Red Hat Multicluster Global Hub 1.3.4 is a set of components for managing multiple hub clusters centrally. A security advisory (RHSA-2026:22423) addresses multiple vulnerabilities including CVE-2026-21728 and 19 others. The CVSS vector for CVE-2026-21728 indicates network attack vector, low attack complexity, no privileges or user interaction required, unchanged scope, no confidentiality or integrity impact, but high impact on availability. The advisory provides updated container images and security fixes in the v1.3.4 release. No known exploits are reported. The update is rated as important by Red Hat Product Security. The vendor advisory directs users to upgrade to the fixed version 1.3.4 for remediation.

The vulnerabilities addressed primarily impact availability of the Red Hat Multicluster Global Hub component, potentially causing denial of service or disruption of cluster management functions. There is no reported impact on confidentiality or integrity. The high severity rating is based on the potential to disrupt availability without requiring privileges or user interaction. No known active exploitation has been reported.

Red Hat has released version 1.3.4 of Multicluster Global Hub which includes security fixes for these vulnerabilities. Users should upgrade to Multicluster Global Hub 1.3.4 to remediate the issues. The vendor advisory (RHSA-2026:22423) is the authoritative source for patch availability and upgrade instructions. No additional mitigation steps are indicated beyond applying the update.