Vulnerability-Lookup

RHSA-2026:85227

Vulnerability from csaf_redhat - Published: 2026-10-19 14:44 - Updated: 2026-10-19 17:30

Summary

Red Hat Security Advisory: Submariner v0.23 security fixes and container updates

Severity

Important

Notes

Topic: Submariner v0.23 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat Advanced Cluster Management for Kubernetes v2.16

Details: Submariner is a Kubernetes operator that enables cross-cluster connectivity for services and pods, implementing KEP-1645 (Multi-Cluster Services API). After deploying the Submariner operator, it can enable direct networking between pods and services across different Kubernetes clusters. For more information about Submariner, see the Submariner open source community website at: https://submariner.io/.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-32936

A flaw was found in CoreDNS, a DNS server that chains plugins. A remote, unauthenticated attacker can exploit this vulnerability by repeatedly sending oversized DNS-over-HTTPS (DoH) GET requests. The GET path, unlike the POST path, lacks size validation before processing large `dns=` query parameter values. This can lead to high CPU usage, significant memory allocations, and increased garbage collection, resulting in a Denial of Service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1284 - Improper Validation of Specified Quantity in Input

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64	—	Vendor Fix fix Workaround

Known not affected 29 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x	—	Workaround

Threats

Impact Moderate

CVE-2026-35579

A flaw was found in CoreDNS. An unauthenticated network attacker can exploit incorrect handling of TSIG (Transaction Signature) authentication in the gRPC, QUIC, DoH (DNS over HTTPS), and DoH3 transport implementations. This vulnerability allows an attacker to bypass TSIG protection, leading to unauthorized access to functionalities such as zone transfers and dynamic DNS updates. For DoH and DoH3, the issue is more severe as any request with a TSIG record is treated as authenticated, even with an invalid key.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-303 - Incorrect Implementation of Authentication Algorithm

Affected products

Fixed 4 products, the same list as for CVE-2026-32936

Known not affected 29 products, the same list as for CVE-2026-32936

Threats

Impact Important

CVE-2026-63209

A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads to out-of-bounds memory access, crashing the application and resulting in a Denial of Service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-823 - Use of Out-of-range Pointer Offset

Affected products

Fixed 4 products, the same list as for CVE-2026-32936

Known not affected 29 products, the same list as for CVE-2026-32936

Threats

Impact Important

CVE-2026-66780

A flaw was found in the submariner-operator component. The `submariner-k8s-broker-cluster` Role, which is assigned to joined clusters, possesses excessive permissions. This allows a compromised cluster to alter network configurations, specifically by overwriting other clusters' endpoint information. Consequently, an attacker can redirect inter-cluster tunnel traffic, enabling a Man-in-the-Middle (MITM) attack across the entire cluster mesh.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-532 - Insertion of Sensitive Information into Log File

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64	—	Vendor Fix fix Workaround

Known not affected 25 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x	—	Workaround

Threats

Impact Important

CVE-2026-66781

A flaw was found in the Submariner operator. The Submariner Custom Resource (CR), used for configuring network connectivity, stores the IPsec pre-shared key (PSK) in an unencrypted format. This key, which is critical for securing communication between Kubernetes clusters, can be accessed by unauthorized parties. Such access enables an attacker to passively decrypt network traffic flowing between any two clusters in the mesh, resulting in sensitive information disclosure.

5.4 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE-749 - Exposed Dangerous Method or Function

Affected products

Fixed 8 products, the same list as for CVE-2026-66780

Known not affected 25 products, the same list as for CVE-2026-66780

Threats

Impact Important

CVE-2026-66782

A flaw was found in the Submariner operator. This vulnerability allows for the exposure of a long-lived broker service account (SA) bearer token within the Submariner Custom Resource (CR) specification. An attacker with access to the cluster's etcd database or through `kubectl get` commands could obtain this token. The possession of this token grants full control over the mesh network, enabling unauthorized management of network resources such as endpoints and secrets.

5.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N

CWE-269 - Improper Privilege Management

Affected products

Fixed 8 products, the same list as for CVE-2026-66780

Known not affected 25 products, the same list as for CVE-2026-66780

Threats

Impact Important

CVE-2026-66783

A flaw was found in the `submariner-operator` component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability allows a cluster administrator, or any user with permissions to modify the Submariner Custom Resource (CR), to specify an unvalidated image path. This lack of validation enables an attacker to execute arbitrary code with elevated privileges across the entire cluster, including control-plane nodes, by deploying a malicious image.

4.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

CWE-1357 - Reliance on Insufficiently Trustworthy Component

Affected products

Fixed 8 products, the same list as for CVE-2026-66780

Known not affected 25 products, the same list as for CVE-2026-66780

Threats

Impact Important

CVE-2026-66785

A flaw was found in Submariner. This vulnerability allows a malicious cluster (spoke) to redirect network traffic from other connected clusters (peer clusters) by publishing a specially crafted network endpoint. The system fails to properly validate the network subnets provided by the malicious cluster, enabling it to declare arbitrary network ranges. Consequently, all network traffic intended for these arbitrary ranges from peer clusters will be rerouted through the attacker's tunnel, potentially leading to unauthorized information disclosure or network disruption.

8.7 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

CWE-345 - Insufficient Verification of Data Authenticity

Affected products

Fixed 28 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x	—	Vendor Fix fix Workaround

Known not affected 5 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64	—	Workaround

Threats

Impact Moderate

CVE-2026-66786

A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition (CRD) without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This allows an attacker to inject arbitrary configuration parameters or execute commands through leftupdown hooks, leading to remote code execution as root on the gateway node.

9.1 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Affected products

Fixed 28 products, the same list as for CVE-2026-66785

Known not affected 5 products, the same list as for CVE-2026-66785

Threats

Impact Moderate

CVE-2026-66787

A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability stems from insufficient validation of advertised IP addresses within EndpointSlice objects. A compromised spoke cluster can exploit this by creating EndpointSlices with attacker-controlled IP addresses, causing other clusters' lighthouse DNS to redirect legitimate service traffic to malicious endpoints. This enables a remote attacker to conduct transparent Man-in-the-Middle (MITM) attacks on cross-cluster service communications, potentially leading to unauthorized information disclosure and data manipulation.

8.7 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

CWE-345 - Insufficient Verification of Data Authenticity

Affected products

Fixed 16 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64	—	Vendor Fix fix Workaround

Known not affected 17 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x	—	Workaround

Threats

Impact Important

CVE-2026-66788

A flaw was found in Lighthouse. A remote attacker, by compromising a spoke cluster, can exploit a vulnerability where the destination namespace for resource injection is derived from an attacker-controlled label or annotation on the broker object. This allows the attacker to inject unauthorized EndpointSlices and ServiceImports into any namespace on peer clusters, including critical system namespaces like kube-system and openshift-*. This could lead to privilege escalation or other forms of system compromise within the cluster.

