Multicluster Global Hub vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

MG

Product

Multicluster Global Hub

by Red Hat · last CVE Oct 21, 2026

8

CVEs

0

On KEV

9.8

Max CVSS

2

New 30D

Vulnerabilities8 In the news0 Timeline

Severity mix

Critical 2High 5Medium 0Low 1

Severity

All severities8 Critical2 High5 Medium0 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Multicluster Global Hub to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-33814	7.5	1%	May 7	Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net Affected: All versions, or not specified
CVE-2026-41602	7.5	1%	Apr 28	Apache Thrift: Go TFramedTransport uint32 overflow Affected: All versions, or not specified
CVE-2026-43869	7.3	1%	May 5	Apache Thrift: TSSLTransportFactory.java hostname verification Affected: All versions, or not specified
CVE-2026-110744 New	7.2	0%	Oct 21	Multicluster-global-hub-operator-bundle: operator serviceaccount granted unrestricted impersonation of users, groups and serviceaccounts cluster-wide Affected: All versions, or not specified
CVE-2026-83550	7.1	0%	Oct 6	Postgres-exporter: net/http/pprof exposed on metrics listener Affected: All versions, or not specified