{"vulnerability": "cve-2026-1624", "sightings": [{"uuid": "fa65d870-e580-4f83-a9a9-a52c35786789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16242", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr2ugysfwu2e", "content": "CVE-2026-16242 - red hat openshift container platform 4\nThe Konnectivity proxy-server in Hypershift does not verify the identity of agents connecting to it. This means an attacker who can reach the proxy could connect\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#redhat #CVE #infosec", "creation_timestamp": "2026-07-20T08:22:04.730761Z"}, {"uuid": "c292f7af-38ba-4351-ab4f-a033fc773188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16242", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mr2ux2hzsc2u", "content": "OpenShift hosted control planes: a missing certificate check (CVE-2026-16242, CVSS 9.4) lets a remote attacker read traffic between the control plane and its nodes.\n\nNo fix shipped yet. Restrict the endpoint and watch for unknown agents.", "creation_timestamp": "2026-07-20T08:31:04.114583Z"}, {"uuid": "1a53020d-3ea0-4fb0-bb8b-2c44f94ddbbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16242", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr2xyhv5pa22", "content": "CVE-2026-16242 - Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates\nCVE ID : CVE-2026-16242\n \n Published : July 20, 2026, 8:16 a.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : A flaw was found in the Konnectivity proxy-server co...", "creation_timestamp": "2026-07-20T09:25:32.836426Z"}, {"uuid": "de66b480-79b9-4899-a005-e68001ae8c9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16242", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116951838064648106", "content": "CVE-2026-16242 (CRITICAL, CVSS 9.4) affects Red Hat Logging Subsystem for OpenShift: missing agent auth in Konnectivity proxy-server lets remote attackers intercept/control plane traffic. Restrict endpoint access & check https://radar.offseq.com/threat/cve-2026-16242-missing-authentication-for-critical-function-in-red-hat-logging-subsystem-for-red-hat-e02d26f300d35775 #OffSeq #RedHat #CVE202626242", "creation_timestamp": "2026-07-20T10:30:28.212708Z"}, {"uuid": "6eaa5acf-feea-4879-9c6c-a556189fdc81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16242", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mr33mmn4ec2r", "content": "Red Hat Logging Subsystem for OpenShift hit by CRITICAL CVE-2026-16242 (CVSS 9.4): missing agent auth exposes control-plane traffic. Restrict endpoint access & stay updated via https://radar.offseq.com/threat/cve-2026-16242-missing-authentication-for-critical-function-in-red-hat-logging-subsystem...", "creation_timestamp": "2026-07-20T10:30:30.001432Z"}, {"uuid": "e472a5ff-cee1-42b1-940e-843125cc9e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16242", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mr3azjkgm62u", "content": "CVE-2026-16242 - Critical authentication bypass in Konnectivity proxy-server. CVSS 9.4. Unpatched. Attackers can intercept control-plane traffic. Isolate affected systems immediately. #CVE #Konnectivity #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-16242/", "creation_timestamp": "2026-07-20T12:07:11.329387Z"}, {"uuid": "1eceb83f-980c-459a-986b-14e9f38490fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16242", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116952218421513913", "content": "CVE-2026-16242 - Critical authentication bypass in Konnectivity proxy-server. CVSS 9.4. Unpatched. Attackers can intercept control-plane traffic. Isolate affected systems immediately. #CVE #Konnectivity #infosec\nhttps://www.valtersit.com/cve/CVE-2026-16242/", "creation_timestamp": "2026-07-20T12:07:12.341862Z"}, {"uuid": "bf1336df-f8bc-4309-a0f6-4c2a406fff8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16244", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3nsjha762i", "content": "CVE-2026-16244 - itsourcecode Hospital Management System prescriptionorderreport.php sql injection\nCVE ID : CVE-2026-16244\n \n Published : July 20, 2026, 1:16 p.m. | 27\u00a0minutes ago\n \n Description : A security vulnerability has been detected in itsourcecode Hospital Management S...", "creation_timestamp": "2026-07-20T15:55:55.042936Z"}, {"uuid": "a4983d27-25df-4337-bb0c-9e3ff6ca67bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16248", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3onf773m23", "content": "CVE-2026-16248 - Tenda AC10 httpd/netctrl AdvSetLanip fromAdvSetLanip stack-based overflow\nCVE ID : CVE-2026-16248\n \n Published : July 20, 2026, 1:16 p.m. | 27\u00a0minutes ago\n \n Description : A vulnerability was found in Tenda AC10 16.03.10.09_multi_TDE01. This issue affects the ...", "creation_timestamp": "2026-07-20T16:10:56.528898Z"}, {"uuid": "5e942478-6eab-43a2-935f-a3d95b6c97bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16242", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrfgr5crus2l", "content": "A Konnectivity vulnerability (CVE-2026-16242, CVSS 9.4) lets unauthenticated attackers proxy and modify control-plane traffic. See the fix and mitigation.\n\n#Konnectivity #Kubernetes #CVE202616242 #CloudSecurity #ControlPlane #AuthBypass #InfoSec #PatchNow", "creation_timestamp": "2026-07-24T13:16:30.270956Z"}]}