9.9 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H

CWE-1104 - Use of Unmaintained Third Party Components

Affected products

Fixed 16 products, the same list as for CVE-2026-66787

Known not affected 17 products, the same list as for CVE-2026-66787

Threats

Impact Important

References

64 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:85227	self
https://access.redhat.com/security/cve/CVE-2026-32936	external
https://access.redhat.com/security/cve/CVE-2026-35579	external
https://access.redhat.com/security/cve/CVE-2026-63209	external
https://access.redhat.com/security/cve/CVE-2026-66780	external
https://access.redhat.com/security/cve/CVE-2026-66781	external
https://access.redhat.com/security/cve/CVE-2026-66782	external
https://access.redhat.com/security/cve/CVE-2026-66783	external
https://access.redhat.com/security/cve/CVE-2026-66785	external
https://access.redhat.com/security/cve/CVE-2026-66786	external
https://access.redhat.com/security/cve/CVE-2026-66787	external
https://access.redhat.com/security/cve/CVE-2026-66788	external
https://access.redhat.com/security/updates/classi…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-32936	self
https://bugzilla.redhat.com/show_bug.cgi?id=2466869	external
https://www.cve.org/CVERecord?id=CVE-2026-32936	external
https://nvd.nist.gov/vuln/detail/CVE-2026-32936	external
https://github.com/coredns/coredns/releases/tag/v1.14.3	external
https://github.com/coredns/coredns/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-35579	self
https://bugzilla.redhat.com/show_bug.cgi?id=2466905	external
https://www.cve.org/CVERecord?id=CVE-2026-35579	external
https://nvd.nist.gov/vuln/detail/CVE-2026-35579	external
https://github.com/coredns/coredns/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-63209	self
https://bugzilla.redhat.com/show_bug.cgi?id=2543236	external
https://www.cve.org/CVERecord?id=CVE-2026-63209	external
https://nvd.nist.gov/vuln/detail/CVE-2026-63209	external
https://github.com/klauspost/compress/commit/5392…	external
https://github.com/klauspost/compress/releases/ta…	external
https://github.com/klauspost/compress/security/ad…	external
https://access.redhat.com/security/cve/CVE-2026-66780	self
https://bugzilla.redhat.com/show_bug.cgi?id=2507524	external
https://www.cve.org/CVERecord?id=CVE-2026-66780	external
https://nvd.nist.gov/vuln/detail/CVE-2026-66780	external
https://access.redhat.com/security/cve/CVE-2026-66781	self
https://bugzilla.redhat.com/show_bug.cgi?id=2507526	external
https://www.cve.org/CVERecord?id=CVE-2026-66781	external
https://nvd.nist.gov/vuln/detail/CVE-2026-66781	external
https://access.redhat.com/security/cve/CVE-2026-66782	self
https://bugzilla.redhat.com/show_bug.cgi?id=2507527	external
https://www.cve.org/CVERecord?id=CVE-2026-66782	external
https://nvd.nist.gov/vuln/detail/CVE-2026-66782	external
https://access.redhat.com/security/cve/CVE-2026-66783	self
https://bugzilla.redhat.com/show_bug.cgi?id=2507528	external
https://www.cve.org/CVERecord?id=CVE-2026-66783	external
https://nvd.nist.gov/vuln/detail/CVE-2026-66783	external
https://access.redhat.com/security/cve/CVE-2026-66785	self
https://bugzilla.redhat.com/show_bug.cgi?id=2507530	external
https://www.cve.org/CVERecord?id=CVE-2026-66785	external
https://nvd.nist.gov/vuln/detail/CVE-2026-66785	external
https://access.redhat.com/security/cve/CVE-2026-66786	self
https://bugzilla.redhat.com/show_bug.cgi?id=2507531	external
https://www.cve.org/CVERecord?id=CVE-2026-66786	external
https://nvd.nist.gov/vuln/detail/CVE-2026-66786	external
https://access.redhat.com/security/cve/CVE-2026-66787	self
https://bugzilla.redhat.com/show_bug.cgi?id=2507532	external
https://www.cve.org/CVERecord?id=CVE-2026-66787	external
https://nvd.nist.gov/vuln/detail/CVE-2026-66787	external
https://access.redhat.com/security/cve/CVE-2026-66788	self
https://bugzilla.redhat.com/show_bug.cgi?id=2507533	external
https://www.cve.org/CVERecord?id=CVE-2026-66788	external
https://nvd.nist.gov/vuln/detail/CVE-2026-66788	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Submariner v0.23 General Availability release images, which provide enhancements, security fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.\nRed Hat Advanced Cluster Management for Kubernetes v2.16",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Submariner is a Kubernetes operator that enables cross-cluster connectivity for services and pods, implementing KEP-1645 (Multi-Cluster Services API). After deploying the Submariner operator, it can enable direct networking between pods and services across different Kubernetes clusters.\n\nFor more information about Submariner, see the Submariner open source community website at: https://submariner.io/.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:85227",
        "url": "https://access.redhat.com/errata/RHSA-2026:85227"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32936",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32936"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-35579",
        "url": "https://access.redhat.com/security/cve/CVE-2026-35579"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-63209",
        "url": "https://access.redhat.com/security/cve/CVE-2026-63209"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-66780",
        "url": "https://access.redhat.com/security/cve/CVE-2026-66780"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-66781",
        "url": "https://access.redhat.com/security/cve/CVE-2026-66781"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-66782",
        "url": "https://access.redhat.com/security/cve/CVE-2026-66782"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-66783",
        "url": "https://access.redhat.com/security/cve/CVE-2026-66783"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-66785",
        "url": "https://access.redhat.com/security/cve/CVE-2026-66785"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-66786",
        "url": "https://access.redhat.com/security/cve/CVE-2026-66786"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-66787",
        "url": "https://access.redhat.com/security/cve/CVE-2026-66787"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-66788",
        "url": "https://access.redhat.com/security/cve/CVE-2026-66788"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_85227.json"
      }
    ],
    "title": "Red Hat Security Advisory: Submariner v0.23 security fixes and container updates",
    "tracking": {
      "current_release_date": "2026-10-19T17:30:15+00:00",
      "generator": {
        "date": "2026-10-19T17:30:15+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.2"
        }
      },
      "id": "RHSA-2026:85227",
      "initial_release_date": "2026-10-19T14:44:14+00:00",
      "revision_history": [
        {
          "date": "2026-10-19T14:44:14+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-19T14:44:16+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-19T17:30:15+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
                "product": {
                  "name": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
                  "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:acm:2.16::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Advanced Cluster Management for Kubernetes"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
                  "product_id": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lighthouse-agent-rhel9@sha256%3A661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/lighthouse-agent-rhel9\u0026tag=1790670439"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
                  "product_id": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lighthouse-coredns-rhel9@sha256%3Ac6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/lighthouse-coredns-rhel9\u0026tag=1790670231"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
                  "product_id": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/nettest-rhel9@sha256%3Aaabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/nettest-rhel9\u0026tag=1790702141"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
                  "product_id": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/subctl-rhel9@sha256%3A56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/subctl-rhel9\u0026tag=1790670243"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
                  "product_id": "registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-operator-bundle@sha256%3Ab83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/submariner-operator-bundle\u0026tag=1790750775"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
                  "product_id": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-gateway-rhel9@sha256%3A4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/submariner-gateway-rhel9\u0026tag=1790670508"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
                  "product_id": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-globalnet-rhel9@sha256%3A8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/submariner-globalnet-rhel9\u0026tag=1790670233"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
                  "product_id": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-rhel9-operator@sha256%3Aee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/submariner-rhel9-operator\u0026tag=1790670912"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
                  "product_id": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-route-agent-rhel9@sha256%3A31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/submariner-route-agent-rhel9\u0026tag=1790670254"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
                  "product_id": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lighthouse-agent-rhel9@sha256%3A241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/lighthouse-agent-rhel9\u0026tag=1790670439"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
                  "product_id": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lighthouse-coredns-rhel9@sha256%3Aab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/lighthouse-coredns-rhel9\u0026tag=1790670231"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
                  "product_id": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/nettest-rhel9@sha256%3A9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/nettest-rhel9\u0026tag=1790702141"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
                  "product_id": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/subctl-rhel9@sha256%3A041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/subctl-rhel9\u0026tag=1790670243"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
                  "product_id": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-gateway-rhel9@sha256%3A23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/submariner-gateway-rhel9\u0026tag=1790670508"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
                  "product_id": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-globalnet-rhel9@sha256%3Abdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/submariner-globalnet-rhel9\u0026tag=1790670233"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
                  "product_id": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-rhel9-operator@sha256%3A81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/submariner-rhel9-operator\u0026tag=1790670912"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
                  "product_id": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-route-agent-rhel9@sha256%3A2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/submariner-route-agent-rhel9\u0026tag=1790670254"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
                  "product_id": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lighthouse-agent-rhel9@sha256%3A2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/lighthouse-agent-rhel9\u0026tag=1790670439"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
                  "product_id": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lighthouse-coredns-rhel9@sha256%3A3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/lighthouse-coredns-rhel9\u0026tag=1790670231"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
                  "product_id": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/nettest-rhel9@sha256%3Aa94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/nettest-rhel9\u0026tag=1790702141"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
                  "product_id": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/subctl-rhel9@sha256%3A7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/subctl-rhel9\u0026tag=1790670243"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
                  "product_id": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-gateway-rhel9@sha256%3A9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/submariner-gateway-rhel9\u0026tag=1790670508"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
                  "product_id": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-globalnet-rhel9@sha256%3A4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/submariner-globalnet-rhel9\u0026tag=1790670233"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
                  "product_id": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-rhel9-operator@sha256%3A2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/submariner-rhel9-operator\u0026tag=1790670912"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
                  "product_id": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-route-agent-rhel9@sha256%3A73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/submariner-route-agent-rhel9\u0026tag=1790670254"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
                "product": {
