2 matches found
CVE-2026-73268
A flaw was found in the cluster-curator-controller component of multicluster engine MCE. A tenant with create or update permissions on ClusterCurator resources can inject an arbitrary Job specification. This is possible because the CreateJob function does not validate user-controlled input when...
9.9CVSS6.3AI score0.00875EPSS
SaveExploits0References3
CVE-2026-73268: Improper Control of Generation of Code
A flaw was found in the cluster-curator-controller component of multicluster engine MCE. A tenant with create or update permissions on ClusterCurator resources can inject an arbitrary Job specification. This is possible because the CreateJob function does not validate user-controlled input when...
9.9CVSS6.3AI score0.00875EPSS
SaveExploits0References2
20