Critical: Red Hat Security Advisory: multicluster engine for Kubernetes v2.8.9 security update

🗓️ 29 Jul 2026 07:36:44Reported by RedHatType

This is a critical security update for Red Hat multicluster engine for Kubernetes v2.8.9 GA release with fixes and updated images.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale Cloud installation tool (cloudkit) are now fixed in 5.2.3.8 or higher and 6.0.1.1 or higher	10 Aug 202622:34	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in js-yaml affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	25 Aug 202618:06	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	22 Sep 202613:26	–	ibm
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale Cluster Export Services (CES) S3 are now addressed in 5.2.3.9 or higher and 6.0.1.0 or higher	24 Jul 202615:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Application Modernization Accelerator is affected by multiple vulnerabilities found in Java, JavaScript and IBM WebSphere Application Server Liberty	28 Aug 202610:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in js-yaml (CVE-2026-59869)	21 Sep 202607:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex	20 Jul 202615:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses js-yaml-4.1.1.tgz which is vulnerable to multiple CVEs.	27 Aug 202619:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization	27 Aug 202619:23	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	1 Oct 202609:42	–	ibm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2026-16242
access	www.access.redhat.com/security/cve/CVE-2026-17107
access	www.access.redhat.com/security/cve/CVE-2026-25681
access	www.access.redhat.com/security/cve/CVE-2026-27136
access	www.access.redhat.com/security/cve/CVE-2026-27145
access	www.access.redhat.com/security/cve/CVE-2026-29181
access	www.access.redhat.com/security/cve/CVE-2026-33811
access	www.access.redhat.com/security/cve/CVE-2026-39821
access	www.access.redhat.com/security/cve/CVE-2026-39828
access	www.access.redhat.com/security/cve/CVE-2026-39829

03 Oct 2026 16:14Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.17.5 - 9.6

EPSS0.04002

SSVC