                  "name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
                  "product_id": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lighthouse-agent-rhel9@sha256%3A3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/lighthouse-agent-rhel9\u0026tag=1790670439"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
                "product": {
                  "name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
                  "product_id": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lighthouse-coredns-rhel9@sha256%3Ab48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/lighthouse-coredns-rhel9\u0026tag=1790670231"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
                "product": {
                  "name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
                  "product_id": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/nettest-rhel9@sha256%3A4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/nettest-rhel9\u0026tag=1790702141"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
                "product": {
                  "name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
                  "product_id": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/subctl-rhel9@sha256%3A9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/subctl-rhel9\u0026tag=1790670243"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
                  "product_id": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-gateway-rhel9@sha256%3Aededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/submariner-gateway-rhel9\u0026tag=1790670508"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
                  "product_id": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-globalnet-rhel9@sha256%3A4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/submariner-globalnet-rhel9\u0026tag=1790670233"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
                  "product_id": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-rhel9-operator@sha256%3A52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/submariner-rhel9-operator\u0026tag=1790670912"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x",
                "product": {
                  "name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x",
                  "product_id": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/submariner-route-agent-rhel9@sha256%3Acc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/submariner-route-agent-rhel9\u0026tag=1790670254"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64"
        },
        "product_reference": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x"
        },
        "product_reference": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64"
        },
        "product_reference": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64"
        },
        "product_reference": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x"
        },
        "product_reference": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64"
        },
        "product_reference": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x"
        },
        "product_reference": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64"
        },
        "product_reference": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64"
        },
        "product_reference": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64"
        },
        "product_reference": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64"
        },
        "product_reference": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x"
        },
        "product_reference": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
        },
        "product_reference": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.16"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-32936",
      "cwe": {
        "id": "CWE-1284",
        "name": "Improper Validation of Specified Quantity in Input"
      },
      "discovery_date": "2026-05-05T20:01:52.218439+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2466869"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in CoreDNS, a DNS server that chains plugins. A remote, unauthenticated attacker can exploit this vulnerability by repeatedly sending oversized DNS-over-HTTPS (DoH) GET requests. The GET path, unlike the POST path, lacks size validation before processing large `dns=` query parameter values. This can lead to high CPU usage, significant memory allocations, and increased garbage collection, resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/coredns/coredns: CoreDNS: Denial of Service via oversized DNS-over-HTTPS GET requests",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32936"
        },
        {
          "category": "external",
          "summary": "RHBZ#2466869",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466869"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32936",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32936"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32936",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32936"
        },
        {
          "category": "external",
          "summary": "https://github.com/coredns/coredns/releases/tag/v1.14.3",
          "url": "https://github.com/coredns/coredns/releases/tag/v1.14.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/coredns/coredns/security/advisories/GHSA-63cw-r7xf-jmwr",
          "url": "https://github.com/coredns/coredns/security/advisories/GHSA-63cw-r7xf-jmwr"
        }
      ],
      "release_date": "2026-05-05T19:07:51.926000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T14:44:14+00:00",
          "details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-34110\n* ACM-34588\n* ACM-28591\n* ACM-34578\n* ACM-40464\n* ACM-38424\n* ACM-38427\n* ACM-38429\n* ACM-38430\n* ACM-38431\n* ACM-38434\n* ACM-38439\n* ACM-38467\n* ACM-38468\n* ACM-38469\n* ACM-38472\n* ACM-38475\n* ACM-38477\n* ACM-38479\n* ACM-38516\n* ACM-38518\n* ACM-38525\n* ACM-38526\n* ACM-38532\n* ACM-38539\n* ACM-38541\n* ACM-38545\n* ACM-47362\n* ACM-38306\n* ACM-38318\n* ACM-38331\n* ACM-38336\n* ACM-38358\n* ACM-38363\n* ACM-38317\n* ACM-38329\n* ACM-38354\n* ACM-38433\n* ACM-38489\n* ACM-38294\n* ACM-38296\n* ACM-38293\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85227"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "github.com/coredns/coredns: CoreDNS: Denial of Service via oversized DNS-over-HTTPS GET requests"
    },
    {
      "cve": "CVE-2026-35579",
      "cwe": {
        "id": "CWE-303",
        "name": "Incorrect Implementation of Authentication Algorithm"
      },
      "discovery_date": "2026-05-05T21:01:06.423844+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2466905"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in CoreDNS. An unauthenticated network attacker can exploit incorrect handling of TSIG (Transaction Signature) authentication in the gRPC, QUIC, DoH (DNS over HTTPS), and DoH3 transport implementations. This vulnerability allows an attacker to bypass TSIG protection, leading to unauthorized access to functionalities such as zone transfers and dynamic DNS updates. For DoH and DoH3, the issue is more severe as any request with a TSIG record is treated as authenticated, even with an invalid key.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/coredns/coredns: CoreDNS: Authentication bypass allows unauthorized access to TSIG-protected functionalities",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-35579"
        },
        {
          "category": "external",
          "summary": "RHBZ#2466905",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466905"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-35579",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-35579"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35579",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35579"
        },
        {
          "category": "external",
          "summary": "https://github.com/coredns/coredns/security/advisories/GHSA-vp29-5652-4fw9",
          "url": "https://github.com/coredns/coredns/security/advisories/GHSA-vp29-5652-4fw9"
        }
      ],
      "release_date": "2026-05-05T20:29:16.903000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T14:44:14+00:00",
          "details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-34110\n* ACM-34588\n* ACM-28591\n* ACM-34578\n* ACM-40464\n* ACM-38424\n* ACM-38427\n* ACM-38429\n* ACM-38430\n* ACM-38431\n* ACM-38434\n* ACM-38439\n* ACM-38467\n* ACM-38468\n* ACM-38469\n* ACM-38472\n* ACM-38475\n* ACM-38477\n* ACM-38479\n* ACM-38516\n* ACM-38518\n* ACM-38525\n* ACM-38526\n* ACM-38532\n* ACM-38539\n* ACM-38541\n* ACM-38545\n* ACM-47362\n* ACM-38306\n* ACM-38318\n* ACM-38331\n* ACM-38336\n* ACM-38358\n* ACM-38363\n* ACM-38317\n* ACM-38329\n* ACM-38354\n* ACM-38433\n* ACM-38489\n* ACM-38294\n* ACM-38296\n* ACM-38293\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85227"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/coredns/coredns: CoreDNS: Authentication bypass allows unauthorized access to TSIG-protected functionalities"
    },
    {
      "cve": "CVE-2026-63209",
      "cwe": {
        "id": "CWE-823",
        "name": "Use of Out-of-range Pointer Offset"
      },
      "discovery_date": "2026-09-29T15:12:15.658458+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2543236"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads to out-of-bounds memory access, crashing the application and resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat has rated this vulnerability as having an impact of Important because an unauthenticated remote attacker could trigger a denial of service by causing a process crash without requiring elevated permissions. In Red Hat environments where this Go library is embedded, exploitation requires that an application accepts untrusted dictionary structures for S2 compression and subsequently attempts encoding. Although the resulting memory access fault terminates the vulnerable process, the flaw is confined to process crashes and does not compromise data confidentiality or integrity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-63209"
        },
        {
          "category": "external",
          "summary": "RHBZ#2543236",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543236"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-63209",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-63209"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63209",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63209"
        },
        {
          "category": "external",
          "summary": "https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536",
          "url": "https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536"
        },
        {
          "category": "external",
          "summary": "https://github.com/klauspost/compress/releases/tag/v1.18.7",
          "url": "https://github.com/klauspost/compress/releases/tag/v1.18.7"
        },
        {
          "category": "external",
          "summary": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw",
          "url": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw"
        }
      ],
      "release_date": "2026-09-29T14:58:53.366000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T14:44:14+00:00",
          "details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-34110\n* ACM-34588\n* ACM-28591\n* ACM-34578\n* ACM-40464\n* ACM-38424\n* ACM-38427\n* ACM-38429\n* ACM-38430\n* ACM-38431\n* ACM-38434\n* ACM-38439\n* ACM-38467\n* ACM-38468\n* ACM-38469\n* ACM-38472\n* ACM-38475\n* ACM-38477\n* ACM-38479\n* ACM-38516\n* ACM-38518\n* ACM-38525\n* ACM-38526\n* ACM-38532\n* ACM-38539\n* ACM-38541\n* ACM-38545\n* ACM-47362\n* ACM-38306\n* ACM-38318\n* ACM-38331\n* ACM-38336\n* ACM-38358\n* ACM-38363\n* ACM-38317\n* ACM-38329\n* ACM-38354\n* ACM-38433\n* ACM-38489\n* ACM-38294\n* ACM-38296\n* ACM-38293\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85227"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing"
    },
    {
      "cve": "CVE-2026-66780",
      "cwe": {
        "id": "CWE-532",
        "name": "Insertion of Sensitive Information into Log File"
      },
      "discovery_date": "2026-07-27T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507524"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the submariner-operator component. The `submariner-k8s-broker-cluster` Role, which is assigned to joined clusters, possesses excessive permissions. This allows a compromised cluster to alter network configurations, specifically by overwriting other clusters\u0027 endpoint information. Consequently, an attacker can redirect inter-cluster tunnel traffic, enabling a Man-in-the-Middle (MITM) attack across the entire cluster mesh.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "submariner-operator: Broker ServiceAccount Secret (token + CA) logged in full at TRACE verbosity",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important for Red Hat Advanced Cluster Management for Kubernetes because overly permissive broker authorization allows an attacker with access to a single compromised managed cluster to intercept or redirect cross-cluster network traffic across the entire Submariner mesh. While exploitation requires an adversary to possess valid credentials from an enrolled member cluster, the impact extends beyond the initial perimeter by enabling traffic manipulation across peer nodes. Environments where the Submariner networking add-on is not deployed or active are not exposed to this risk.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-66780"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507524",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507524"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-66780",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-66780"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66780",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66780"
