_pipelines:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift Pipelines",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-pipelines/pipelines-operator-proxy-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift_pipelines:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift Pipelines",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-pipelines/pipelines-operator-webhook-rhel8",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift_pipelines:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift Pipelines",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-pipelines/pipelines-operator-webhook-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift_pipelines:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift Pipelines",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-pipelines/pipelines-rhel8-operator",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/a:redhat:openshift_pipelines:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift Pipelines",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-pipelines/pipelines-rhel9-operator",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift_pipelines:1"
    ]
  }
]