CVE-2017-3881-exploit-cisco-

Cisco Cluster Management ProtocolCMP 처리 코드의 Cisco IOS 및 Cisco IOS XE 소프트웨어 취약점으로 인해 인증되지 않은 원격 공격자가 영향을 받는 장치를 재부팅하거나 상승된 권한으로 원격 코드를 실행할 수 있습니다. 클러스터 관리 프로토콜은 클러스터 구성원 간의 신호 및 명령 프로토콜로 Telnet을 내부적으로 사용합니다. 이 취약점은 두 가지 요소의 조합으로 인해 발생합니다. 1 CMP 관련 Telnet 옵션 사용을 클러스터 구성원 간의 내부 로컬 통신으로만 제한하지 않고 영향을 ...

CVE-2026-69129 KubePi: Insufficient per-cluster authorization checks in cluster management APIs

KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 2.0.0, cluster-scoped APIs do not consistently validate per-cluster access, allowing an authenticated user with cluster management permissions to operate on clusters outside the scope they were granted. Because...

CVE-2026-69129 KubePi: Insufficient per-cluster authorization checks in cluster management APIs

KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 2.0.0, cluster-scoped APIs do not consistently validate per-cluster access, allowing an authenticated user with cluster management permissions to operate on clusters outside the scope they were granted. Because...

CVE-2026-69129

KubePi , a Kubernetes multi-cluster management panel by 1Panel-dev, contains an authorization flaw in versions up to and including 2.0.0 . Cluster-scoped APIs do not consistently validate per-cluster access, meaning an authenticated user granted management rights over one cluster can, under certa...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.13.11 security update

Red Hat Advanced Cluster Management for Kubernetes v2.13 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.14.4 security update

Red Hat Advanced Cluster Management for Kubernetes v2.14 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.17.1 security update

Red Hat Advanced Cluster Management for Kubernetes v2.17 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.16.4 security update

Red Hat Advanced Cluster Management for Kubernetes v2.16 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.13.11 security update

Red Hat Advanced Cluster Management for Kubernetes v2.13 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.15.6 security update

Red Hat Advanced Cluster Management for Kubernetes v2.15 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.11.11 security update

Red Hat Advanced Cluster Management for Kubernetes v2.11 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.17.1 security update

Red Hat Advanced Cluster Management for Kubernetes v2.17 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...

PT-2026-82334

Name of the Vulnerable Software and Affected Versions KubePi versions prior to 2.0.1 Description Cluster-scoped APIs do not consistently validate per-cluster access. This allows an authenticated user with cluster management permissions to operate on clusters outside their granted scope. Because t...

CVE-2026-73137 Multicloud-operators-subscription: multicloud-operators-subscription: cross-namespace secret exfiltration via helmrelease.repo.secretref.namespace

A flaw was found in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management RHACM. A tenant with HelmRelease create permissions can exploit this vulnerability by manipulating the secretRef.Namespace field. This allows the GetSecret function in the HelmRelease...

CVE-2026-73137

A flaw in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management (RHACM) allows a tenant with HelmRelease create permissions to manipulate the secretRef.Namespace field. The GetSecret() function in the HelmRelease controller fails to restrict namespace scope, enabl...

CVE-2026-66787

A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability stems from insufficient validation of advertised IP addresses within EndpointSlice objects. A compromised spoke cluster can exploit this by creating EndpointSlices with...

PT-2026-79124

Name of the Vulnerable Software and Affected Versions Red Hat Advanced Cluster Management affected versions not specified Description A flaw in the multicloud-operators-subscription component allows a tenant with HelmRelease create permissions to manipulate the secretRef.Namespace field. This...

CVE-2026-66793

A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controll...

CVE-2026-75485

A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. The cluster Proxy object is dumped in raw form, bypassing the oc inspect redaction that would normally sanitize sensitive fields. This exposes proxy basic-auth credentials in the must-gather...

CVE-2026-73834

A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. Certain ACM wrapper Custom Resources that embed Secret data are collected without redaction. When an administrator runs must-gather, credentials and tokens are captured in cleartext in the resulti...