Threats Tagged 'cve-2026-66795'
View all threats tagged with 'cve-2026-66795'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-66795'
Click on any threat for detailed analysis and mitigation recommendations
A flaw was found in the managedcluster-import-controller. (CVE-2026-66795)CVE-2026-66795 0 A critical vulnerability exists in the managedcluster-import-controller of Red Hat OpenShift Multicluster Engine. The Certificate Signing Request (CSR) auto-approval logic fails to properly validate incoming CSRs by not inspecting the signer name or decoding the PEM-encoded x509 CSR. This flaw allows a privileged service account on a spoke cluster to submit a malicious CSR, potentially escalating privileges to obtain administrative credentials on the hub cluster. No official fix or mitigation currently meets Red Hat's criteria for deployment and stability. Join the discussion | GCVE Database | 08/17/2026, 21:31:25 UTC Added: 08/17/2026, 22:33:26 UTC |
CVE-2026-66795: Improper Certificate Validation in Red Hat Multicluster Engine for KubernetesCVE-2026-66795 0 CVE-2026-66795 is a critical vulnerability in Red Hat OpenShift Multicluster Engine's managedcluster-import-controller. The flaw involves improper validation of Certificate Signing Requests (CSRs) in the auto-approval logic, specifically failing to inspect the signer name or decode the PEM-encoded x509 CSR. This allows a privileged service account on a spoke cluster to submit a malicious CSR, potentially escalating privileges to obtain administrative credentials on the hub cluster. No official fix or mitigation currently meets Red Hat's criteria for deployment and stability. Join the discussion | CVE Database V5 | 08/17/2026, 20:45:33 UTC Added: 08/17/2026, 20:56:42 UTC |
Showing 1 to 2 of 2 results