Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.15.6 security update

Red Hat Advanced Cluster Management for Kubernetes provides centralized management of clusters and applications across public and private cloud environments. The security advisory for version 2.15.6 addresses multiple vulnerabilities identified by numerous CVEs including CVE-2026-10090 and others. The update includes security fixes, bug fixes, and updated container images. The vendor rates the security impact as Important (high severity). No detailed CVSS scores are provided in the advisory. The update is intended to mitigate these vulnerabilities by applying the updated container images and software components.

The vulnerabilities affect Red Hat Advanced Cluster Management for Kubernetes versions from 2.15.0 up to and including 2.15.6. The impact is rated as high severity by Red Hat Product Security, indicating significant security risks if unpatched. Specific impacts are not detailed in the advisory, but the presence of multiple CVEs suggests a broad range of potential security issues. There are no known exploits in the wild reported at this time.

A security update is available in Red Hat Advanced Cluster Management for Kubernetes version 2.15.6. Users should apply this update to remediate the vulnerabilities. Before applying this update, ensure all previously released relevant errata are applied. Follow Red Hat's official guidance for applying updates as detailed in their documentation. No indication is given that no action is required or that the issue is already mitigated without patching.