        }
      ],
      "release_date": "2026-08-18T16:35:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T14:44:14+00:00",
          "details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-34110\n* ACM-34588\n* ACM-28591\n* ACM-34578\n* ACM-40464\n* ACM-38424\n* ACM-38427\n* ACM-38429\n* ACM-38430\n* ACM-38431\n* ACM-38434\n* ACM-38439\n* ACM-38467\n* ACM-38468\n* ACM-38469\n* ACM-38472\n* ACM-38475\n* ACM-38477\n* ACM-38479\n* ACM-38516\n* ACM-38518\n* ACM-38525\n* ACM-38526\n* ACM-38532\n* ACM-38539\n* ACM-38541\n* ACM-38545\n* ACM-47362\n* ACM-38306\n* ACM-38318\n* ACM-38331\n* ACM-38336\n* ACM-38358\n* ACM-38363\n* ACM-38317\n* ACM-38329\n* ACM-38354\n* ACM-38433\n* ACM-38489\n* ACM-38294\n* ACM-38296\n* ACM-38293\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85227"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "submariner-operator: Broker ServiceAccount Secret (token + CA) logged in full at TRACE verbosity"
    },
    {
      "cve": "CVE-2026-66781",
      "cwe": {
        "id": "CWE-749",
        "name": "Exposed Dangerous Method or Function"
      },
      "discovery_date": "2026-07-27T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507526"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Submariner operator. The Submariner Custom Resource (CR), used for configuring network connectivity, stores the IPsec pre-shared key (PSK) in an unencrypted format. This key, which is critical for securing communication between Kubernetes clusters, can be accessed by unauthorized parties. Such access enables an attacker to passively decrypt network traffic flowing between any two clusters in the mesh, resulting in sensitive information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "submariner-operator: pprof debug endpoint enabled by default on 0.0.0.0:8082 without authentication",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this vulnerability as having an Important severity because exposure of the IPsec pre-shared key on a single managed cluster compromises the confidentiality of cross-cluster traffic across the entire Submariner deployment mesh. Within Red Hat Advanced Cluster Management for Kubernetes environments, custom resources reside unencrypted in cluster storage and can be exposed through standard resource queries, diagnostic bundles, or GitOps pipelines. Although exploitation requires authorization to read the custom resource or access to cluster configuration artifacts, the resulting widespread cross-cluster decryption capability justifies the Important rating.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-66781"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507526",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507526"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-66781",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-66781"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66781",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66781"
        }
      ],
      "release_date": "2026-08-18T16:35:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T14:44:14+00:00",
          "details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-34110\n* ACM-34588\n* ACM-28591\n* ACM-34578\n* ACM-40464\n* ACM-38424\n* ACM-38427\n* ACM-38429\n* ACM-38430\n* ACM-38431\n* ACM-38434\n* ACM-38439\n* ACM-38467\n* ACM-38468\n* ACM-38469\n* ACM-38472\n* ACM-38475\n* ACM-38477\n* ACM-38479\n* ACM-38516\n* ACM-38518\n* ACM-38525\n* ACM-38526\n* ACM-38532\n* ACM-38539\n* ACM-38541\n* ACM-38545\n* ACM-47362\n* ACM-38306\n* ACM-38318\n* ACM-38331\n* ACM-38336\n* ACM-38358\n* ACM-38363\n* ACM-38317\n* ACM-38329\n* ACM-38354\n* ACM-38433\n* ACM-38489\n* ACM-38294\n* ACM-38296\n* ACM-38293\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85227"
        },
        {
          "category": "workaround",
          "details": "To mitigate the risk of IPsec pre-shared key (PSK) disclosure, implement strict Kubernetes Role-Based Access Control (RBAC) policies to limit access to Submariner Custom Resources. Ensure that only authorized administrators and systems are granted permissions to view `submariner` Custom Resources within their namespaces. Additionally, exercise caution when collecting and storing diagnostic data, such as must-gather bundles, and when managing GitOps repositories, as these may inadvertently expose the cleartext PSK.",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "submariner-operator: pprof debug endpoint enabled by default on 0.0.0.0:8082 without authentication"
    },
    {
      "cve": "CVE-2026-66782",
      "cwe": {
        "id": "CWE-269",
        "name": "Improper Privilege Management"
      },
      "discovery_date": "2026-07-27T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507527"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Submariner operator. This vulnerability allows for the exposure of a long-lived broker service account (SA) bearer token within the Submariner Custom Resource (CR) specification. An attacker with access to the cluster\u0027s etcd database or through `kubectl get` commands could obtain this token. The possession of this token grants full control over the mesh network, enabling unauthorized management of network resources such as endpoints and secrets.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "submariner-operator: Operator ClusterRole grants cluster-wide create/update on all ConfigMaps",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: In Red Hat Advanced Cluster Management for Kubernetes, the Submariner operator may allow sensitive broker ServiceAccount bearer tokens to be stored in cleartext within the Submariner Custom Resource (CR) specification. This configuration exposes the token to cluster administrators or any entity with read access to the CR, potentially granting full mesh control over the Submariner network. This risk is heightened by the token\u0027s long-lived nature and its exposure through standard Kubernetes tools like `kubectl get` and `must-gather`.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-66782"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507527",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507527"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-66782",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-66782"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66782",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66782"
        }
      ],
      "release_date": "2026-08-18T16:35:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T14:44:14+00:00",
          "details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-34110\n* ACM-34588\n* ACM-28591\n* ACM-34578\n* ACM-40464\n* ACM-38424\n* ACM-38427\n* ACM-38429\n* ACM-38430\n* ACM-38431\n* ACM-38434\n* ACM-38439\n* ACM-38467\n* ACM-38468\n* ACM-38469\n* ACM-38472\n* ACM-38475\n* ACM-38477\n* ACM-38479\n* ACM-38516\n* ACM-38518\n* ACM-38525\n* ACM-38526\n* ACM-38532\n* ACM-38539\n* ACM-38541\n* ACM-38545\n* ACM-47362\n* ACM-38306\n* ACM-38318\n* ACM-38331\n* ACM-38336\n* ACM-38358\n* ACM-38363\n* ACM-38317\n* ACM-38329\n* ACM-38354\n* ACM-38433\n* ACM-38489\n* ACM-38294\n* ACM-38296\n* ACM-38293\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85227"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, ensure that access to Submariner Custom Resources (CRs) is strictly controlled. Implement Kubernetes Role-Based Access Control (RBAC) policies to limit read access to Submariner CRs only to authorized administrators and components that explicitly require it. This reduces the risk of unauthorized disclosure of the broker Service Account bearer token, which may be stored in cleartext within the CR\u0027s specification field. Review existing RBAC configurations to ensure least privilege is applied to resources containing sensitive information.",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "submariner-operator: Operator ClusterRole grants cluster-wide create/update on all ConfigMaps"
    },
    {
      "cve": "CVE-2026-66783",
      "cwe": {
        "id": "CWE-1357",
        "name": "Reliance on Insufficiently Trustworthy Component"
      },
      "discovery_date": "2026-07-27T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507528"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `submariner-operator` component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability allows a cluster administrator, or any user with permissions to modify the Submariner Custom Resource (CR), to specify an unvalidated image path. This lack of validation enables an attacker to execute arbitrary code with elevated privileges across the entire cluster, including control-plane nodes, by deploying a malicious image.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "submariner-operator: Release workflow consumes same-org composite action via mutable @devel branch ref",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in submariner-operator that allows a cluster administrator, or an attacker with equivalent privileges to patch the Submariner Custom Resource, to execute arbitrary privileged code across all cluster nodes, including control-plane nodes. This is due to a lack of image validation when overriding component images, enabling the deployment of malicious images with extensive privileges.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-66783"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507528",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507528"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-66783",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-66783"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66783",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66783"
        }
      ],
      "release_date": "2026-08-18T16:35:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T14:44:14+00:00",
          "details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-34110\n* ACM-34588\n* ACM-28591\n* ACM-34578\n* ACM-40464\n* ACM-38424\n* ACM-38427\n* ACM-38429\n* ACM-38430\n* ACM-38431\n* ACM-38434\n* ACM-38439\n* ACM-38467\n* ACM-38468\n* ACM-38469\n* ACM-38472\n* ACM-38475\n* ACM-38477\n* ACM-38479\n* ACM-38516\n* ACM-38518\n* ACM-38525\n* ACM-38526\n* ACM-38532\n* ACM-38539\n* ACM-38541\n* ACM-38545\n* ACM-47362\n* ACM-38306\n* ACM-38318\n* ACM-38331\n* ACM-38336\n* ACM-38358\n* ACM-38363\n* ACM-38317\n* ACM-38329\n* ACM-38354\n* ACM-38433\n* ACM-38489\n* ACM-38294\n* ACM-38296\n* ACM-38293\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85227"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict access to cluster-admin roles and carefully control permissions for users or service accounts that can modify Submariner Custom Resources. Ensure that only trusted and authorized personnel have the ability to patch Submariner CRs, thereby preventing the injection of malicious images.",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "submariner-operator: Release workflow consumes same-org composite action via mutable @devel branch ref"
    },
    {
      "cve": "CVE-2026-66785",
      "cwe": {
        "id": "CWE-345",
        "name": "Insufficient Verification of Data Authenticity"
      },
      "discovery_date": "2026-07-27T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507530"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Submariner. This vulnerability allows a malicious cluster (spoke) to redirect network traffic from other connected clusters (peer clusters) by publishing a specially crafted network endpoint. The system fails to properly validate the network subnets provided by the malicious cluster, enabling it to declare arbitrary network ranges. Consequently, all network traffic intended for these arbitrary ranges from peer clusters will be rerouted through the attacker\u0027s tunnel, potentially leading to unauthorized information disclosure or network disruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "submariner: submariner: missing validation of remote Endpoint subnets and ClusterID enables cross-cluster traffic hijack",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important vulnerability in Red Hat Advanced Cluster Management for Kubernetes. A malicious spoke cluster can exploit unvalidated Submariner Endpoint configurations to inject arbitrary network routes, potentially hijacking traffic from other connected clusters. This could lead to unauthorized data interception or redirection within the multi-cluster environment.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-66785"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507530",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507530"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-66785",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-66785"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66785",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66785"
        }
      ],
      "release_date": "2026-08-20T17:20:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T14:44:14+00:00",
          "details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-34110\n* ACM-34588\n* ACM-28591\n* ACM-34578\n* ACM-40464\n* ACM-38424\n* ACM-38427\n* ACM-38429\n* ACM-38430\n* ACM-38431\n* ACM-38434\n* ACM-38439\n* ACM-38467\n* ACM-38468\n* ACM-38469\n* ACM-38472\n* ACM-38475\n* ACM-38477\n* ACM-38479\n* ACM-38516\n* ACM-38518\n* ACM-38525\n* ACM-38526\n* ACM-38532\n* ACM-38539\n* ACM-38541\n* ACM-38545\n* ACM-47362\n* ACM-38306\n* ACM-38318\n* ACM-38331\n* ACM-38336\n* ACM-38358\n* ACM-38363\n* ACM-38317\n* ACM-38329\n* ACM-38354\n* ACM-38433\n* ACM-38489\n* ACM-38294\n* ACM-38296\n* ACM-38293\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85227"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "submariner: submariner: missing validation of remote Endpoint subnets and ClusterID enables cross-cluster traffic hijack"
