Veille CVE

Mercredi 23 septembre 2026

1 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Red Hat OpenShift Container Platform 4.19 » ✕
  1. CVE-2026-75886 7.2 Élevée

    Red Hat OpenShift Container Platform 4.17 · Red Hat OpenShift Container Platform 4.18 · Red Hat OpenShift Container Platform 4.19 · Red Hat OpenShift Container Platform 4.20

    A flaw was found in openshift/console. An unauthenticated remote attacker can exploit a misconfiguration in the CatalogdHandler, which lacks proper authentication, and the forwarding of the `openshift-session-token` cookie. This allows the attacker to send requests to the in-cluster catalogd service, leading to the disclosure of the internal operator-catalog index and providing a relay into the openshift-catalogd namespace.