agentprime: red-hat-advanced-cluster-management-for-kubernetes-2Every new CVE for red-hat-advanced-cluster-management-for-kubernetes-2.https://agentprime.io/CVE-2026-92982: Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injectionhttps://agentprime.io/advisories/CVE-2026-92982/https://agentprime.io/advisories/CVE-2026-92982/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 15:36:57 GMTCVECVE-2026-89091: Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code executionhttps://agentprime.io/advisories/CVE-2026-89091/https://agentprime.io/advisories/CVE-2026-89091/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 21:49:30 GMTCVECVE-2026-93685: Multicluster-observability-addon: multicluster-observability-addon: possible unauthenticated debug/metrics endpoint via cmdfactory.newcontrollercommandconfig (confirmed exposed by engineering)https://agentprime.io/advisories/CVE-2026-93685/https://agentprime.io/advisories/CVE-2026-93685/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 14:48:20 GMTCVECVE-2026-92615: Flightctl: flightctl: package-global go-git https transport mutated per-repo -- cross-tenant tls-config bleedhttps://agentprime.io/advisories/CVE-2026-92615/https://agentprime.io/advisories/CVE-2026-92615/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 15:20:50 GMTCVECVE-2026-66786: Submariner: submariner: ipsec.conf stanza injection via remote-supplied cablename and subnetshttps://agentprime.io/advisories/CVE-2026-66786/https://agentprime.io/advisories/CVE-2026-66786/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Sep 2026 17:57:19 GMTCVEcriticalCVE-2026-66785: Submariner: submariner: missing validation of remote endpoint subnets and clusterid enables cross-cluster traffic hijackhttps://agentprime.io/advisories/CVE-2026-66785/https://agentprime.io/advisories/CVE-2026-66785/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 18:15:06 GMTCVECVE-2026-70496: Search-v2-operator: search-v2-operator: operator clusterrole is cluster-admin equivalent via impersonate, rbac write, csr approve, and manifestworkhttps://agentprime.io/advisories/CVE-2026-70496/https://agentprime.io/advisories/CVE-2026-70496/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 18:16:13 GMTCVEcriticalCVE-2026-66780: Submariner-operator: broker serviceaccount secret (token + ca) logged in full at trace verbosityhttps://agentprime.io/advisories/CVE-2026-66780/https://agentprime.io/advisories/CVE-2026-66780/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 17:32:00 GMTCVECVE-2026-66783: Submariner-operator: release workflow consumes same-org composite action via mutable @devel branch refhttps://agentprime.io/advisories/CVE-2026-66783/https://agentprime.io/advisories/CVE-2026-66783/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 17:06:02 GMTCVECVE-2026-66782: Submariner-operator: operator clusterrole grants cluster-wide create/update on all configmapshttps://agentprime.io/advisories/CVE-2026-66782/https://agentprime.io/advisories/CVE-2026-66782/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 17:06:00 GMTCVECVE-2026-66781: Submariner-operator: pprof debug endpoint enabled by default on 0.0.0.0:8082 without authenticationhttps://agentprime.io/advisories/CVE-2026-66781/https://agentprime.io/advisories/CVE-2026-66781/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 17:05:52 GMTCVECVE-2026-75924: Managed-serviceaccount: managed-serviceaccount: hub addon-manager clusterrole grants cluster-wide secret read/write and csr approvalhttps://agentprime.io/advisories/CVE-2026-75924/https://agentprime.io/advisories/CVE-2026-75924/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 16:27:58 GMTCVECVE-2026-70495: Search-v2-operator: search-v2-operator: cluster-wide impersonate on users/groups shared across 4 pods grants hub system:mastershttps://agentprime.io/advisories/CVE-2026-70495/https://agentprime.io/advisories/CVE-2026-70495/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Aug 2026 19:28:37 GMTCVECVE-2026-66792: Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clustershttps://agentprime.io/advisories/CVE-2026-66792/https://agentprime.io/advisories/CVE-2026-66792/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Aug 2026 18:12:36 GMTCVEcriticalCVE-2026-16242: Hypershift: konnectivity proxy-server accepts agent connections without validating client certificateshttps://agentprime.io/advisories/CVE-2026-16242/https://agentprime.io/advisories/CVE-2026-16242/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 07:33:16 GMTCVEcriticalCVE-2025-10894: Nx: nx/devkit: malicious versions of nx and plugins published to npmhttps://agentprime.io/advisories/CVE-2025-10894/https://agentprime.io/advisories/CVE-2025-10894/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Sep 2025 21:20:31 GMTCVEcriticalCVE-2022-3248: Openshift api admission checks does not enforce "custom-host" permissionshttps://agentprime.io/advisories/CVE-2022-3248/https://agentprime.io/advisories/CVE-2022-3248/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Oct 2023 13:28:27 GMTCVECVE-2023-3089: Ocp & fips modehttps://agentprime.io/advisories/CVE-2023-3089/https://agentprime.io/advisories/CVE-2023-3089/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Jul 2023 12:21:03 GMTCVE