    },
    {
      "cve": "CVE-2026-66786",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "discovery_date": "2026-07-27T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507531"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition (CRD) without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This allows an attacker to inject arbitrary configuration parameters or execute commands through leftupdown hooks, leading to remote code execution as root on the gateway node.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "submariner: submariner: ipsec.conf stanza injection via remote-supplied CableName and Subnets",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this flaw as Moderate severity rather than Important because exploitation requires two non-default configurations that must both be explicitly enabled by an administrator. The vulnerable code path exists only in Submariner\u0027s certificate-based IPsec authentication mode, which is disabled by default (`IPSecCertAuthMode` defaults to `false`). This mode is designed specifically for integration with OVN-Kubernetes IPsec, which is itself an optional intra-cluster encryption feature that is also disabled by default. The standard Submariner deployment, including multi-cloud and cross-datacenter configurations managed through Red Hat Advanced Cluster Management, uses pre-shared key (PSK) authentication, which establishes IPsec tunnels through a structurally different code path (`ipsec whack` command-line arguments via Go\u0027s `exec.Command`) that is not susceptible to this injection. Additionally, exploitation requires that an attacker has already compromised a managed spoke cluster at the cluster-admin level in order to extract the Submariner broker credentials, and must then bypass all normal Submariner automation to craft and submit a malicious Endpoint resource directly to the broker API, enabling cross-cluster lateral movement to other clusters within the same ManagedClusterSet. Clusters in other ManagedClusterSets have separate broker credentials and are not reachable through this attack.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-66786"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507531",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507531"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-66786",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-66786"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66786",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66786"
        }
      ],
      "release_date": "2026-08-21T16:43:00.583000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T14:44:14+00:00",
          "details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-34110\n* ACM-34588\n* ACM-28591\n* ACM-34578\n* ACM-40464\n* ACM-38424\n* ACM-38427\n* ACM-38429\n* ACM-38430\n* ACM-38431\n* ACM-38434\n* ACM-38439\n* ACM-38467\n* ACM-38468\n* ACM-38469\n* ACM-38472\n* ACM-38475\n* ACM-38477\n* ACM-38479\n* ACM-38516\n* ACM-38518\n* ACM-38525\n* ACM-38526\n* ACM-38532\n* ACM-38539\n* ACM-38541\n* ACM-38545\n* ACM-47362\n* ACM-38306\n* ACM-38318\n* ACM-38331\n* ACM-38336\n* ACM-38358\n* ACM-38363\n* ACM-38317\n* ACM-38329\n* ACM-38354\n* ACM-38433\n* ACM-38489\n* ACM-38294\n* ACM-38296\n* ACM-38293\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85227"
        },
        {
          "category": "workaround",
          "details": "If Submariner certificate-based IPsec authentication mode is enabled (`IPSecCertAuthMode: true` in the SubmarinerConfig), administrators can mitigate this flaw by switching to the default pre-shared key (PSK) authentication mode. Set `IPSecCertAuthMode: false` (or remove the field to use its default value) in the SubmarinerConfig CR and redeploy the Submariner gateway pods. PSK mode provides equivalent inter-cluster IPsec tunnel encryption and is not affected by this vulnerability. Note that disabling cert-auth mode means Submariner will no longer integrate with OVN IPsec\u0027s certificate infrastructure and will manage its own PSK-based authentication independently.",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "submariner: submariner: ipsec.conf stanza injection via remote-supplied CableName and Subnets"
    },
    {
      "cve": "CVE-2026-66787",
      "cwe": {
        "id": "CWE-345",
        "name": "Insufficient Verification of Data Authenticity"
      },
      "discovery_date": "2026-07-27T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507532"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability stems from insufficient validation of advertised IP addresses within EndpointSlice objects. A compromised spoke cluster can exploit this by creating EndpointSlices with attacker-controlled IP addresses, causing other clusters\u0027 lighthouse DNS to redirect legitimate service traffic to malicious endpoints. This enables a remote attacker to conduct transparent Man-in-the-Middle (MITM) attacks on cross-cluster service communications, potentially leading to unauthorized information disclosure and data manipulation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "lighthouse: lighthouse: cross-cluster DNS spoofing via unvalidated EndpointSlice IP addresses",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in Red Hat Advanced Cluster Management for Kubernetes allows a compromised spoke cluster to perform cross-cluster DNS spoofing. By creating unvalidated EndpointSlice objects with attacker-controlled IP addresses, a malicious actor can redirect legitimate service traffic between clusters, enabling transparent Man-in-the-Middle attacks without altering the target service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-66787"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507532",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507532"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-66787",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-66787"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66787",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66787"
        }
      ],
      "release_date": "2026-08-20T17:20:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T14:44:14+00:00",
          "details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-34110\n* ACM-34588\n* ACM-28591\n* ACM-34578\n* ACM-40464\n* ACM-38424\n* ACM-38427\n* ACM-38429\n* ACM-38430\n* ACM-38431\n* ACM-38434\n* ACM-38439\n* ACM-38467\n* ACM-38468\n* ACM-38469\n* ACM-38472\n* ACM-38475\n* ACM-38477\n* ACM-38479\n* ACM-38516\n* ACM-38518\n* ACM-38525\n* ACM-38526\n* ACM-38532\n* ACM-38539\n* ACM-38541\n* ACM-38545\n* ACM-47362\n* ACM-38306\n* ACM-38318\n* ACM-38331\n* ACM-38336\n* ACM-38358\n* ACM-38363\n* ACM-38317\n* ACM-38329\n* ACM-38354\n* ACM-38433\n* ACM-38489\n* ACM-38294\n* ACM-38296\n* ACM-38293\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85227"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "lighthouse: lighthouse: cross-cluster DNS spoofing via unvalidated EndpointSlice IP addresses"
    },
    {
      "cve": "CVE-2026-66788",
      "cwe": {
        "id": "CWE-1104",
        "name": "Use of Unmaintained Third Party Components"
      },
      "discovery_date": "2026-07-27T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507533"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Lighthouse. A remote attacker, by compromising a spoke cluster, can exploit a vulnerability where the destination namespace for resource injection is derived from an attacker-controlled label or annotation on the broker object. This allows the attacker to inject unauthorized EndpointSlices and ServiceImports into any namespace on peer clusters, including critical system namespaces like kube-system and openshift-*. This could lead to privilege escalation or other forms of system compromise within the cluster.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "lighthouse: lighthouse: arbitrary namespace injection via attacker-controlled broker label",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This flaw in Red Hat Advanced Cluster Management for Kubernetes allows a compromised spoke cluster to inject EndpointSlices and ServiceImports into arbitrary namespaces on peer clusters, including critical system namespaces. The `lighthouse-agent` service account uses an attacker-controlled label for the destination namespace without validation, enabling potential privilege escalation or service disruption across the cluster federation.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
          "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-66788"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507533",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507533"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-66788",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-66788"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66788",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66788"
        }
      ],
      "release_date": "2026-08-20T17:20:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T14:44:14+00:00",
          "details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-34110\n* ACM-34588\n* ACM-28591\n* ACM-34578\n* ACM-40464\n* ACM-38424\n* ACM-38427\n* ACM-38429\n* ACM-38430\n* ACM-38431\n* ACM-38434\n* ACM-38439\n* ACM-38467\n* ACM-38468\n* ACM-38469\n* ACM-38472\n* ACM-38475\n* ACM-38477\n* ACM-38479\n* ACM-38516\n* ACM-38518\n* ACM-38525\n* ACM-38526\n* ACM-38532\n* ACM-38539\n* ACM-38541\n* ACM-38545\n* ACM-47362\n* ACM-38306\n* ACM-38318\n* ACM-38331\n* ACM-38336\n* ACM-38358\n* ACM-38363\n* ACM-38317\n* ACM-38329\n* ACM-38354\n* ACM-38433\n* ACM-38489\n* ACM-38294\n* ACM-38296\n* ACM-38293\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85227"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:241a516da7c2ba28a0cb11406b59623441236cf8471e738607401e7c89e4c5e6_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:2ee611bc2815a0c448a6c9c0294f9bcd390ad0efdb9e640e8ab737b2c88c977e_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:3d88ee2952c25a1f6cf90139a93c638b3da521cabe42673a33d3f98d0e65295f_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:661cd04c8903a5922077419a8c053245fa34b5ab6cc2b6d726f79e2617c8df4c_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:3421981d830213b259bfe4ece406c3c1f42b83a3be85ac0998a1db4b991cd813_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:ab74781f9851008e7f36ea50355ec568b65593344cb54c65c14f1ef0ba6775ad_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:b48ad109ba57e8fa189026b634ddb92d01372d65b43fcd3c56088434629aff57_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:c6ba7466a13caaa9649677de1b4ba8e102b31df8ca81225e65278ef4f4113b96_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:4864356778d0f7d8e92a181ee6b3ea30a116bcfb122cf27dc651876650069542_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:9df9c0591d70483e44d5aa2cf0730c274013cf6e12e96df43ab13f42c6c12bca_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:a94c673a2e518229d432390be2422a9c329af8d10e62a43661fbeceea45be8b6_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/nettest-rhel9@sha256:aabb16573e48619f11fc94d51ba3bde8d65f0c76656110f7b8cb8b92142b69db_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:041d41181e65723b8f613ee3126b2f76c0ab0d2adee4b693bf36e3c97a71e23b_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:56a0e878de0a60cb9283fb02edbdbd00521ccd889a537bc36ea6d9dcebebd886_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:7c6bc085b5a0a0b41ed2d5e9eade2f82ad83930299d3069e26c04f59799ceedc_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/subctl-rhel9@sha256:9dfc73b384deff402db82cfcc2f1c4a4feb23066f1dea5434dc7c9fd2537fdf4_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:23d20d6d39a0f4e4afa8f0e80bc67125e8a24f7bf6e8a6121e24010cbaaf54a7_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:4cd809f0f7ea9751f671c2078a44c6d2a64fd6664e9ceea08627ea0cffad0f53_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:9fa79d5d71b6be814b74b63483dc749571607f8f33e1af7cb0b163a0f6b6c697_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:ededbd278919ccb6711fd549ca1c83ad650a817537aa529fd846627a8a014f70_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4096c1810d60a84b77741e4a46af9ce83f1774eb8480fd2ea2732225f3d7a64b_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:4db95a0ca613b9c81b204ddea41cadd085dc7ab6433626c3a108b46b135d2187_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:8baf942b7122761101fdf010e938d2e89bc131a659196204ab5fd37357db7676_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:bdc73680ee251662b5881b624b430f6f4a8be0010b1027977b507407c8068d30_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:b83d0f0f158e8b7ad1fc749f2a2b69de30aac8b1b7ca0a62ad19b1b0e9359960_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:2c155bfa256f1efe37d540482faa2a20893badeb493fb739b3281c60a2c5b304_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:52cf97cc4f9357fc4dc08058d255dd65dc4c4d0a23b6f7a9c94d158185630d73_s390x",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:81980c7938c5a3e301468a8232cf9955443da594d1d9791e5a079d37dcf5a4ef_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:ee7b4b6a54ba531e1d17b89b1c929865de4763c6b8c6bd59da0f4684953e9cd4_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fd16075a65aa8c0676cefe5f413d4763d14c5c931f9dd2140eee1bc30df658e_arm64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:31f742e80dbed537759e8e745729c15f3242d7c520374d6c7e2995f92c020d81_amd64",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:73490bf015adf41de3ddbd24350505e89ebaab2f05841f51d389f4f643773136_ppc64le",
            "Red Hat Advanced Cluster Management for Kubernetes 2.16:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cc2b19b3f7633cdb168a4bc8d374e97c43d73f0db60ee8107e5b0c5e5d5358d4_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "lighthouse: lighthouse: arbitrary namespace injection via attacker-controlled broker label"
    }
  ]
}

