<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: red-hat-multicluster-engine-for-kubernetes</title><description>Every new CVE for red-hat-multicluster-engine-for-kubernetes.</description><link>https://agentprime.io/</link><item><title>CVE-2026-114236: Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers</title><link>https://agentprime.io/advisories/CVE-2026-114236/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114236/</guid><description>CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 21 Oct 2026 08:04:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-71297: Maestro: maestro: grpc broker has no auth interceptor and client mtls is optional</title><link>https://agentprime.io/advisories/CVE-2026-71297/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-71297/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Oct 2026 19:55:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-71299: Maestro: maestro: rest api write endpoints registered without authentication middleware</title><link>https://agentprime.io/advisories/CVE-2026-71299/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-71299/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Oct 2026 19:06:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-71298: Maestro: sql identifier injection via properties.* search filter and orderby field</title><link>https://agentprime.io/advisories/CVE-2026-71298/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-71298/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Oct 2026 19:06:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-101919: Hypershift: hypershift: unsanitized kubeconfig passthrough from tenant namespace to control plane</title><link>https://agentprime.io/advisories/CVE-2026-101919/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-101919/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Oct 2026 17:33:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-75924: Managed-serviceaccount: managed-serviceaccount: hub addon-manager clusterrole grants cluster-wide secret read/write and csr approval</title><link>https://agentprime.io/advisories/CVE-2026-75924/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-75924/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Aug 2026 16:27:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16242: Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates</title><link>https://agentprime.io/advisories/CVE-2026-16242/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16242/</guid><description>CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 20 Jul 2026 07:33:16 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-10805: Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend</title><link>https://agentprime.io/advisories/CVE-2026-10805/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-10805/</guid><description>CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 04 Jun 2026 05:21:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-10101: Assisted-service: assisted-service: infraenv status leaks referenced pull-secret contents to namespace view users</title><link>https://agentprime.io/advisories/CVE-2026-10101/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-10101/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 29 May 2026 15:23:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-57851: Mce: privilege escalation via excessive /etc/passwd permissions</title><link>https://agentprime.io/advisories/CVE-2025-57851/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-57851/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Apr 2026 13:55:00 GMT</pubDate><category>CVE</category></item></channel></rss>