CVE-2026-66787

A flaw in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes allows for cross-cluster DNS spoofing . The vulnerability is caused by insufficient validation of advertised IP addresses within EndpointSlice objects . An attacker who has compromised a spoke cluster can cre...

CVE-2026-66787

A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability stems from insufficient validation of advertised IP addresses within EndpointSlice objects. A compromised spoke cluster can exploit this by creating EndpointSlices with...