Red Hat Enhancement Advisory: Red Hat build of MicroShift 4.18.1 security update
Affects Red HatSource GCVE Database
Public exploit available (Metasploit) · 18% EPSS.
Data as of 29 Oct 2026, 07:15 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
- EPSS
- 18.9% chance of exploitation in 30 days – higher than 97% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Exploitation evidence
Disclosed: evidence found.
CVE published 25 Feb 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: evidence found.
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 29 Oct 2026.
What to do
AI-suggested
A security update is available in Red Hat build of MicroShift 4.18.1. Users should apply the updated RPM packages and container images as soon as they are available in the RPM repository. Detailed installation instructions are provided in Red Hat's official documentation. Since the update is officially released, applying this update fully mitigates the vulnerability. No additional mitigation steps are indicated in the advisory.
Description
Red Hat has released a security update for its build of MicroShift 4.18.1, a lightweight Kubernetes orchestration solution for edge device deployments. This update addresses a security vulnerability identified as CVE-2024-21626. The advisory recommends all users of MicroShift 4.18 to apply the updated RPM packages and container images. The security impact is rated as Important by Red Hat Product Security, and public exploit code is available via Metasploit. The update includes fixes for several bugs and improvements related to MicroShift operation on various architectures.
References
- access.redhat.com/errata/RHEA-2024:6124 (opens in a new tab)
- access.redhat.com/security/vulnerabilities/RHSB-2024-001 (opens in a new tab)
- issues.redhat.com/browse/OCPBUGS-38848 (opens in a new tab)
- issues.redhat.com/browse/OCPBUGS-38974 (opens in a new tab)
- issues.redhat.com/browse/OCPBUGS-39260 (opens in a new tab)
- issues.redhat.com/browse/OCPBUGS-41510 (opens in a new tab)
- issues.redhat.com/browse/OCPBUGS-45973 (opens in a new tab)
- issues.redhat.com/browse/OCPBUGS-47463 (opens in a new tab)
- issues.redhat.com/browse/OCPBUGS-48577 (opens in a new tab)
- issues.redhat.com/browse/OCPBUGS-49417 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2025/rhea-2024_6124.json (opens in a new tab)