ME
Product
Multicluster Engine for Kubernetes
32
CVEs
0
On KEV
10.0
Max CVSS
5
New 30D
Severity mix
Critical 5High 15Medium 11Low 1
Watch
Add Multicluster Engine for Kubernetes to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-10805 | 6.7 | Jun 4 | Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend Affected: All versions, or not specified |
| CVE-2025-57851 | 6.7 | Apr 8 | Mce: privilege escalation via excessive /etc/passwd permissions Affected: All versions, or not specified |
| CVE-2026-71299 | 6.5 | Oct 5 | Maestro: maestro: rest api write endpoints registered without authentication middleware Affected: All versions, or not specified |
| CVE-2026-35469 | 6.5 | Apr 16 | SpdyStream: DOS on CRI Affected: All versions, or not specified |
| CVE-2026-71298 | 6.4 | Oct 5 | Maestro: sql identifier injection via properties.* search filter and orderby field Affected: All versions, or not specified |
| CVE-2026-10101 | 6.3 | May 29 | Assisted-service: assisted-service: infraenv status leaks referenced pull-secret contents to namespace view users Affected: All versions, or not specified |
| CVE-2026-39828 | 6.3 | May 22 | Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh Affected: All versions, or not specified |
| CVE-2026-42338 | 6.1 | May 12 | ip-address: XSS in Address6 HTML-emitting methods Affected: All versions, or not specified |
| CVE-2026-22029 | 6.1 | Jan 10 | React Router vulnerable to XSS via Open Redirects Affected: All versions, or not specified |
| CVE-2026-71297 | 5.4 | Oct 5 | Maestro: maestro: grpc broker has no auth interceptor and client mtls is optional Affected: All versions, or not specified |
| CVE-2026-39835 | 5.3 | May 22 | Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh Affected: All versions, or not specified |
Showing 11