{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Multicluster Global Hub v1.6.6 general availability release images, which provide security fixes, bug fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Important. \nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:73419",
        "url": "https://access.redhat.com/errata/RHSA-2026:73419"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32282"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33818",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-34040",
        "url": "https://access.redhat.com/security/cve/CVE-2026-34040"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41178",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41178"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42502",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42502"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-46604",
        "url": "https://access.redhat.com/security/cve/CVE-2026-46604"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-48586",
        "url": "https://access.redhat.com/security/cve/CVE-2026-48586"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-50151",
        "url": "https://access.redhat.com/security/cve/CVE-2026-50151"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56852",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56852"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56853",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56853"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56858",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56858"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56859",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56860",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56860"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56862",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56862"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-66792",
        "url": "https://access.redhat.com/security/cve/CVE-2026-66792"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-71235",
        "url": "https://access.redhat.com/security/cve/CVE-2026-71235"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-71576",
        "url": "https://access.redhat.com/security/cve/CVE-2026-71576"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-71577",
        "url": "https://access.redhat.com/security/cve/CVE-2026-71577"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-73500",
        "url": "https://access.redhat.com/security/cve/CVE-2026-73500"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-75762",
        "url": "https://access.redhat.com/security/cve/CVE-2026-75762"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-77849",
        "url": "https://access.redhat.com/security/cve/CVE-2026-77849"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-80220",
        "url": "https://access.redhat.com/security/cve/CVE-2026-80220"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-80221",
        "url": "https://access.redhat.com/security/cve/CVE-2026-80221"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_73419.json"
      }
    ],
    "title": "Red Hat Security Advisory: Multicluster Global Hub 1.6.6 security update",
    "tracking": {
      "current_release_date": "2026-09-30T03:59:03+00:00",
      "generator": {
        "date": "2026-09-30T03:59:03+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.0"
        }
      },
      "id": "RHSA-2026:73419",
      "initial_release_date": "2026-09-29T12:33:40+00:00",
      "revision_history": [
        {
          "date": "2026-09-29T12:33:40+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-29T12:33:48+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-30T03:59:03+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Multicluster Global Hub 1.6.6",
                "product": {
                  "name": "Multicluster Global Hub 1.6.6",
                  "product_id": "Multicluster Global Hub 1.6.6",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:multicluster_globalhub:1.6::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Multicluster Global Hub"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1790086248"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1790085494"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1790086176"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-operator-bundle@sha256%3A813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle\u0026tag=1790379995"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1790085268"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1790379115"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1790086248"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1790085494"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1790086176"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1790085268"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3Ac365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1790379115"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3Ab3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1790086248"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1790085494"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Ae3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1790086176"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1790085268"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1790379115"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3Ac610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1790086248"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1790085494"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Ab600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1790086176"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1790085268"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1790379115"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64 as a component of Multicluster Global Hub 1.6.6",
          "product_id": "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x as a component of Multicluster Global Hub 1.6.6",
          "product_id": "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le as a component of Multicluster Global Hub 1.6.6",
          "product_id": "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64 as a component of Multicluster Global Hub 1.6.6",
          "product_id": "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64 as a component of Multicluster Global Hub 1.6.6",
          "product_id": "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64 as a component of Multicluster Global Hub 1.6.6",
          "product_id": "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le as a component of Multicluster Global Hub 1.6.6",
          "product_id": "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x as a component of Multicluster Global Hub 1.6.6",
          "product_id": "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64 as a component of Multicluster Global Hub 1.6.6",
          "product_id": "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64 as a component of Multicluster Global Hub 1.6.6",
          "product_id": "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x as a component of Multicluster Global Hub 1.6.6",
          "product_id": "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le as a component of Multicluster Global Hub 1.6.6",
          "product_id": "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64 as a component of Multicluster Global Hub 1.6.6",
          "product_id": "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x as a component of Multicluster Global Hub 1.6.6",
          "product_id": "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le as a component of Multicluster Global Hub 1.6.6",
          "product_id": "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64 as a component of Multicluster Global Hub 1.6.6",
          "product_id": "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64 as a component of Multicluster Global Hub 1.6.6",
          "product_id": "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64 as a component of Multicluster Global Hub 1.6.6",
          "product_id": "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le as a component of Multicluster Global Hub 1.6.6",
          "product_id": "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x as a component of Multicluster Global Hub 1.6.6",
          "product_id": "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64 as a component of Multicluster Global Hub 1.6.6",
          "product_id": "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.6.6"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-32282",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "discovery_date": "2026-04-08T02:01:12.683211+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456336"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32282"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456336",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/763761",
          "url": "https://go.dev/cl/763761"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78293",
          "url": "https://go.dev/issue/78293"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4864",
          "url": "https://pkg.go.dev/vuln/GO-2026-4864"
        }
      ],
      "release_date": "2026-04-08T01:06:55.953000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:33:40+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73419"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
    },
    {
      "cve": "CVE-2026-33818",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:12:37.151735+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515815"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go encoding/asn1 package, as it can be triggered remotely without authentication. An attacker can provide a malformed ASN.1 structure, causing excessive recursion during unmarshalling and leading to stack exhaustion, which can render the service unavailable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515815",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/814980",
          "url": "https://go.dev/cl/814980"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80405",
          "url": "https://go.dev/issue/80405"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5972",
          "url": "https://pkg.go.dev/vuln/GO-2026-5972"
        }
      ],
      "release_date": "2026-08-13T21:58:52.821000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:33:40+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73419"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal"
    },
    {
      "cve": "CVE-2026-34040",
      "cwe": {
        "id": "CWE-807",
        "name": "Reliance on Untrusted Inputs in a Security Decision"
      },
      "discovery_date": "2026-03-31T03:01:34.530713+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2453278"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Moby, an open-source container framework. This security vulnerability allows attackers to bypass authorization plugins (AuthZ), which are mechanisms designed to control access and permissions within the container environment. The bypass of these plugins can lead to unauthorized operations and potential compromise of the system\u0027s integrity and confidentiality.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Moby: Moby: Authorization bypass vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34040"
        },
        {
          "category": "external",
          "summary": "RHBZ#2453278",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453278"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34040",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34040"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34040",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34040"
        },
        {
          "category": "external",
          "summary": "https://github.com/moby/moby/releases/tag/docker-v29.3.1",
          "url": "https://github.com/moby/moby/releases/tag/docker-v29.3.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2",
          "url": "https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2"
        }
      ],
      "release_date": "2026-03-31T01:36:48.205000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:33:40+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73419"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Moby: Moby: Authorization bypass vulnerability"
    },
    {
      "cve": "CVE-2026-41178",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-06-04T16:01:10.300537+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484830"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in OpenTelemetry-Go, affecting versions 1.41.0 and 1.43.0. An attacker can exploit this flaw by sending oversized baggage headers, causing the `Parse` function to process invalid inputs and log errors, which can lead to resource exhaustion and service disruption in Red Hat products utilizing these affected OpenTelemetry-Go versions. The impact is considered Important due to the potential for remote, unauthenticated denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484830",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484830"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41178",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "https://github.com/open-telemetry/opentelemetry-go/pull/7880",
          "url": "https://github.com/open-telemetry/opentelemetry-go/pull/7880"
        },
        {
          "category": "external",
          "summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835",
          "url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835"
        }
      ],
      "release_date": "2026-06-04T14:38:23.707000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:33:40+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73419"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers"
    },
    {
      "cve": "CVE-2026-42502",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:01:11.151484+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480762"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user\u0027s web browser, potentially compromising user data or taking control of their session.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw in golang.org/x/net/html can lead to Cross-Site Scripting (XSS) in applications that parse and render untrusted HTML, even with sanitization attempts. This is due to an unexpected HTML tree structure, allowing malicious scripts to execute in a user\u0027s browser.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42502"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480762",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480762"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42502",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42502"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781701",
          "url": "https://go.dev/cl/781701"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79572",
          "url": "https://go.dev/issue/79572"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5027",
          "url": "https://pkg.go.dev/vuln/GO-2026-5027"
        }
      ],
      "release_date": "2026-05-22T15:01:21.649000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:33:40+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73419"
        },
        {
          "category": "workaround",
          "details": "Applications utilizing `golang.org/x/net/html` should implement robust sanitization of all untrusted HTML input before rendering to prevent the creation of unexpected HTML structures that could facilitate XSS attacks. If an application does not require rendering arbitrary HTML, it should avoid processing such input.",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering"
    },
    {
      "cve": "CVE-2026-46604",
      "cwe": {
        "id": "CWE-1285",
        "name": "Improper Validation of Specified Index, Position, or Offset in Input"
      },
      "discovery_date": "2026-06-26T21:05:50.463844+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2493766"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the golang.org/x/image/tiff component. This vulnerability allows a remote attacker to cause a denial of service (DoS) by providing a specially crafted, invalid TIFF image. When the TIFF decoder attempts to process an image with an out-of-bounds strip offset, it can panic, leading to the unavailability of the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/image/tiff: golang.org/x/image/tiff: Denial of Service via invalid TIFF image",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the golang.org/x/image/tiff package. The TIFF decoder does not validate strip offsets read from a TIFF Image File Directory (IFD) before dereferencing them. Processing a specially crafted, invalid TIFF image with an out-of-bounds strip offset triggers a runtime panic, causing a denial of service in any application that decodes attacker-supplied TIFF images, such as thumbnail generators, document processors, or image upload handlers. Exploitation requires the application to decode a malicious TIFF file supplied by the attacker (CVSS UI:R); there is no impact to confidentiality or integrity, only availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46604"
        },
        {
          "category": "external",
          "summary": "RHBZ#2493766",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493766"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46604",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46604"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46604",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46604"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/788421",
          "url": "https://go.dev/cl/788421"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80122",
          "url": "https://go.dev/issue/80122"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5066",
          "url": "https://pkg.go.dev/vuln/GO-2026-5066"
        }
      ],
      "release_date": "2026-06-26T20:22:46.377000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:33:40+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73419"
        },
        {
          "category": "workaround",
          "details": "There is no complete inline mitigation for this issue; the fix requires upgrading golang.org/x/image to version 0.43.0 or later, which validates the strip offset before use. Where an immediate upgrade is not possible, exposure can be reduced by not decoding untrusted or externally supplied TIFF images, or by isolating TIFF decoding in a sandboxed, restartable worker process so a panic does not crash the primary service.",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang.org/x/image/tiff: golang.org/x/image/tiff: Denial of Service via invalid TIFF image"
    },
    {
      "cve": "CVE-2026-48586",
      "cwe": {
        "id": "CWE-409",
        "name": "Improper Handling of Highly Compressed Data (Data Amplification)"
      },
      "discovery_date": "2026-07-27T12:01:11.736259+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507434"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift. This vulnerability, categorized as improper handling of highly compressed data (also known as data amplification), allows a remote attacker to cause a Denial of Service (DoS) by sending specially crafted, highly compressed data. The affected component fails to properly manage the expansion of this data, leading to resource exhaustion and system unavailability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "thrift: org.apache.thrift/libthrift: github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of highly compressed data",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in Apache Thrift\u0027s handling of highly compressed data can lead to a denial of service. Remote, unauthenticated attackers could exploit this flaw by sending specially crafted compressed data, causing excessive resource consumption and disrupting the availability of services utilizing vulnerable Thrift bindings in Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-48586"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507434",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507434"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-48586",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-48586"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48586",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48586"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/07/24/37",
          "url": "http://www.openwall.com/lists/oss-security/2026/07/24/37"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9",
          "url": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/p008svsjf9p6bj47wyyf5dgglq5z7xoq",
          "url": "https://lists.apache.org/thread/p008svsjf9p6bj47wyyf5dgglq5z7xoq"
        }
      ],
      "release_date": "2026-07-27T11:02:54.430000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:33:40+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73419"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "thrift: org.apache.thrift/libthrift: github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of highly compressed data"
    },
    {
      "cve": "CVE-2026-50151",
      "cwe": {
        "id": "CWE-522",
        "name": "Insufficiently Protected Credentials"
      },
      "discovery_date": "2026-07-01T21:35:45+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2499693"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in oras-go. During the monolithic blob upload process, oras-go reuses the Authorization header for subsequent requests, even if a malicious registry provides a cross-host Location header. This vulnerability allows an attacker-controlled endpoint to receive the caller\u0027s credentials, leading to information disclosure. Additionally, it can enable client-side Server-Side Request Forgery (SSRF) to a cross-host target.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "oras-go: oras-go: Credential forwarding via unvalidated Location header during blob upload",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in oras-go. During monolithic blob upload, the Authorization header is reused for cross-host Location redirects, allowing a malicious registry to exfiltrate caller credentials.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-50151"
        },
        {
          "category": "external",
          "summary": "RHBZ#2499693",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499693"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-50151",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-50151"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50151",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50151"
        },
        {
          "category": "external",
          "summary": "https://github.com/oras-project/oras-go/security/advisories/GHSA-jxpm-75mh-9fp7",
          "url": "https://github.com/oras-project/oras-go/security/advisories/GHSA-jxpm-75mh-9fp7"
        }
      ],
      "release_date": "2026-07-01T21:35:45+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:33:40+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73419"
        },
        {
          "category": "workaround",
          "details": "Upgrade to oras-go v2.6.1 or later.",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "oras-go: oras-go: Credential forwarding via unvalidated Location header during blob upload"
    },
    {
      "cve": "CVE-2026-56852",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-07-21T20:01:56.266823+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2504233"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This flaw in the `golang.org/x/text` library can lead to a denial of service. An attacker could provide specially crafted invalid UTF-8 input to an application using the affected `norm.Iter` functionality, causing it to enter an infinite loop and become unresponsive.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "RHBZ#2504233",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504233"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56852",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/794100",
          "url": "https://go.dev/cl/794100"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80142",
          "url": "https://go.dev/issue/80142"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5970",
          "url": "https://pkg.go.dev/vuln/GO-2026-5970"
        }
      ],
      "release_date": "2026-07-21T19:18:59.951000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:33:40+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73419"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input"
    },
    {
      "cve": "CVE-2026-56853",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-13T22:14:53.561638+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515827"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: Unencrypted HTTP/2 servers are susceptible to a denial of service due to improper handling of ReadHeaderTimeout during the client preface reading phase. This can lead to resource exhaustion and service unavailability in affected Red Hat products configured to support unencrypted HTTP/2.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515827",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515827"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56853",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/795540",
          "url": "https://go.dev/cl/795540"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80205",
          "url": "https://go.dev/issue/80205"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6089",
          "url": "https://pkg.go.dev/vuln/GO-2026-6089"
        }
      ],
      "release_date": "2026-08-13T21:58:53.092000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:33:40+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73419"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service"
    },
    {
      "cve": "CVE-2026-56858",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-08-13T22:16:32.034590+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515838"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash (\u0027/\u0027), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user\u0027s browser, potentially compromising user data or actions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important cross-site scripting (XSS) vulnerability in the Go `html/template` package. Applications utilizing this package to render untrusted input are susceptible to arbitrary content injection due to a flaw in how pathological inputs are handled, potentially leading to client-side script execution.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515838",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515838"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56858",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/807100",
          "url": "https://go.dev/cl/807100"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80435",
          "url": "https://go.dev/issue/80435"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6091",
          "url": "https://pkg.go.dev/vuln/GO-2026-6091"
        }
      ],
      "release_date": "2026-08-13T21:58:53.354000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:33:40+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73419"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input"
    },
    {
      "cve": "CVE-2026-56859",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:16:52.493058+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515840"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important denial of service flaw affects applications utilizing the Go `encoding/xml` package. This vulnerability arises from an issue in XML decoding where a recursion depth counter fails to reset, potentially leading to stack exhaustion when processing malicious XML input.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515840",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515840"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56859",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803320",
          "url": "https://go.dev/cl/803320"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80481",
          "url": "https://go.dev/issue/80481"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6088",
          "url": "https://pkg.go.dev/vuln/GO-2026-6088"
        }
      ],
      "release_date": "2026-08-13T21:58:52.959000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:33:40+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73419"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue"
    },
    {
      "cve": "CVE-2026-56860",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-13T22:13:18.319384+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515820"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory (\u0027..\u0027) segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go `net/url` package. Applications built with Go that process untrusted URLs containing parent directory segments (\u0027..\u0027) may be vulnerable to excessive resource consumption due to quadratic time complexity in path resolution. This can lead to a denial of service, impacting the availability of affected services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515820",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515820"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56860",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803681",
          "url": "https://go.dev/cl/803681"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80494",
          "url": "https://go.dev/issue/80494"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6218",
          "url": "https://pkg.go.dev/vuln/GO-2026-6218"
        }
      ],
      "release_date": "2026-08-13T21:58:53.731000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:33:40+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73419"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution"
    },
    {
      "cve": "CVE-2026-56862",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-08-13T22:16:41.928450+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515839"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `golang` `crypto/tls` package. A remote, unauthenticated attacker can exploit this flaw by continuously sending `KeyUpdate` messages during a TLS handshake, forcing the server to perform indefinite key derivation operations. This resource exhaustion can lead to a denial of service for applications and services in Red Hat products that use the affected `crypto/tls` library and are exposed to untrusted network clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515839",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515839"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56862",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/804261",
          "url": "https://go.dev/cl/804261"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80528",
          "url": "https://go.dev/issue/80528"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6090",
          "url": "https://pkg.go.dev/vuln/GO-2026-6090"
        }
      ],
      "release_date": "2026-08-13T21:58:53.216000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:33:40+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73419"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages"
    },
    {
      "cve": "CVE-2026-66792",
      "cwe": {
        "id": "CWE-863",
        "name": "Incorrect Authorization"
      },
      "discovery_date": "2026-07-27T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507537"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription with specific, crafted annotations. Successful exploitation grants the attacker the ability to deploy resources into any namespace with the elevated permissions of the controller\u0027s Service Account, potentially leading to unauthorized access and control over cluster resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "multicloud-operators-subscription: multicloud-operators-subscription: IsClusterAdmin() trusts user-settable annotations on managed clusters",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Critical: This flaw in Red Hat Advanced Cluster Management for Kubernetes allows a privileged user on a managed cluster to escalate privileges to cluster-admin. By crafting a Subscription with specific user-settable annotations, an attacker can bypass intended security controls and deploy resources across multiple namespaces with elevated permissions, leading to full compromise of the managed cluster.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-66792"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507537",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507537"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-66792",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-66792"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66792",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66792"
        }
      ],
      "release_date": "2026-08-17T17:25:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:33:40+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73419"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "multicloud-operators-subscription: multicloud-operators-subscription: IsClusterAdmin() trusts user-settable annotations on managed clusters"
    },
    {
      "cve": "CVE-2026-71235",
      "discovery_date": "2026-08-05T12:07:04.533964+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Magistrala\u0027s Rules Engine. An authenticated low-privileged user can exploit this vulnerability by creating rules with embedded Go or Lua scripts. These scripts are executed server-side without sufficient validation, allowing for arbitrary file read and write operations, access to internal databases, and Server-Side Request Forgery (SSRF) against internal microservices. This could lead to significant data compromise and unauthorized system access.",
          "title": "Vulnerability description"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-71235"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-71235",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-71235"
        }
      ],
      "release_date": "2026-08-05T10:56:25.198000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:33:40+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73419"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/absmach/magistrala: Magistrala IoT Platform: Arbitrary Code Execution via Unrestricted Script Execution"
    },
    {
      "cve": "CVE-2026-71576",
      "cwe": {
        "id": "CWE-345",
        "name": "Insufficient Verification of Data Authenticity"
      },
      "discovery_date": "2026-08-07T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2512513"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming CloudEvents on Kafka status topics. A remote attacker, after compromising a managed hub and obtaining its Kafka client certificate, can manipulate the self-asserted source identity. This allows the attacker to falsify or delete critical data, such as compliance, inventory, and cluster health information, belonging to other hubs in the database.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "multicluster-global-hub: multicluster-global-hub: Manager trusts self-asserted evt.Source() for leaf-hub identity in all status handlers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw where a compromised managed hub, possessing a valid Kafka client certificate, can impersonate other hubs within the Multicluster Global Hub environment. This allows an attacker to falsify or delete critical compliance, inventory, and cluster health data, leading to significant data integrity issues.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-71576"
        },
        {
          "category": "external",
          "summary": "RHBZ#2512513",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512513"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-71576",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-71576"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-71576",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-71576"
        }
      ],
      "release_date": "2026-08-10T14:38:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:33:40+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73419"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "multicluster-global-hub: multicluster-global-hub: Manager trusts self-asserted evt.Source() for leaf-hub identity in all status handlers"
    },
    {
      "cve": "CVE-2026-71577",
      "cwe": {
        "id": "CWE-522",
        "name": "Insufficiently Protected Credentials"
      },
      "discovery_date": "2026-08-07T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2512514"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in multicluster-global-hub. During a ManagedClusterMigration, the system incorrectly grants all managed hubs read access to a shared communication topic. This allows a compromised managed hub to intercept and collect sensitive bootstrap kubeconfigs, which contain API server tokens intended for other hubs. These tokens have an extended validity of approximately 9.86 years, significantly increasing the risk of unauthorized access and information disclosure to other managed clusters.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "multicluster-global-hub: multicluster-global-hub: Spec-topic Read ACL leaks bootstrap kubeconfigs to all managed hubs during migration",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Moderate: A flaw in multicluster-global-hub allows a compromised managed hub to obtain a long-lived API server token for a target hub during a ManagedClusterMigration. This occurs because the operator grants broad read access to the shared Kafka topic and transmits bootstrap kubeconfigs with extended token validity in plaintext. Exploitation requires both a prior compromise of a managed hub and an active migration initiated by a global-hub administrator.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-71577"
        },
        {
          "category": "external",
          "summary": "RHBZ#2512514",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512514"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-71577",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-71577"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-71577",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-71577"
        }
      ],
      "release_date": "2026-08-10T14:38:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:33:40+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73419"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "multicluster-global-hub: multicluster-global-hub: Spec-topic Read ACL leaks bootstrap kubeconfigs to all managed hubs during migration"
    },
    {
      "cve": "CVE-2026-73500",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-12T21:41:05.096460+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515007"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in etcd, a distributed key-value store. A remote attacker can exploit this by opening numerous TCP connections to an etcd TLS listener without completing the TLS handshake. This action causes the `tlsListener.acceptLoop` to spawn an unbounded number of goroutines, which consume excessive memory. This resource exhaustion leads to a Denial of Service (DoS) for the etcd cluster and, consequently, for the Kubernetes control plane it supports.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "etcd: etcd: Denial of Service via unbounded TLS handshake goroutines",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in etcd, a critical component for distributed systems and Kubernetes control planes. A remote attacker can exhaust etcd memory by initiating numerous incomplete TLS handshakes, leading to a loss of availability for affected clusters.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73500"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515007",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515007"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73500",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73500"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73500",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73500"
