RH
Product
Red Hat Advanced Cluster Management for Kubernetes 2.13
58
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 15High 28Medium 15Low 0
Watch
Add Red Hat Advanced Cluster Management for Kubernetes 2.13 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-26017 | 6.3 | Mar 6 | CoreDNS ACL Bypass Affected: All versions, or not specified |
| CVE-2026-18874 | 6.2 | Aug 19 | Volsync-addon-controller: volsync-addon-controller: annotation values rendered into yaml via text/template without escaping allows yaml injection into subscription Affected: All versions, or not specified |
| CVE-2026-22029 | 6.1 | Jan 10 | React Router vulnerable to XSS via Open Redirects Affected: All versions, or not specified |
| CVE-2026-75485 | 5.5 | Aug 18 | Must-gather: /tmp/kubeconfig retention Affected: All versions, or not specified |
| CVE-2026-73834 | 5.5 | Aug 18 | Must-gather: must-gather: embedded secret data in acm wrapper crs collected without redaction Affected: All versions, or not specified |
| CVE-2026-66781 | 5.4 | Aug 18 | Submariner-operator: pprof debug endpoint enabled by default on 0.0.0.0:8082 without authentication Affected: All versions, or not specified |
| CVE-2026-71468 | 5.3 | Aug 11 | Acm-search-v2-api-rhel9: search-v2-api: cross-user bearer-token reuse via global federation-config cache Affected: All versions, or not specified |
| CVE-2025-13465 | 5.3 | Jan 21 | Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions Affected: All versions, or not specified |