70723 matches found
CVE-2026-73834
A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. Certain ACM wrapper Custom Resources that embed Secret data are collected without redaction. When an administrator runs must-gather, credentials and tokens are captured in cleartext in the resulti...
CVE-2026-66793
A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controll...
EUVD-2026-60951
A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controll...
CVE-2026-66793
In Red Hat Advanced Cluster Management for Kubernetes, the governance-policy-addon-controller allows a user with annotation permissions on a namespaced ManagedClusterAddOn resource to override the governance-policy container image. The attacker's image runs with cluster-admin privileges on the ma...
CVE-2026-66793
A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controll...
CVE-2026-66793 Governance-policy-addon-controller: governance-policy-addon-controller: arbitrary container image override via managedclusteraddon annotation enables rce on spoke
A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controll...
Important: Red Hat Security Advisory: python3 security update
An update for python3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
The Vulners team has released an updated version Getsploit
The Vulners team has released an updated version ofGetsploit. The utility allows you to search for public exploits in the Vulners.com database. It supports both an online mode search queries are executed on the Vulners server and a fully offline mode exploit data from Vulners is downloaded to a...
Moderate: Red Hat Security Advisory: attr security update
An update for attr is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
Moderate: Red Hat Security Advisory: pam security update
An update for pam is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.34 bug fix and security update
Red Hat OpenShift Container Platform release 4.20.34 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: openssl: openssl-3.5.6-0.5.hum1 aarch64, x8664 openssl-config-fips-3.5.6-0.5.hum1 aarch64, x8664 openssl-devel-3.5.6-0.5.hum1 aarch64, x8664 openssl-devel-engine-3.5.6-0.5.hum1 aarch64, x8664...
RHSA-2026:55930 Red Hat Security Advisory: mod_http2 security update
Bulletin has no description...
RHSA-2026:55865 Red Hat Security Advisory: gstreamer1-plugins-bad-free and gstreamer1-plugins-ugly-free security update
Bulletin has no description...
RHSA-2026:55892 Red Hat Security Advisory: unbound security update
Bulletin has no description...
RHSA-2026:55862 Red Hat Security Advisory: haproxy security update
Bulletin has no description...
RHSA-2026:55860 Red Hat Security Advisory: haproxy security update
Bulletin has no description...
RHSA-2026:55859 Red Hat Security Advisory: haproxy security update
Bulletin has no description...