Red Hat Multicluster Global Hub 1.5.8
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-66792 | fixed in 1789515408 | Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clusters | CRITICAL 9.9 | 0.7 % | ||
| CVE-2026-71577 | fixed in 1789478830 | Multicluster-global-hub: multicluster-global-hub: spec-topic read acl leaks bootstrap kubeconfigs to all managed hubs during migration | MEDIUM 6.3 | 0.4 % | ||
| CVE-2026-71576 | fixed in 1789515288 | Multicluster-global-hub: multicluster-global-hub: manager trusts self-asserted evt.source() for leaf-hub identity in all status handlers | HIGH 8.5 | 0.3 % |