Advisories · Technology

Red Hat Multicluster Global Hub.

Every CVE that names Red Hat Multicluster Global Hub among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-110744 CVE record

CVSS 7.2 High

Multicluster-global-hub-operator-bundle: operator serviceaccount granted unrestricted impersonation of users, groups and serviceaccounts cluster-wide
- Red Hat Multicluster Global Hub
- Privilege escalation
Not analysed yet 21 Oct 2026
CVE-2026-83550 CVE record

CVSS 7.1 High

Postgres-exporter: net/http/pprof exposed on metrics listener
- Red Hat Multicluster Global Hub
- CWE-489
Not analysed yet 6 Oct 2026
CVE-2025-10894 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Nx: nx/devkit: malicious versions of nx and plugins published to npm
- Red Hat Multicluster Global Hub
- Red Hat OpenShift Serverless
- CWE-506
Not analysed yet 24 Sept 2025