Product
Unauthenticated SSRF and DoS in OpenShift Console
1 rule 2 TTPs 1 CVEAn unauthenticated vulnerability in the OpenShift console /api/devfile/ endpoints allows remote attackers to perform Server-Side Request Forgery (SSRF) and cause Denial of Service (DoS) via memory exhaustion.
CRIU Restartable Sequences Vulnerability Allows Container Privilege Escalation
1 TTP 1 CVEA flaw, CVE-2026-18107, in CRIU's handling of restartable sequences (rseq) during checkpoint/restore allows a malicious process inside a container to hijack CRIU's parasite code injection, enabling the spoofing of process credentials in the checkpoint image and leading to elevated capabilities and zeroed UIDs/GIDs upon restore.
CVE-2026-15584 Privilege Escalation in OpenShift incluster-checks Tool
1 TTP 1 CVEA privilege escalation vulnerability, CVE-2026-15584, in Red Hat OpenShift's incluster-checks tool allows users with standard edit roles to obtain root access on cluster nodes by exploiting privileged debug pods with host filesystem access created in the shared default namespace.
KubeVirt virt-handler Symlink Vulnerability Leading to Container Escape (CVE-2026-7374)
2 rules 1 TTP 1 CVECVE-2026-7374 allows an authenticated OpenShift user with edit permissions in a single namespace to escalate privileges to full cluster control by exploiting improper symlink validation in KubeVirt's virt-handler component when connecting to VM console sockets.
Multiple Vulnerabilities in Red Hat Enterprise Linux and OpenShift Grafana Component
2 rules 3 TTPsA remote anonymous attacker can exploit multiple vulnerabilities in the Grafana component of Red Hat Enterprise Linux and OpenShift to execute arbitrary code, disclose confidential information, and cause a denial-of-service condition.