https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-01T09:21:45.855685+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-75886 CVE-2026-75886 — Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token f… 2026-10-01T09:21:45.859189+00:00

Affected: Red Hat OpenShift Container Platform 4.19, Red Hat OpenShift Container Platform 4.20, Red Hat OpenShift Container Platform 4.21, Red Hat OpenShift Container Platform 4.22, Red Hat OpenShift Container Platform 4

A flaw was found in openshift/console. An unauthenticated remote attacker can exploit a misconfiguration in the CatalogdHandler, which lacks proper authentication, and the forwarding of the `openshift-session-token` cookie. This allows the attacker to send requests to the in-cluster catalogd service, leading to the disclosure of the internal operator-catalog index and providing a relay into the openshift-catalogd namespace.