Threats Tagged 'cve-2026-32285'

This advisory concerns the Assisted Installer RHEL 9 components integrated with the Multicluster Engine for Kubernetes version 2. 8. 6. The multicluster engine facilitates centralized management of multiple Kubernetes-based clusters across various environments including data centers and clouds. It supports creating new OpenShift Container Platform clusters or importing existing Kubernetes clusters for management and configuration distribution via APIs. The advisory lists multiple CVEs (CVE-2026-32285, CVE-2026-33186, CVE-2026-34986, CVE-2026-35469) affecting these components. No specific technical details about the vulnerabilities or their exploitation are provided, and no patches or fixes are currently available according to the vendor advisory. The severity is rated as high by the source. The vendor advisory does not indicate any mitigation or remediation steps at this time.

Red Hat OpenShift distributed tracing platform (Tempo) 3. 9. 2 addresses multiple security vulnerabilities including an authorization bypass in gRPC-Go due to improper HTTP/2 :path validation, denial-of-service flaws in XPath processing and JSON parsing, and several issues in Go standard libraries affecting certificate validation, race conditions, and resource exhaustion. These fixes prevent unauthorized access, denial-of-service conditions, and potential code execution paths. No breaking changes or deprecations are introduced in this release.