6063 matches found
CVE-2026-66878
A flaw was found in multicloud-operators-subscription. A privileged user, specifically a namespace administrator capable of creating Channel and Subscription resources, can exploit this vulnerability. By manipulating the Channel.Spec.SecretRef.Namespace field, the user can cause the system to cop...
CVE-2026-66878
A flaw was found in multicloud-operators-subscription. A privileged user, specifically a namespace administrator capable of creating Channel and Subscription resources, can exploit this vulnerability. By manipulating the Channel.Spec.SecretRef.Namespace field, the user can cause the system to cop...
CVE-2026-70398 Multicloud-integrations: multicloud-integrations: gitopscluster.spec.argoserver.argonamespace writes spoke bearer tokens to attacker-chosen namespace
A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management RHACM. This vulnerability allows an authenticated user, referred to as a tenant, to manipulate the GitOpsCluster controller. By exploiting this, a tenant can redirect sensitive spoke cluster bearer...
PT-2026-70967
Name of the Vulnerable Software and Affected Versions multicloud-operators-channel affected versions not specified Description A flaw in the multicloud-operators-channel component allows a user with specific permissions to manipulate the handling of Secrets across different namespaces. This issue...
CVE-2026-66878: Authorization Bypass Through User-Controlled Key
A flaw was found in multicloud-operators-subscription. A privileged user, specifically a namespace administrator capable of creating Channel and Subscription resources, can exploit this vulnerability. By manipulating the Channel.Spec.SecretRef.Namespace field, the user can cause the system to cop...
PT-2026-70968
Name of the Vulnerable Software and Affected Versions multicloud-operators-subscription affected versions not specified Description A flaw exists where a privileged user, such as a namespace administrator with permissions to create Channel and Subscription resources, can perform cross-namespace...
SUSE CVE-2026-68335
In the Linux kernel, the following vulnerability has been resolved: rds: drop incoming messages that cross network namespace boundaries rdsfindbound looks up the destination socket using a global rhashtable keyed solely on addr, port, scopeid. Network namespaces are not part of the key, so a send...
CVE-2026-66799
A flaw was found in the cluster-backup-operator. A privileged user with administrative access to a specific namespace could exploit a vulnerability in the backup restoration process. This flaw allows them to redirect sensitive information, such as cloud provider credentials and access tokens, fro...
CVE-2026-66798
A flaw was found in cluster-backup-operator. A namespace administrator in open-cluster-management-backup can create a Restore Custom Resource CR with malicious hooks. These hooks allow the execution of arbitrary commands within any matching restored pod, leading to the exfiltration of...
CVE-2026-68142
A flaw was found in the geneve component of the Linux kernel. A local attacker, with CAPNETADMIN privileges in a specific network namespace, could bypass intended permission checks. This allows them to modify the configuration of a geneve network device in a different network namespace, potential...
CVE-2026-68294
A flaw was found in the Linux kernel's QRTR Qualcomm IPC Router networking component. An unprivileged local attacker can create a QRTR socket in a separate network namespace. Due to improper handling of global state variables, this allows the attacker to send datagrams and control-plane messages ...
CVE-2026-68335
A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS component. The RDS component incorrectly handles incoming messages that cross network namespace boundaries, allowing a sender in one network namespace to deliver a message to a socket in a different network namespace. This can...
CVE-2026-68290
A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS TCP implementation. A race condition can occur during network namespace teardown, where a concurrent system control sysctl write operation attempts to access a socket that has already been freed. This use-after-free vulnerabilit...
udisks2: udisks2: Local Privilege Escalation via as-user option spoofing
A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method. This allows the attacker to spoof the 'as-user' parameter, mounting filesystems on...
CVE-2026-50237
A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy. A namespace tenant can plant a ProjectHelmChartRepository with an arbitrary URL that the console pod fetches server-side, bypassing tenant egress restrictions. Combined with catalog metadata...
CVE-2026-50237
A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy. A namespace tenant can plant a ProjectHelmChartRepository with an arbitrary URL that the console pod fetches server-side, bypassing tenant egress restrictions. Combined with catalog metadata...
Secrets Disclosure
Apache Airflow is vulnerable to Secrets Disclosure. The vulnerability is due to the AWS Systems Manager Parameter Store and Secrets Manager backends resolving a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed, where a caller in one team...
net: qrtr: restrict socket creation to the initial network namespace
...