MG
Product
Multicluster Global Hub
6
CVEs
0
On KEV
7.5
Max CVSS
2
New 30D
Severity mix
Critical 0High 5Medium 0Low 1
Watch
Add Multicluster Global Hub to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-33814 | 7.5 | May 7 | Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net Affected: All versions, or not specified |
| CVE-2026-41602 | 7.5 | Apr 28 | Apache Thrift: Go TFramedTransport uint32 overflow Affected: All versions, or not specified |
| CVE-2026-43869 | 7.3 | May 5 | Apache Thrift: TSSLTransportFactory.java hostname verification Affected: All versions, or not specified |
| CVE-2026-110744 New | 7.2 | Oct 21 | Multicluster-global-hub-operator-bundle: operator serviceaccount granted unrestricted impersonation of users, groups and serviceaccounts cluster-wide Affected: All versions, or not specified |
| CVE-2026-83550 | 7.1 | Oct 6 | Postgres-exporter: net/http/pprof exposed on metrics listener Affected: All versions, or not specified |
| CVE-2025-8556 | 3.7 | Aug 6 | Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results Affected: All versions, or not specified |
Showing 6
