Multicluster Global Hub 1.7.0 vulnerabilities | LiveThreat CVE Feed

Product

Multicluster Global Hub 1.7.0

by Red Hat · last CVE Jun 2, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities14 In the news0 Timeline

Severity mix

Critical 4High 8Medium 2Low 0

Severity

All severities14 Critical4 High8 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Multicluster Global Hub 1.7.0 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-33816	9.8	1%	Apr 7	CVE-2026-33816 in github.com/jackc/pgx Affected: All versions, or not specified
CVE-2026-33815	9.8	1%	Apr 7	CVE-2026-33815 in github.com/jackc/pgx Affected: All versions, or not specified
CVE-2026-39821	9.6	2%	May 22	Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna Affected: All versions, or not specified
CVE-2025-41118	9.1	0%	Apr 15	Sensitive COS `SecretKey` exposed in plaintext via configuration API due to missing type protection Affected: All versions, or not specified
CVE-2026-46385	7.5	1%	May 29	iskorotkov/avro: CPU Exhaustion in Avro Decoder Affected: All versions, or not specified
CVE-2026-46384	7.5	1%	May 29	iskorotkov/avro: Integer Overflow in Avro Decoder Affected: All versions, or not specified
CVE-2026-33811	7.5	1%	May 7	Crash when handling long CNAME response in net Affected: All versions, or not specified
CVE-2026-42154	7.5	1%	May 4	Prometheus: remote read endpoint allows denial of service via crafted snappy payload Affected: All versions, or not specified
CVE-2026-42151	7.5	0%	May 4	Prometheus Azure AD remote write OAuth client secret exposed via config API Affected: All versions, or not specified
CVE-2026-41602	7.5	1%	Apr 28	Apache Thrift: Go TFramedTransport uint32 overflow Affected: All versions, or not specified
CVE-2026-21728	7.5	1%	Apr 24	Tempo query limit results in unbounded memory allocation Affected: All versions, or not specified
CVE-2026-43869	7.3	1%	May 5	Apache Thrift: TSSLTransportFactory.java hostname verification Affected: All versions, or not specified
CVE-2026-27145	6.5	1%	Jun 2	Inefficient candidate hostname parsing in crypto/x509 Affected: All versions, or not specified
CVE-2026-40293	6.5	0%	Apr 17	OpenFGA Playground Preshared Key Exposure Affected: All versions, or not specified