CVE-2026-32936 (GCVE-0-2026-32936)

Vulnerability from cvelistv5 – Published: 2026-05-05 19:07 – Updated: 2026-05-05 19:32

Title

CoreDNS DoH GET path missing size validation causes CPU and memory amplification

Summary

CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the DNS-over-HTTPS (DoH) GET path accepts oversized dns= query parameter values and performs URL query parsing, base64 decoding, and DNS message unpacking before rejecting the request. Unlike the POST path, which applies a bounded read via http.MaxBytesReader limited to 65536 bytes, the GET path has no equivalent size validation before expensive processing. A remote, unauthenticated attacker can repeatedly send oversized DoH GET requests to force high CPU usage, large transient memory allocations, and elevated garbage-collection pressure, leading to denial of service. This issue has been fixed in version 1.14.3.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-05 19:32 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7628 records in the last 180 days details

References

2 references

URL	Tags
https://github.com/coredns/coredns/security/advis…	x_refsource_CONFIRM
https://github.com/coredns/coredns/releases/tag/v1.14.3	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
coredns	coredns	Affected: < 1.14.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-32936",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-05T19:32:21.653054Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-05T19:32:25.341Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/coredns/coredns/security/advisories/GHSA-63cw-r7xf-jmwr"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "coredns",
          "vendor": "coredns",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.14.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the DNS-over-HTTPS (DoH) GET path accepts oversized dns= query parameter values and performs URL query parsing, base64 decoding, and DNS message unpacking before rejecting the request. Unlike the POST path, which applies a bounded read via http.MaxBytesReader limited to 65536 bytes, the GET path has no equivalent size validation before expensive processing. A remote, unauthenticated attacker can repeatedly send oversized DoH GET requests to force high CPU usage, large transient memory allocations, and elevated garbage-collection pressure, leading to denial of service. This issue has been fixed in version 1.14.3."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-05T19:07:51.926Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/coredns/coredns/security/advisories/GHSA-63cw-r7xf-jmwr",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/coredns/coredns/security/advisories/GHSA-63cw-r7xf-jmwr"
        },
        {
          "name": "https://github.com/coredns/coredns/releases/tag/v1.14.3",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/coredns/coredns/releases/tag/v1.14.3"
        }
      ],
      "source": {
        "advisory": "GHSA-63cw-r7xf-jmwr",
        "discovery": "UNKNOWN"
      },
      "title": "CoreDNS DoH GET path missing size validation causes CPU and memory amplification"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-32936",
    "datePublished": "2026-05-05T19:07:51.926Z",
    "dateReserved": "2026-03-17T00:05:53.282Z",
    "dateUpdated": "2026-05-05T19:32:25.341Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-35579 (GCVE-0-2026-35579)

Vulnerability from cvelistv5 – Published: 2026-05-05 20:29 – Updated: 2026-07-15 01:02

Title

CoreDNS TSIG authentication bypass on gRPC, QUIC, DoH, and DoH3 transports

Summary

CoreDNS is a DNS server written in Go. In versions prior to 1.14.3, the gRPC, QUIC, DoH, and DoH3 transport implementations incorrectly handle TSIG authentication. For gRPC and QUIC, the server checks whether the TSIG key name exists in the configuration but never calls dns.TsigVerify() to validate the HMAC. If the key name matches a configured key, the tsigStatus field remains nil and the tsig plugin treats the request as successfully authenticated regardless of the MAC value. For DoH and DoH3, the issue is more severe: the DoHWriter.TsigStatus() method unconditionally returns nil, and the server never inspects the TSIG record at all. Any request containing a TSIG record is treated as authenticated over DoH and DoH3, even if the key name is invalid and the MAC is arbitrary. An unauthenticated network attacker can exploit this to bypass TSIG-protected functionality such as AXFR/IXFR zone transfers, dynamic DNS updates, or other TSIG-gated plugin behavior. The DoH and DoH3 variants have a lower exploitation bar because the attacker does not need to know a valid TSIG key name. This issue has been fixed in version 1.14.3. As a workaround, disable gRPC, QUIC, DoH, and DoH3 listeners where TSIG authentication is required, or restrict network-level access to affected transport ports to trusted sources only.

Severity

8.2 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-06 14:30 UTC

CWE

CWE-287 - Improper Authentication
CWE-303 - Incorrect Implementation of Authentication Algorithm

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7628 records in the last 180 days details

References

5 references

URL	Tags
https://github.com/coredns/coredns/security/advis…	x_refsource_CONFIRM
https://access.redhat.com/security/cve/CVE-2026-35579	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2466905	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:25127	vendor-advisoryx_refsource_REDHAT

Impacted products

4 products

Vendor	Product	Version
coredns	coredns	Affected: < 1.14.3
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.14	Unaffected: 1780204249 , < * (rpm) cpe:/a:redhat:acm:2.14::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-35579",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-06T14:30:00.602863Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-06T14:30:35.454Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/coredns/coredns/security/advisories/GHSA-vp29-5652-4fw9"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/lighthouse-coredns-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780204249",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/lighthouse-agent-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-coredns-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-05-05T20:29:16.903Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in CoreDNS. An unauthenticated network attacker can exploit incorrect handling of TSIG (Transaction Signature) authentication in the gRPC, QUIC, DoH (DNS over HTTPS), and DoH3 transport implementations. This vulnerability allows an attacker to bypass TSIG protection, leading to unauthorized access to functionalities such as zone transfers and dynamic DNS updates. For DoH and DoH3, the issue is more severe as any request with a TSIG record is treated as authenticated, even with an invalid key."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-303",
                "description": "Incorrect Implementation of Authentication Algorithm",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-15T01:02:40.767Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-35579"
          },
          {
            "name": "RHBZ#2466905",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466905"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35579.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25127"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:25127: Red Hat Advanced Cluster Management for Kubernetes 2.14"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-05-05T21:01:06.423Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-05-05T20:29:16.903Z",
            "value": "Made public."
          }
        ],
        "title": "github.com/coredns/coredns: CoreDNS: Authentication bypass allows unauthorized access to TSIG-protected functionalities",
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "coredns",
          "vendor": "coredns",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.14.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "CoreDNS is a DNS server written in Go. In versions prior to 1.14.3, the gRPC, QUIC, DoH, and DoH3 transport implementations incorrectly handle TSIG authentication. For gRPC and QUIC, the server checks whether the TSIG key name exists in the configuration but never calls dns.TsigVerify() to validate the HMAC. If the key name matches a configured key, the tsigStatus field remains nil and the tsig plugin treats the request as successfully authenticated regardless of the MAC value. For DoH and DoH3, the issue is more severe: the DoHWriter.TsigStatus() method unconditionally returns nil, and the server never inspects the TSIG record at all. Any request containing a TSIG record is treated as authenticated over DoH and DoH3, even if the key name is invalid and the MAC is arbitrary.\n\nAn unauthenticated network attacker can exploit this to bypass TSIG-protected functionality such as AXFR/IXFR zone transfers, dynamic DNS updates, or other TSIG-gated plugin behavior. The DoH and DoH3 variants have a lower exploitation bar because the attacker does not need to know a valid TSIG key name.\n\nThis issue has been fixed in version 1.14.3. As a workaround, disable gRPC, QUIC, DoH, and DoH3 listeners where TSIG authentication is required, or restrict network-level access to affected transport ports to trusted sources only."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287: Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-05T20:29:16.903Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/coredns/coredns/security/advisories/GHSA-vp29-5652-4fw9",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/coredns/coredns/security/advisories/GHSA-vp29-5652-4fw9"
        }
      ],
      "source": {
        "advisory": "GHSA-vp29-5652-4fw9",
        "discovery": "UNKNOWN"
      },
      "title": "CoreDNS TSIG authentication bypass on gRPC, QUIC, DoH, and DoH3 transports"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-35579",
    "datePublished": "2026-05-05T20:29:16.903Z",
    "dateReserved": "2026-04-03T20:09:02.827Z",
    "dateUpdated": "2026-07-15T01:02:40.767Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-63209 (GCVE-0-2026-63209)

Vulnerability from cvelistv5 – Published: 2026-09-29 14:58 – Updated: 2026-09-29 16:32

Title

Integer Overflow or Wraparound and Out-of-bounds Write in compress

Summary

compress provides various compression algorithms. Prior to version 1.18.7, a signed integer overflow vulnerability in s2.NewDict() allows an attacker to bypass repeat index validation by supplying a dictionary with a uvarint-encoded repeat value exceeding MaxInt64. When Dict.Encode() is subsequently called, the overflowed negative repeat value causes an out-of-bounds memory access via unsafe.Pointer arithmetic, crashing the process with SIGSEGV. This issue has been patched in version 1.18.7.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-29 16:31 UTC

CWE

CWE-190 - Integer Overflow or Wraparound
CWE-787 - Out-of-bounds Write

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7628 records in the last 180 days details

References

3 references

URL	Tags
https://github.com/klauspost/compress/security/ad…	x_refsource_CONFIRM
https://github.com/klauspost/compress/commit/5392…	x_refsource_MISC
https://github.com/klauspost/compress/releases/ta…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
klauspost	compress	Affected: < 1.18.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-63209",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-29T16:31:39.668233Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-29T16:32:32.677Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "compress",
          "vendor": "klauspost",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.18.7"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "compress provides various compression algorithms. Prior to version 1.18.7, a signed integer overflow vulnerability in s2.NewDict() allows an attacker to bypass repeat index validation by supplying a dictionary with a uvarint-encoded repeat value exceeding MaxInt64. When Dict.Encode() is subsequently called, the overflowed negative repeat value causes an out-of-bounds memory access via unsafe.Pointer arithmetic, crashing the process with SIGSEGV. This issue has been patched in version 1.18.7."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190: Integer Overflow or Wraparound",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787: Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-29T14:58:53.366Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw"
        },
        {
          "name": "https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536"
        },
        {
          "name": "https://github.com/klauspost/compress/releases/tag/v1.18.7",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/klauspost/compress/releases/tag/v1.18.7"
        }
      ],
      "source": {
        "advisory": "GHSA-259r-337f-4rfw",
        "discovery": "UNKNOWN"
      },
      "title": "Integer Overflow or Wraparound and Out-of-bounds Write in compress"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-63209",
    "datePublished": "2026-09-29T14:58:53.366Z",
    "dateReserved": "2026-07-15T22:19:06.906Z",
    "dateUpdated": "2026-09-29T16:32:32.677Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-66780 (GCVE-0-2026-66780)

