This security advisory from Red Hat Product Security covers Red Hat OpenShift Builds version 1.7.4, which includes fixes for 12 CVEs including CVE-2026-10840 and others. The vulnerabilities span multiple CWEs such as improper access control, resource management errors, and potential denial of service conditions. The advisory recommends upgrading from version 1.7.3 to 1.7.4 to address these issues. No detailed CVSS metrics or exploit details are provided. The affected product is Red Hat OpenShift Builds, and the advisory is identified as RHSA-2026:36648.

The vulnerabilities addressed in this advisory are classified as high severity, indicating a significant risk to affected Red Hat OpenShift Builds prior to version 1.7.4. The exact impact of each CVE is not detailed in the provided data, but the presence of multiple CWEs suggests potential issues such as privilege escalation, denial of service, and security bypass. No known exploits have been reported in the wild at the time of publication.

Red Hat recommends that users of Red Hat OpenShift Builds version 1.7.3 upgrade to version 1.7.4 to remediate the identified vulnerabilities. No other mitigation or temporary fixes are indicated. Patch status is confirmed by the vendor advisory, which provides an official fix in version 1.7.4.