Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…
EPSS 1.9%top 22%

Red Hat Security Advisory: Technical preview of the satellite/iop-vmaas-rhel9 container image

0
High
Published: 05/07/2026 (05/07/2026, 15:58:26 UTC)
Source: GCVE Database
Vendor/Project: Red Hat Product Security
Product: Red Hat

Description

Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services, and configuration settings.

Affected software

Affected versions
Red HatRed Hat Advanced Cluster Management for KubernetesRed Hat Advanced Cluster Management for Kubernetes 2.15amd64registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:b54f4ec7c1e1f45077ad840b6ddbe3388b640f3acc8b29f68ff59547805ee64d_amd64Red Hat OpenStack Services on OpenShiftRed Hat OpenStack Services on OpenShift 18.0registry.redhat.io/rhoso-operators/barbican-rhel9-operator@sha256:93cca70ca2d64dff06450c3e39f6b69c5287e57b3a4465fc31a45ce6247e4aae_amd64Red Hat SatelliteRed Hat Satellite 6.18registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:8bc6388b3b83875d286cb3b5a4bd5f5157a9634350611019770fe44f608e3c34_amd64

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 07/30/2026, 11:49:46 UTC

Technical Analysis

This advisory covers the release of Red Hat OpenShift Container Platform 4.16.60, which includes fixes for several bugs and security vulnerabilities, including CVE-2025-61726 and related CVEs. The platform is a Kubernetes application platform for cloud and on-premise deployments. The CVE-2025-61726 vulnerability has a CVSS vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating it can be exploited remotely without privileges or user interaction and causes a high impact on availability without affecting confidentiality or integrity. The advisory provides updated container images and references RPM package updates in a separate errata. Users are instructed to upgrade their clusters using official Red Hat documentation and tools. The vendor rates the security impact as critical and important for the update.

Potential Impact

The vulnerability CVE-2025-61726 affects the availability of the OpenShift Container Platform 4.16. It can be exploited remotely without authentication or user interaction, potentially causing denial of service or disruption of service availability. There is no impact on confidentiality or integrity. The update addresses this and other related vulnerabilities, improving the stability and security of the platform.

Mitigation Recommendations

Red Hat has released OpenShift Container Platform 4.16.60 with updated container images and RPM packages that fix the identified vulnerabilities. Users should upgrade to this version following the official Red Hat upgrade instructions available in the release notes and documentation. The vendor advisory confirms the availability of this update and recommends applying it promptly to mitigate the security risks.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Csaf Category
csaf_security_advisory
Csaf Version
2.0
Publisher
Red Hat Product Security
Advisory Id
RHSA-2026:8151
Cve Count
11
Additional Cves
["CVE-2025-61728","CVE-2025-61729","CVE-2025-68121","CVE-2025-68151","CVE-2026-21441","CVE-2026-25679","CVE-2026-26017","CVE-2026-26018","CVE-2026-27137","CVE-2026-33186"]
Cvss Version
3.1

Threat ID: 6a160954e29bf47b5061952f

Added to database: 05/26/2026, 20:57:56 UTC

Last enriched: 07/30/2026, 11:49:46 UTC

Last updated: 07/31/2026, 22:29:54 UTC

Views: 94

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

External Links

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses