agentprime: red-hat-multicluster-engine-for-kubernetes-2-10Every new CVE for red-hat-multicluster-engine-for-kubernetes-2-10.https://agentprime.io/CVE-2026-73267: Clusterclaims-controller: managedcluster deletion keyed solely on clusterclaim.spec.namespace with no local ownership checkhttps://agentprime.io/advisories/CVE-2026-73267/https://agentprime.io/advisories/CVE-2026-73267/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 02:43:36 GMTCVECVE-2026-75569: Mce-operator-bundle: all github actions pinned by mutable tag, not commit shahttps://agentprime.io/advisories/CVE-2026-75569/https://agentprime.io/advisories/CVE-2026-75569/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 20:47:45 GMTCVECVE-2026-66794: Cluster-proxy-addon: cluster-proxy-addon: unauthenticated ssrf to arbitrary managed-cluster services via public routehttps://agentprime.io/advisories/CVE-2026-66794/https://agentprime.io/advisories/CVE-2026-66794/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 17:30:07 GMTCVEcriticalCVE-2026-66795: Managedcluster-import-controller: csr auto-approver does not validate certificate subject or signername (spoke→hub cluster-admin)https://agentprime.io/advisories/CVE-2026-66795/https://agentprime.io/advisories/CVE-2026-66795/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Aug 2026 20:45:33 GMTCVEcriticalCVE-2026-73266: Clusterclaims-controller: confused deputy: tenant-controlled clusterclaim labels propagated to managedcluster, enabling cross-tenant managedclusterset joinhttps://agentprime.io/advisories/CVE-2026-73266/https://agentprime.io/advisories/CVE-2026-73266/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 16:36:45 GMTCVECVE-2026-19130: Provider-credential-controller: provider-credential-controller: cross-namespace credential propagation via attacker-controlled copiedfrom labels bypasses authorizationhttps://agentprime.io/advisories/CVE-2026-19130/https://agentprime.io/advisories/CVE-2026-19130/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 20:46:21 GMTCVECVE-2026-73268: Cluster-curator-controller: cluster-curator-controller: spec.install.overridejob allows arbitrary job spec injectionhttps://agentprime.io/advisories/CVE-2026-73268/https://agentprime.io/advisories/CVE-2026-73268/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 19:05:12 GMTCVEcriticalCVE-2026-73269: Cluster-curator-controller: cluster-curator-controller: tenant-controllable trigger creates clusterrolebinding granting cluster-wide secrets access to namespace-local sahttps://agentprime.io/advisories/CVE-2026-73269/https://agentprime.io/advisories/CVE-2026-73269/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 19:05:05 GMTCVEcriticalCVE-2026-17107: Cluster-proxy: impersonation-header injection grants cluster-admin on every managed clusterhttps://agentprime.io/advisories/CVE-2026-17107/https://agentprime.io/advisories/CVE-2026-17107/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Jul 2026 18:56:05 GMTCVE