Red Hat Cost Management 4
7 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-18382 | fixed in 1790844333 | Project-koku/koku-metrics-operator: koku-metrics-operator: service-account client credentials sent to user-controlled token_url | MEDIUM 6.8 | 0.5 % | ||
| CVE-2026-18378 | fixed in 1790844333 | Project-koku/koku-metrics-operator: koku-metrics-operator: cluster pull-secret token exfiltration via user-controlled api_url (ssrf / con… | HIGH 7.6 | 0.5 % | ||
| CVE-2026-18381 | fixed in 1790844333 | Project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled prometheus ser… | HIGH 7.6 | 0.4 % | ||
| CVE-2026-13757 | | P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing | MEDIUM 6.2 | 0.2 % | ||
| CVE-2026-4878 | | Libcap: libcap: privilege escalation via toctou race condition in cap_set_file() | HIGH 7.0 | 0.2 % | ||
| CVE-2026-2100 | | P11-kit: null dereference via c_derivekey with specific null parameters | HIGH 7.5 | 1.3 % | ||
| CVE-2025-5278 | | Coreutils: heap buffer under-read in gnu coreutils sort via key specification | MEDIUM 4.4 | 0.3 % |