Red Hat OpenShift Container Platform: Mehrere Schwachstellen ermöglichen Denial of Service
Affects Bundesamt für Sicherheit in der Informationstechnik Red HatSource GCVE Database
Mentioned vulnerabilities
Not known to be exploited · fixed in Red Hat package updates : update Bundesamt für Sicherheit in der Informationstechnik Red Hat when convenient.
Data as of 27 Oct 2026, 01:28 UTC
Rated Medium by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
- Patch
- Available – fixed in 4.20.6
Exploitation evidence
Disclosed: evidence found.
CVE published 2 Dec 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
Red Hat has released OpenShift Container Platform 4.20.6 which addresses these vulnerabilities. Users should upgrade to this version using the OpenShift CLI or web console as soon as possible. Follow the official upgrade documentation to fully apply the asynchronous errata update. No additional mitigation steps are indicated beyond applying the official update.
Description
Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.20 allow denial of service conditions due to issues in Helm chart processing. Red Hat has released version 4.20.6 to address these flaws with a security impact rated as Moderate. Users of OpenShift Container Platform 4.20 are advised to upgrade to the fixed release to mitigate these vulnerabilities.
References
- wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2727.json (opens in a new tab)
- wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2727 (opens in a new tab)
- access.redhat.com/errata/RHSA-2025:22257 (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:2129 (opens in a new tab)
- lists.suse.com/pipermail/sle-security-updates/2026-May/025795.html (opens in a new tab)
- lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/E3IHNXEG2P5U44VJFWYSBUQWBQ4GFJYP/ (opens in a new tab)