Tag
OpenShift Router Vulnerability CVE-2026-46579: Mutual TLS Bypass via Header Injection
1 rule 2 TTPs 1 CVECVE-2026-46579 describes a vulnerability in the Red Hat OpenShift Router. When a Route is configured with `insecureEdgeTerminationPolicy` set to Allow, the HTTP frontend fails to remove `X-SSL-Client-*` headers from incoming requests, allowing unauthenticated attackers to bypass mutual TLS authentication and impersonate client certificate identities.
OpenShift Router SSRF via FQDN EndpointSlice (CVE-2026-42965)
1 rule 1 TTP 1 CVECVE-2026-42965 describes a server-side request forgery (SSRF) vulnerability in the OpenShift Router where a user with EndpointSlice write access can expose instance credentials by creating a service that proxies requests to a cloud metadata endpoint.
Red Hat OpenShift Tempo Vulnerabilities Allow Remote Exploitation
1 rule 3 TTPsMultiple vulnerabilities in Red Hat OpenShift Tempo allow an unauthenticated remote attacker to bypass security measures, disclose sensitive information, manipulate data, or cause a denial of service condition.
KubeVirt virt-handler Symlink Vulnerability Leading to Container Escape (CVE-2026-7374)
2 rules 1 TTP 1 CVECVE-2026-7374 allows an authenticated OpenShift user with edit permissions in a single namespace to escalate privileges to full cluster control by exploiting improper symlink validation in KubeVirt's virt-handler component when connecting to VM console sockets.
Multiple Vulnerabilities in Red Hat Enterprise Linux and OpenShift Grafana Component
2 rules 3 TTPsA remote anonymous attacker can exploit multiple vulnerabilities in the Grafana component of Red Hat Enterprise Linux and OpenShift to execute arbitrary code, disclose confidential information, and cause a denial-of-service condition.
Multiple Vulnerabilities in Kiali for Red Hat OpenShift Service Mesh
2 rules 4 TTPsAn anonymous remote attacker can exploit multiple vulnerabilities in Kiali for Red Hat OpenShift Service Mesh to gain extended privileges, bypass security measures, manipulate or disclose data, or cause a denial-of-service condition.
Red Hat OpenShift Service Mesh Multiple Vulnerabilities
2 rules 4 TTPsAn anonymous remote attacker can exploit multiple vulnerabilities in Red Hat OpenShift Service Mesh to manipulate files, disclose information, or cause a denial-of-service condition.
Red Hat OpenShift Container Platform Security Bypass Vulnerability
2 rules 1 TTPA remote, authenticated attacker can exploit a vulnerability in Red Hat OpenShift Container Platform to bypass security measures.
Red Hat OpenShift AI odh-dashboard Kubernetes Token Disclosure (CVE-2026-5483)
2 rules 1 TTP 1 CVECVE-2026-5483 is a high-severity vulnerability in the `odh-dashboard` component of Red Hat OpenShift AI (RHOAI) that allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint, potentially leading to unauthorized access to Kubernetes resources.
Red Hat OpenShift AI Llama Stack Unauthorized Access Vulnerability (CVE-2025-12805)
2 rules 1 TTPCVE-2025-12805 describes a flaw in Red Hat OpenShift AI (RHOAI) llama-stack-operator that allows unauthorized access to Llama Stack services in other namespaces via direct network requests due to missing NetworkPolicy restrictions, potentially enabling attackers to view or manipulate sensitive data.
Red Hat OpenShift GitOps Multiple Vulnerabilities
2 rules 1 TTPAn anonymous remote attacker can exploit multiple vulnerabilities in Red Hat OpenShift GitOps to manipulate data, misrepresent information, or cause a denial of service.