Vulnerability from cvelistv5 – Published: 2026-08-18 17:32 – Updated: 2026-10-19 17:01

Title

Submariner-operator: broker serviceaccount secret (token + ca) logged in full at trace verbosity

Summary

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-18 18:44 UTC

CWE

CWE-532 - Insertion of Sensitive Information into Log File

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1037 records in the last 180 days details

References

11 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:63016	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:67538	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:67539	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:67540	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:67541	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:67542	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:67543	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:72880	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:85227	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-66780	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2507524	issue-trackingx_refsource_REDHAT

Impacted products

12 products

Vendor	Product	Version
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1789135606 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1789131397 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.14	Unaffected: 1789136328 , < * (rpm) cpe:/a:redhat:acm:2.14::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.15	Unaffected: 1789136327 , < * (rpm) cpe:/a:redhat:acm:2.15::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1789136320 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1787854416 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670243 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670912 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788105072 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788073481 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788572527 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2

Date Public

2026-08-18 16:35

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-66780",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-18T18:44:52.061095Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-18T18:45:01.220Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.11::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-addon-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1789135606",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.13::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-addon-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1789131397",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.14::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-addon-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1789136328",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-addon-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1789136327",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-addon-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1789136320",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-addon-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787854416",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/subctl-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670243",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-rhel9-operator",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670912",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/subctl-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788105072",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-rhel9-operator",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788073481",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-addon-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788572527",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:acm:2"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-operator-bundle",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2026-08-18T16:35:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the submariner-operator component. The `submariner-k8s-broker-cluster` Role, which is assigned to joined clusters, possesses excessive permissions. This allows a compromised cluster to alter network configurations, specifically by overwriting other clusters\u0027 endpoint information. Consequently, an attacker can redirect inter-cluster tunnel traffic, enabling a Man-in-the-Middle (MITM) attack across the entire cluster mesh."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-532",
              "description": "Insertion of Sensitive Information into Log File",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T17:01:55.013Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:63016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:63016"
        },
        {
          "name": "RHSA-2026:67538",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:67538"
        },
        {
          "name": "RHSA-2026:67539",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:67539"
        },
        {
          "name": "RHSA-2026:67540",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:67540"
        },
        {
          "name": "RHSA-2026:67541",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:67541"
        },
        {
          "name": "RHSA-2026:67542",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:67542"
        },
        {
          "name": "RHSA-2026:67543",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:67543"
        },
        {
          "name": "RHSA-2026:72880",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:72880"
        },
        {
          "name": "RHSA-2026:85227",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:85227"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-66780"
        },
        {
          "name": "RHBZ#2507524",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507524"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-07-27T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-08-18T16:35:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Submariner-operator: broker serviceaccount secret (token + ca) logged in full at trace verbosity",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-532: Insertion of Sensitive Information into Log File"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-66780",
    "datePublished": "2026-08-18T17:32:00.879Z",
    "dateReserved": "2026-07-27T17:51:24.885Z",
    "dateUpdated": "2026-10-19T17:01:55.013Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-66781 (GCVE-0-2026-66781)

Vulnerability from cvelistv5 – Published: 2026-08-18 17:05 – Updated: 2026-10-19 17:02

Title

Submariner-operator: pprof debug endpoint enabled by default on 0.0.0.0:8082 without authentication

Summary

Severity

5.4 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-18 19:21 UTC

CWE

CWE-749 - Exposed Dangerous Method or Function

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1037 records in the last 180 days details

References

10 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:60386	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60387	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60388	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60389	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60390	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60391	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:63016	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:85227	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-66781	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2507526	issue-trackingx_refsource_REDHAT

Impacted products

11 products

Vendor	Product	Version
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1787689013 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1787365971 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.14	Unaffected: 1787362756 , < * (rpm) cpe:/a:redhat:acm:2.14::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.15	Unaffected: 1787362733 , < * (rpm) cpe:/a:redhat:acm:2.15::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1787362694 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670243 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670912 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1787362658 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788105072 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788073481 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2

Date Public

2026-08-18 16:35

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-66781",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-18T19:21:35.955137Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-18T19:21:45.335Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.11::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-addon-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787689013",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.13::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-addon-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787365971",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.14::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-addon-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787362756",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-addon-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787362733",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-addon-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787362694",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/subctl-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670243",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-rhel9-operator",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670912",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-addon-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787362658",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/subctl-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788105072",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-rhel9-operator",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788073481",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:acm:2"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-operator-bundle",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2026-08-18T16:35:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the Submariner operator. The Submariner Custom Resource (CR), used for configuring network connectivity, stores the IPsec pre-shared key (PSK) in an unencrypted format. This key, which is critical for securing communication between Kubernetes clusters, can be accessed by unauthorized parties. Such access enables an attacker to passively decrypt network traffic flowing between any two clusters in the mesh, resulting in sensitive information disclosure."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-749",
              "description": "Exposed Dangerous Method or Function",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T17:02:09.726Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:60386",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:60386"
        },
        {
          "name": "RHSA-2026:60387",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:60387"
        },
        {
          "name": "RHSA-2026:60388",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:60388"
        },
        {
          "name": "RHSA-2026:60389",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:60389"
        },
        {
          "name": "RHSA-2026:60390",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:60390"
        },
        {
          "name": "RHSA-2026:60391",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:60391"
        },
        {
          "name": "RHSA-2026:63016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:63016"
        },
        {
          "name": "RHSA-2026:85227",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:85227"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-66781"
        },
        {
          "name": "RHBZ#2507526",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507526"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-07-27T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-08-18T16:35:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Submariner-operator: pprof debug endpoint enabled by default on 0.0.0.0:8082 without authentication",
      "workarounds": [
        {
          "lang": "en",
          "value": "To mitigate the risk of IPsec pre-shared key (PSK) disclosure, implement strict Kubernetes Role-Based Access Control (RBAC) policies to limit access to Submariner Custom Resources. Ensure that only authorized administrators and systems are granted permissions to view `submariner` Custom Resources within their namespaces. Additionally, exercise caution when collecting and storing diagnostic data, such as must-gather bundles, and when managing GitOps repositories, as these may inadvertently expose the cleartext PSK."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-749: Exposed Dangerous Method or Function"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-66781",
    "datePublished": "2026-08-18T17:05:52.128Z",
    "dateReserved": "2026-07-27T17:51:24.885Z",
    "dateUpdated": "2026-10-19T17:02:09.726Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-66782 (GCVE-0-2026-66782)

Vulnerability from cvelistv5 – Published: 2026-08-18 17:06 – Updated: 2026-10-19 17:02

Title

Submariner-operator: operator clusterrole grants cluster-wide create/update on all configmaps

Summary

Severity

5.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-18 19:43 UTC

CWE

CWE-269 - Improper Privilege Management

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1037 records in the last 180 days details

References

4 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:63016	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:85227	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-66782	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2507527	issue-trackingx_refsource_REDHAT

Impacted products

5 products

Vendor	Product	Version
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670243 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670912 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788105072 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788073481 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2

Date Public

2026-08-18 16:35

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-66782",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-18T19:43:40.343219Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-18T19:53:15.244Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/subctl-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670243",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-rhel9-operator",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670912",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/subctl-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788105072",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-rhel9-operator",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788073481",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:acm:2"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-addon-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:acm:2"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-operator-bundle",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2026-08-18T16:35:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the Submariner operator. This vulnerability allows for the exposure of a long-lived broker service account (SA) bearer token within the Submariner Custom Resource (CR) specification. An attacker with access to the cluster\u0027s etcd database or through `kubectl get` commands could obtain this token. The possession of this token grants full control over the mesh network, enabling unauthorized management of network resources such as endpoints and secrets."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-269",
              "description": "Improper Privilege Management",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T17:02:14.750Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:63016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:63016"
        },
        {
          "name": "RHSA-2026:85227",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:85227"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-66782"
        },
        {
          "name": "RHBZ#2507527",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507527"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-07-27T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-08-18T16:35:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Submariner-operator: operator clusterrole grants cluster-wide create/update on all configmaps",
      "workarounds": [
        {
          "lang": "en",
          "value": "To mitigate this issue, ensure that access to Submariner Custom Resources (CRs) is strictly controlled. Implement Kubernetes Role-Based Access Control (RBAC) policies to limit read access to Submariner CRs only to authorized administrators and components that explicitly require it. This reduces the risk of unauthorized disclosure of the broker Service Account bearer token, which may be stored in cleartext within the CR\u0027s specification field. Review existing RBAC configurations to ensure least privilege is applied to resources containing sensitive information."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-269: Improper Privilege Management"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-66782",
    "datePublished": "2026-08-18T17:06:00.421Z",
    "dateReserved": "2026-07-27T17:51:24.885Z",
    "dateUpdated": "2026-10-19T17:02:14.750Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-66783 (GCVE-0-2026-66783)

Vulnerability from cvelistv5 – Published: 2026-08-18 17:06 – Updated: 2026-10-19 17:02

Title

Submariner-operator: release workflow consumes same-org composite action via mutable @devel branch ref

Summary

Severity

4.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-19 15:04 UTC

CWE

CWE-1357 - Reliance on Insufficiently Trustworthy Component

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1037 records in the last 180 days details

References

4 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:63016	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:85227	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-66783	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2507528	issue-trackingx_refsource_REDHAT

