multicluster engine for Kubernetes 2.7 vulnerabilities

Product

multicluster engine for Kubernetes 2.7

by Red Hat · last CVE Apr 30, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 1High 3Medium 3Low 0

Severity

Exploitation

Watch

Add multicluster engine for Kubernetes 2.7 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-22029	6.1	1%	Jan 10	React Router vulnerable to XSS via Open Redirects Affected: All versions, or not specified
CVE-2026-7163	5.5	0%	Apr 30	Assisted-service: assisted-service: authenticated users can gain administrative access to openshift clusters via credential disclosure Affected: All versions, or not specified
CVE-2025-13465	5.3	2%	Jan 21	Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions Affected: All versions, or not specified