This Red Hat security advisory (RHSA-2026:7128) covers a security and bug fix update for Red Hat Advanced Cluster Security (RHACS) for Kubernetes, specifically version 4.9.5. It addresses a collection of 12 CVEs, including CVE-2026-25128 and others, which relate to various weaknesses identified by CWEs such as improper input validation, resource management, and cross-site scripting. The advisory notes fixes including the correction of Helm charts that previously did not configure image pull secrets for the scanner ServiceAccount. The update is recommended to mitigate these vulnerabilities and improve security posture.

The vulnerabilities addressed in this update are rated as high severity and affect Red Hat Advanced Cluster Security for Kubernetes. The issues include multiple security weaknesses that could potentially be exploited to compromise the security of the affected system. However, there are no known exploits in the wild reported at this time. The impact includes potential risks associated with the listed CWEs, such as improper input validation and resource management flaws, which could lead to unauthorized actions or denial of service if left unpatched.

Red Hat has released an updated version of RHACS (4.9.5) that includes security patches and bug fixes for the identified vulnerabilities. Users running earlier versions of RHACS are strongly advised to upgrade to version 4.9.5 to apply these fixes. Since this is a product update, remediation requires applying the official vendor update. No additional mitigation steps are specified beyond upgrading to the fixed version.