Impacted products

5 products

Vendor	Product	Version
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670243 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670912 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788105072 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788073481 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2

Date Public

2026-08-18 16:35

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-66783",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-19T15:04:32.835125Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-19T15:04:44.821Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/subctl-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670243",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-rhel9-operator",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670912",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/subctl-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788105072",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-rhel9-operator",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788073481",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:acm:2"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-addon-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:acm:2"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-operator-bundle",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2026-08-18T16:35:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the `submariner-operator` component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability allows a cluster administrator, or any user with permissions to modify the Submariner Custom Resource (CR), to specify an unvalidated image path. This lack of validation enables an attacker to execute arbitrary code with elevated privileges across the entire cluster, including control-plane nodes, by deploying a malicious image."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1357",
              "description": "Reliance on Insufficiently Trustworthy Component",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T17:02:18.781Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:63016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:63016"
        },
        {
          "name": "RHSA-2026:85227",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:85227"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-66783"
        },
        {
          "name": "RHBZ#2507528",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507528"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-07-27T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-08-18T16:35:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Submariner-operator: release workflow consumes same-org composite action via mutable @devel branch ref",
      "workarounds": [
        {
          "lang": "en",
          "value": "To mitigate this issue, restrict access to cluster-admin roles and carefully control permissions for users or service accounts that can modify Submariner Custom Resources. Ensure that only trusted and authorized personnel have the ability to patch Submariner CRs, thereby preventing the injection of malicious images."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-1357: Reliance on Insufficiently Trustworthy Component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-66783",
    "datePublished": "2026-08-18T17:06:02.815Z",
    "dateReserved": "2026-07-27T17:51:24.885Z",
    "dateUpdated": "2026-10-19T17:02:18.781Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-66785 (GCVE-0-2026-66785)

Vulnerability from cvelistv5 – Published: 2026-08-20 18:15 – Updated: 2026-10-19 17:30

Title

Submariner: submariner: missing validation of remote endpoint subnets and clusterid enables cross-cluster traffic hijack

Summary

Severity

8.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-25 15:16 UTC

CWE

CWE-345 - Insufficient Verification of Data Authenticity

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1037 records in the last 180 days details

References

4 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:63016	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:85227	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-66785	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2507530	issue-trackingx_refsource_REDHAT

Impacted products

15 products

Vendor	Product	Version
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670439 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670231 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670243 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670508 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670233 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670912 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670254 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788023916 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788023940 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788105072 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788043964 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788043961 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788073481 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788043970 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2

Date Public

2026-08-20 17:20

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-66785",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-25T15:16:29.726764Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-25T15:16:41.989Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/lighthouse-agent-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670439",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/lighthouse-coredns-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670231",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/subctl-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670243",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-gateway-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670508",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-globalnet-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670233",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-rhel9-operator",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670912",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-route-agent-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670254",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/lighthouse-agent-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788023916",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/lighthouse-coredns-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788023940",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/subctl-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788105072",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-gateway-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788043964",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-globalnet-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788043961",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-rhel9-operator",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788073481",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-route-agent-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788043970",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:acm:2"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-addon-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:acm:2"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-operator-bundle",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2026-08-20T17:20:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in Submariner. This vulnerability allows a malicious cluster (spoke) to redirect network traffic from other connected clusters (peer clusters) by publishing a specially crafted network endpoint. The system fails to properly validate the network subnets provided by the malicious cluster, enabling it to declare arbitrary network ranges. Consequently, all network traffic intended for these arbitrary ranges from peer clusters will be rerouted through the attacker\u0027s tunnel, potentially leading to unauthorized information disclosure or network disruption."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-345",
              "description": "Insufficient Verification of Data Authenticity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T17:30:24.677Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:63016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:63016"
        },
        {
          "name": "RHSA-2026:85227",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:85227"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-66785"
        },
        {
          "name": "RHBZ#2507530",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507530"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-07-27T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-08-20T17:20:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Submariner: submariner: missing validation of remote endpoint subnets and clusterid enables cross-cluster traffic hijack",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-345: Insufficient Verification of Data Authenticity"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-66785",
    "datePublished": "2026-08-20T18:15:06.802Z",
    "dateReserved": "2026-07-27T17:51:24.885Z",
    "dateUpdated": "2026-10-19T17:30:24.677Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-66786 (GCVE-0-2026-66786)

Vulnerability from cvelistv5 – Published: 2026-09-02 17:57 – Updated: 2026-10-19 17:30

Title

Submariner: submariner: ipsec.conf stanza injection via remote-supplied cablename and subnets

Summary

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-05 01:01 UTC

CWE

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1037 records in the last 180 days details

References

4 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:63016	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:85227	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-66786	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2507531	issue-trackingx_refsource_REDHAT

Impacted products

15 products

Vendor	Product	Version
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670439 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670231 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670243 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670508 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670233 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670912 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670254 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788023916 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788023940 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788105072 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788043964 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788043961 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788073481 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788043970 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2

Date Public

2026-08-21 16:43

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-66786",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-05T01:01:16.851937Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-05T01:01:30.464Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/lighthouse-agent-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670439",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/lighthouse-coredns-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670231",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/subctl-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670243",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-gateway-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670508",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-globalnet-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670233",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-rhel9-operator",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670912",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-route-agent-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670254",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/lighthouse-agent-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788023916",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/lighthouse-coredns-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788023940",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/subctl-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788105072",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-gateway-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788043964",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-globalnet-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788043961",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-rhel9-operator",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788073481",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-route-agent-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788043970",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:acm:2"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-addon-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:acm:2"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-operator-bundle",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2026-08-21T16:43:00.583Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition (CRD) without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This allows an attacker to inject arbitrary configuration parameters or execute commands through leftupdown hooks, leading to remote code execution as root on the gateway node."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T17:30:29.003Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:63016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:63016"
        },
        {
          "name": "RHSA-2026:85227",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:85227"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-66786"
        },
        {
          "name": "RHBZ#2507531",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507531"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-07-27T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-08-21T16:43:00.583Z",
          "value": "Made public."
        }
      ],
      "title": "Submariner: submariner: ipsec.conf stanza injection via remote-supplied cablename and subnets",
      "workarounds": [
        {
          "lang": "en",
          "value": "If Submariner certificate-based IPsec authentication mode is enabled (`IPSecCertAuthMode: true` in the SubmarinerConfig), administrators can mitigate this flaw by switching to the default pre-shared key (PSK) authentication mode. Set `IPSecCertAuthMode: false` (or remove the field to use its default value) in the SubmarinerConfig CR and redeploy the Submariner gateway pods. PSK mode provides equivalent inter-cluster IPsec tunnel encryption and is not affected by this vulnerability. Note that disabling cert-auth mode means Submariner will no longer integrate with OVN IPsec\u0027s certificate infrastructure and will manage its own PSK-based authentication independently."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-66786",
    "datePublished": "2026-09-02T17:57:19.436Z",
    "dateReserved": "2026-07-27T17:51:24.885Z",
    "dateUpdated": "2026-10-19T17:30:29.003Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-66787 (GCVE-0-2026-66787)

Vulnerability from cvelistv5 – Published: 2026-08-20 18:15 – Updated: 2026-10-19 17:02

Title

Lighthouse: lighthouse: cross-cluster dns spoofing via unvalidated endpointslice ip addresses

Summary

Severity

8.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-20 18:51 UTC

CWE

CWE-345 - Insufficient Verification of Data Authenticity

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1037 records in the last 180 days details

References

4 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:63016	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:85227	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-66787	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2507532	issue-trackingx_refsource_REDHAT

Impacted products

8 products

Vendor	Product	Version
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670439 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670231 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670243 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1790670912 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788023916 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788023940 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788105072 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788073481 , < * (rpm) cpe:/a:redhat:acm:2.17::el9

Date Public

2026-08-20 17:20

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-66787",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-20T18:51:33.566517Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-20T18:52:19.463Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/lighthouse-agent-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670439",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/lighthouse-coredns-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670231",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/subctl-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670243",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-rhel9-operator",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1790670912",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/lighthouse-agent-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788023916",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/lighthouse-coredns-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788023940",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/subctl-rhel9",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788105072",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:acm:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhacm2/submariner-rhel9-operator",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788073481",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "datePublic": "2026-08-20T17:20:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability stems from insufficient validation of advertised IP addresses within EndpointSlice objects. A compromised spoke cluster can exploit this by creating EndpointSlices with attacker-controlled IP addresses, causing other clusters\u0027 lighthouse DNS to redirect legitimate service traffic to malicious endpoints. This enables a remote attacker to conduct transparent Man-in-the-Middle (MITM) attacks on cross-cluster service communications, potentially leading to unauthorized information disclosure and data manipulation."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-345",
              "description": "Insufficient Verification of Data Authenticity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T17:02:22.592Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:63016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:63016"
        },
        {
          "name": "RHSA-2026:85227",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:85227"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-66787"
        },
        {
          "name": "RHBZ#2507532",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507532"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-07-27T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-08-20T17:20:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Lighthouse: lighthouse: cross-cluster dns spoofing via unvalidated endpointslice ip addresses",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-345: Insufficient Verification of Data Authenticity"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-66787",
    "datePublished": "2026-08-20T18:15:23.339Z",
    "dateReserved": "2026-07-27T17:51:24.885Z",
    "dateUpdated": "2026-10-19T17:02:22.592Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:85227

CVE-2026-32936 (GCVE-0-2026-32936)

CVE-2026-35579 (GCVE-0-2026-35579)

CVE-2026-63209 (GCVE-0-2026-63209)

CVE-2026-66780 (GCVE-0-2026-66780)

CVE-2026-66781 (GCVE-0-2026-66781)

CVE-2026-66782 (GCVE-0-2026-66782)

CVE-2026-66783 (GCVE-0-2026-66783)

CVE-2026-66785 (GCVE-0-2026-66785)

CVE-2026-66786 (GCVE-0-2026-66786)

CVE-2026-66787 (GCVE-0-2026-66787)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour