CVE-2026-1784— Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 8
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Red Hat | Red Hat OpenShift Container Platform 4.13 | 1781123014< * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.14 | 1781870101< * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | 1781928857< * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | 1780962617< * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | 1780988280< * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | 1780043338< * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.20 | 1780990977< * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.21 | 1780444348< * | unaffected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-1784
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection
Source: CVE Program / CVE List V5
Vulnerability Description
The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy. It was found that the checks performed on the spec.path YAML stanza in a Route document was insufficient and could allow a controlled injection of the HAProxy configuration.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
系统设置或配置在外部可控制
Source: CVE Program / CVE List V5
Vulnerability Title
Red Hat OpenShift Container Platform 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Red Hat OpenShift Container Platform是美国红帽（Red Hat）公司的一套可帮助企业在物理、虚拟和公共云基础架构之间开发、部署和管理现有基于容器的应用程序的应用平台。 Red Hat OpenShift Container Platform存在安全漏洞，该漏洞源于对spec.path YAML字段的检查不足，可能导致HAProxy配置注入。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat OpenShift Container Platform 4.13 | 1781123014 ~ * | cpe:/a:redhat:openshift:4.13::el9 | |
| Red Hat | Red Hat OpenShift Container Platform 4.14 | 1781870101 ~ * | cpe:/a:redhat:openshift:4.14::el9 | |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | 1781928857 ~ * | cpe:/a:redhat:openshift:4.15::el9 | |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | 1780962617 ~ * | cpe:/a:redhat:openshift:4.16::el9 | |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | 1780988280 ~ * | cpe:/a:redhat:openshift:4.18::el9 | |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | 1780043338 ~ * | cpe:/a:redhat:openshift:4.19::el9 | |
| Red Hat | Red Hat OpenShift Container Platform 4.20 | 1780990977 ~ * | cpe:/a:redhat:openshift:4.20::el9 | |
| Red Hat | Red Hat OpenShift Container Platform 4.21 | 1780444348 ~ * | cpe:/a:redhat:openshift:4.21::el9 |
II. Public POCs for CVE-2026-1784
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-1784
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-1784 (5)
- 🔗 RHSA-2026:26543 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisoryx_refsource_REDHAT
- 🔗 RHSA-2026:23241 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisoryx_refsource_REDHAT
- 🔗 RHSA-2026:23246 - Security Advisory - Red Hat 客户门户网站 Read full article vendor-advisoryx_refsource_REDHAT
Other References for CVE-2026-1784 (2)
IV. Related Vulnerabilities
Same vendor: Red Hat
- CVE-2026-74247
Quay: ssrf via build archive_url in quay build api - CVE-2026-74245
Quay: unauthenticated exported logs download in quay - CVE-2026-74244
Quay: stripe webhook accepts forged events without signature - CVE-2026-74243
Quay: unauthenticated secscan notification endpoint in quay - CVE-2026-74242
Quay: repository notification uuid idor in quay api
Same weakness: CWE-15
- CVE-2026-16708
IBM Db2 Mirror for i is affected by multiple vulnerabilities - CVE-2026-73661
FreePBX: Authenticated Framework AUTHTYPE Can Be Restored Fr - CVE-2026-66065
Ouroboros: Untrusted project .env can still reach RCE via om - CVE-2026-56567
HCL iControl is affected by multiple security vulnerabilitie - CVE-2026-46485
Dash: Users can write to config despire permissions (OIDC te
V. Comments for CVE-2026-1784
No comments yet