agentprime: red-hat-openshift-container-platform-4-22Every new CVE for red-hat-openshift-container-platform-4-22.https://agentprime.io/CVE-2026-104795: Insights-runtime-extractor: insights-runtime-extractor: container escape via privileged binary executionhttps://agentprime.io/advisories/CVE-2026-104795/https://agentprime.io/advisories/CVE-2026-104795/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 10:55:17 GMTCVECVE-2026-75888: Openshift/console: openshift/console: authenticated ssrf via helm chart url fetchhttps://agentprime.io/advisories/CVE-2026-75888/https://agentprime.io/advisories/CVE-2026-75888/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 16:36:04 GMTCVECVE-2026-93017: Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-readerhttps://agentprime.io/advisories/CVE-2026-93017/https://agentprime.io/advisories/CVE-2026-93017/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 14:31:58 GMTCVECVE-2026-107176: Cluster-samples-operator: role reads all secrets in openshift-config, not just pull-secrethttps://agentprime.io/advisories/CVE-2026-107176/https://agentprime.io/advisories/CVE-2026-107176/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 19:29:31 GMTCVECVE-2026-96577: Oc-mirror__release-4.21: embedded local cache registry listens on all interfaces without authentication, with delete enabledhttps://agentprime.io/advisories/CVE-2026-96577/https://agentprime.io/advisories/CVE-2026-96577/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 09:17:53 GMTCVECVE-2026-83589: Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirecthttps://agentprime.io/advisories/CVE-2026-83589/https://agentprime.io/advisories/CVE-2026-83589/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 09:17:43 GMTCVECVE-2026-87114: Kube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudohttps://agentprime.io/advisories/CVE-2026-87114/https://agentprime.io/advisories/CVE-2026-87114/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 16:49:04 GMTCVECVE-2026-75887: Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handlerhttps://agentprime.io/advisories/CVE-2026-75887/https://agentprime.io/advisories/CVE-2026-75887/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 21:24:01 GMTCVECVE-2026-75886: Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token forwardinghttps://agentprime.io/advisories/CVE-2026-75886/https://agentprime.io/advisories/CVE-2026-75886/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 20:48:13 GMTCVECVE-2026-94640: Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of servicehttps://agentprime.io/advisories/CVE-2026-94640/https://agentprime.io/advisories/CVE-2026-94640/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 15:39:49 GMTCVECVE-2026-75885: Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpointhttps://agentprime.io/advisories/CVE-2026-75885/https://agentprime.io/advisories/CVE-2026-75885/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 21:58:11 GMTCVEcriticalCVE-2026-49329: Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login endpointshttps://agentprime.io/advisories/CVE-2026-49329/https://agentprime.io/advisories/CVE-2026-49329/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2026 15:30:57 GMTCVECVE-2026-50236: Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift consolehttps://agentprime.io/advisories/CVE-2026-50236/https://agentprime.io/advisories/CVE-2026-50236/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 11:23:59 GMTCVECVE-2026-50237: Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in openshift consolehttps://agentprime.io/advisories/CVE-2026-50237/https://agentprime.io/advisories/CVE-2026-50237/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 11:23:55 GMTCVECVE-2026-72693: Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root loginhttps://agentprime.io/advisories/CVE-2026-72693/https://agentprime.io/advisories/CVE-2026-72693/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 08:39:24 GMTCVECVE-2026-49332: Openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreamshttps://agentprime.io/advisories/CVE-2026-49332/https://agentprime.io/advisories/CVE-2026-49332/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 12:18:26 GMTCVECVE-2026-16242: Hypershift: konnectivity proxy-server accepts agent connections without validating client certificateshttps://agentprime.io/advisories/CVE-2026-16242/https://agentprime.io/advisories/CVE-2026-16242/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 07:33:16 GMTCVEcriticalCVE-2026-15809: Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home envhttps://agentprime.io/advisories/CVE-2026-15809/https://agentprime.io/advisories/CVE-2026-15809/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 12:32:42 GMTCVECVE-2026-58015: Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receivehttps://agentprime.io/advisories/CVE-2026-58015/https://agentprime.io/advisories/CVE-2026-58015/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 13:02:45 GMTCVECVE-2026-14164: Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()https://agentprime.io/advisories/CVE-2026-14164/https://agentprime.io/advisories/CVE-2026-14164/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 06:29:23 GMTCVECVE-2026-12505: Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcallhttps://agentprime.io/advisories/CVE-2026-12505/https://agentprime.io/advisories/CVE-2026-12505/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jun 2026 03:34:22 GMTCVECVE-2026-42965: Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validationhttps://agentprime.io/advisories/CVE-2026-42965/https://agentprime.io/advisories/CVE-2026-42965/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 May 2026 09:50:44 GMTCVECVE-2026-46579: Openshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontendhttps://agentprime.io/advisories/CVE-2026-46579/https://agentprime.io/advisories/CVE-2026-46579/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 May 2026 09:50:44 GMTCVECVE-2026-42012: Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sanshttps://agentprime.io/advisories/CVE-2026-42012/https://agentprime.io/advisories/CVE-2026-42012/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 21:29:26 GMTCVE