        },
        {
          "category": "external",
          "summary": "https://github.com/etcd-io/etcd/commit/2e07efce9745004eb4773cffaada9b5cdf77cff2",
          "url": "https://github.com/etcd-io/etcd/commit/2e07efce9745004eb4773cffaada9b5cdf77cff2"
        },
        {
          "category": "external",
          "summary": "https://github.com/etcd-io/etcd/commit/89ff6d50796049d4f1136915ba21504b76e7e372",
          "url": "https://github.com/etcd-io/etcd/commit/89ff6d50796049d4f1136915ba21504b76e7e372"
        },
        {
          "category": "external",
          "summary": "https://github.com/etcd-io/etcd/commit/8e4dd0679a2c6b095d2a32a749fda2521c7809a3",
          "url": "https://github.com/etcd-io/etcd/commit/8e4dd0679a2c6b095d2a32a749fda2521c7809a3"
        },
        {
          "category": "external",
          "summary": "https://github.com/etcd-io/etcd/commit/f73cba7d920019f91a1ea1f6697833e42731f057",
          "url": "https://github.com/etcd-io/etcd/commit/f73cba7d920019f91a1ea1f6697833e42731f057"
        },
        {
          "category": "external",
          "summary": "https://github.com/etcd-io/etcd/pull/22130",
          "url": "https://github.com/etcd-io/etcd/pull/22130"
        },
        {
          "category": "external",
          "summary": "https://github.com/etcd-io/etcd/releases/tag/v3.5.33",
          "url": "https://github.com/etcd-io/etcd/releases/tag/v3.5.33"
        },
        {
          "category": "external",
          "summary": "https://github.com/etcd-io/etcd/releases/tag/v3.6.14",
          "url": "https://github.com/etcd-io/etcd/releases/tag/v3.6.14"
        },
        {
          "category": "external",
          "summary": "https://github.com/etcd-io/etcd/releases/tag/v3.7.1",
          "url": "https://github.com/etcd-io/etcd/releases/tag/v3.7.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/etcd-io/etcd/security/advisories/GHSA-6vch-q96h-7gc3",
          "url": "https://github.com/etcd-io/etcd/security/advisories/GHSA-6vch-q96h-7gc3"
        }
      ],
      "release_date": "2026-08-12T21:22:25.151000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:33:40+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73419"
        },
        {
          "category": "workaround",
          "details": "Restrict network access to the etcd TLS listener to only trusted clients and networks. Configure firewall rules to limit inbound connections to the etcd client port (default 2379) and peer port (default 2380) to authorized hosts. This reduces the attack surface by preventing untrusted network attackers from reaching the vulnerable service.",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "etcd: etcd: Denial of Service via unbounded TLS handshake goroutines"
    },
    {
      "cve": "CVE-2026-75762",
      "discovery_date": "2026-07-01T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64"
          ]
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "No description is available for this CVE.",
          "title": "Vulnerability description"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-75762"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-75762",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-75762"
        }
      ],
      "release_date": "2026-08-31T13:49:12.863000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:33:40+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73419"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "multicluster-global-hub: Manager trusts self-asserted evt.Source() for leaf-hub identity in all status handlers"
    },
    {
      "cve": "CVE-2026-77849",
      "discovery_date": "2026-07-01T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "No description is available for this CVE.",
          "title": "Vulnerability description"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-77849"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-77849",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-77849"
        }
      ],
      "release_date": "2026-08-31T13:48:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:33:40+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73419"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "grafana-global-hub: grafana-global-hub: Hardcoded Grafana admin credentials (admin / admin) in `pkg/specsyncer`"
    },
    {
      "cve": "CVE-2026-80220",
      "discovery_date": "2026-07-01T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "No description is available for this CVE.",
          "title": "Vulnerability description"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-80220"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-80220",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-80220"
        }
      ],
      "release_date": "2026-08-31T13:48:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:33:40+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73419"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "postgres-exporter: postgres-exporter: pprof profiling endpoints exposed on unauthenticated metrics listener"
    },
    {
      "cve": "CVE-2026-80221",
      "discovery_date": "2026-07-01T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "No description is available for this CVE.",
          "title": "Vulnerability description"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
          "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-80221"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-80221",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-80221"
        }
      ],
      "release_date": "2026-08-31T13:48:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-29T12:33:40+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73419"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b3add3141a627e33437849d27b592297136beed0f0c96660a1ba06603d4c719e_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:8235df6e5b40770f3f3b9bc38b789286e670d223b3675f67adff1af037e4edd9_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x",
            "Multicluster Global Hub 1.6.6:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "grafana-global-hub: grafana-global-hub: Direct database connection string with embedded credentials passed as environment variable"
    }
  ]
}