CVE-2026-10840

A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources via the tekton-scheduler-role ClusterRole. When Kueue or cert-manager CRDs are present on the...

CVE-2026-10840

A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources via the tekton-scheduler-role ClusterRole. When Kueue or cert-manager CRDs are present on the...

PT-2026-46191

Name of the Vulnerable Software and Affected Versions OpenShift Pipelines operator affected versions not specified Description A flaw in the OpenShift Pipelines operator occurs because the tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue...

Red Hat OpenShift Pipelines 权限许可和访问控制问题漏洞

Red Hat OpenShift Pipelines is a Kubernetes-native continuous integration and continuous delivery platform developed by Red Hat Inc. There is a security vulnerability in Red Hat OpenShift Pipelines. This vulnerability stems from the ClusterRoleBinding for tekton-scheduler-rolebinding granting the...

CVE-2026-27136 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-27136 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

CVE-2026-42506 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-42506 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

CVE-2026-39828 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-39828 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

CVE-2026-39830 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-39830 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

CVE-2026-42502 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-42502 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

CVE-2026-46597 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-46597 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

CVE-2026-39821 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-39821 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

CVE-2026-25680 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-25680 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

CVE-2026-39829 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-39829 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

CVE-2026-39834 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-39834 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

CVE-2026-39835 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-39835 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

CVE-2026-39827 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-39827 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

CVE-2026-25681 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-25681 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

CLEANSTART-2026-BN28456 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-32952, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-34986, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, ghsa-78h2-9frx-2jm8, ghsa-p77j-4mvh-x3m3 applied in versions: 1.19.4-r0, 1.19.4-r1, 1.19.4-r2

Multiple security vulnerabilities affect the cert-manager package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GZ35045 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-32952, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-gx3x-vq4p-mhhv, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 2.4.0-r1, 2.4.0-r2, 2.4.0-r3

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-35469 affecting package cert-manager for versions less than 1.12.15-7

CVE-2026-35469 affecting package cert-manager for versions less than 1.12.15-7. A patched version of the package is available...