{"vulnerability": "CVE-2026-10090", "sightings": [{"uuid": "c64e13bb-844a-4ce3-974a-47e59fde3d91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10090", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gzht5h26j6cgw", "content": "CVE-2026-10090 - Multicluster-operators-subscription: multicluster-operators-subscription: namespace edit user can deploy cluster-scoped clusterrolebinding and become cluster-admin via application subscription\nCVE ID : CVE-2026-10090\n \n Published : Aug. 5, 2026, 9:18 a.m. | 31...", "creation_timestamp": "2026-08-05T10:18:50.004827Z"}, {"uuid": "d7c0bfa4-186a-4bb3-ac88-139ac4f5f22f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10090", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msdcme5m4p2o", "content": "CVE-2026-10090\nA flaw in Red Hat Advanced Cluster Management for Kubernetes (ACM) allows a user with edit privileges to create a subscription that grants them full control over the cluster. This happens because ACM doesn't\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-05T10:22:06.384718Z"}, {"uuid": "955ef414-a143-4a61-b993-e05a3bc4526f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10090", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msdghrvlqr2n", "content": "Red Hat Advanced Cluster Management for Kubernetes (ACM)\u306eApp Subscription controller\u306b\u8106\u5f31\u6027\u3002namespace-\u2026\nCVE-2026-10090 CVSS 9.9 | CRITICAL", "creation_timestamp": "2026-08-05T11:31:08.090566Z"}]}