All 3 CVE vulnerabilities found in Multicluster Engine for Kubernetes, with AI-generated Chinese analysis, references, and POCs.
Vendor: Red Hat
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-75924 | Managed-serviceaccount: managed-serviceaccount: hub addon-manager clusterrole grants cluster-wide secret read/write and csr approval CWE-269 | 8.7 | High | 2026-08-18 |
| CVE-2026-10101 | Assisted-service: assisted-service: infraenv status leaks referenced pull-secret contents to namespace view users CWE-201 | 6.3 | Medium | 2026-05-29 |
| CVE-2025-57851 | Mce: privilege escalation via excessive /etc/passwd permissions CWE-276 | 6.4 | Medium | 2026-04-08 |
All 3 known CVE vulnerabilities affecting Multicluster Engine for Kubernetes with full Chinese analysis, references, and POCs where available.