Search: CVE-2026-6368

The Red Hat Cost Management Metrics Operator for OpenShift has a security advisory addressing multiple vulnerabilities, including CVE-2026-6368. This operator collects OpenShift usage data by querying Prometheus hourly and uploads metrics to Red Hat's Cost Management service. The advisory references several CVEs with critical severity, including a notable out-of-bounds write vulnerability in the PCRE2 library (CVE-2026-103111) that could lead to arbitrary code execution or denial of service in applications using vulnerable JIT compilation of regular expressions. The advisory does not explicitly list affected versions or confirm patch availability for CVE-2026-6368 but provides guidance to apply all relevant errata and operator updates. No known exploits in the wild are reported.