https://vulnerability.circl.lu/cna-root/redhat/recent 2026-08-18T17:18:58.007200+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Latest vulnerabilities published by the CNAs operating under the redhat root of the CVE Program. https://vulnerability.circl.lu/vuln/cve-2026-75924 2026-08-18T16:27:58.232000+00:00 Managed-serviceaccount: managed-serviceaccount: hub addon-manager clusterrole grants cluster-wide secret read/write and csr approval

Managed-serviceaccount: managed-serviceaccount: hub addon-manager clusterrole grants cluster-wide secret read/write and csr approval

2026-08-18T16:27:58.232000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-71365 2026-08-18T15:51:10.748000+00:00 Awx: webhook status callback ssrf leaks the git pat

Awx: webhook status callback ssrf leaks the git pat

2026-08-18T15:51:10.748000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-12564 2026-08-18T15:50:54.646000+00:00 Automation-controller: automation-controller: kubernetes service account token exfiltration via hashicorp vault credential ssrf

Automation-controller: automation-controller: kubernetes service account token exfiltration via hashicorp vault credential ssrf

2026-08-18T15:50:54.646000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-75485 2026-08-18T15:15:42.769000+00:00 Must-gather: must-gather: cluster proxy object dumped raw, bypassing inspect redaction of proxy basic-auth credentials

Must-gather: must-gather: cluster proxy object dumped raw, bypassing inspect redaction of proxy basic-auth credentials

2026-08-18T15:15:42.769000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-73834 2026-08-18T15:15:38.508000+00:00 Must-gather: must-gather: embedded secret data in acm wrapper crs collected without redaction

Must-gather: must-gather: embedded secret data in acm wrapper crs collected without redaction

2026-08-18T15:15:38.508000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-66793 2026-08-18T15:02:31.273000+00:00 Governance-policy-addon-controller: governance-policy-addon-controller: arbitrary container image override via managedclusteraddon annotation enables rce on spoke

Governance-policy-addon-controller: governance-policy-addon-controller: arbitrary container image override via managedclusteraddon annotation enables rce on spoke

2026-08-18T15:02:31.273000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-75032 2026-08-18T14:33:47.048000+00:00 Bluez: bluez: out-of-bounds read in avrcp parse_media_element and parse_media_folder

Bluez: bluez: out-of-bounds read in avrcp parse_media_element and parse_media_folder

2026-08-18T14:33:47.048000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-19608 2026-08-18T11:08:20.247000+00:00 Keycloak-services: keycloak-services: name-only group claims let same-name groups satisfy path-specific group policies

Keycloak-services: keycloak-services: name-only group claims let same-name groups satisfy path-specific group policies

2026-08-18T11:08:20.247000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-66795 2026-08-17T20:45:33.786000+00:00 Managedcluster-import-controller: managedcluster-import-controller: csr auto-approver does not validate certificate subject, signername, or requester identity

Managedcluster-import-controller: managedcluster-import-controller: csr auto-approver does not validate certificate subject, signername, or requester identity

2026-08-17T20:45:33.786000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-71472 2026-08-17T19:28:43.057000+00:00 Acm-search-v2-rhel9: search-v2-operator: shell-command and sql injection in postgresql-start.sh via cr-supplied work_mem

Acm-search-v2-rhel9: search-v2-operator: shell-command and sql injection in postgresql-start.sh via cr-supplied work_mem

2026-08-17T19:28:43.057000+00:00