CVE-2026-1784

Katalog CVE

CVSS 8.8 · High EPSS 0,19%

Kerentanan External Control of System or Configuration Setting pada redhat openshift container platform. Skor CVSS 3.1 8.8 (High) menurut redhat.com.

Deskripsi (NVD)

The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy. It was found that the checks performed on the spec.path YAML stanza in a Route document was insufficient and could allow a controlled injection of the HAProxy configuration.

Rincian

Terbit di NVD

2 Juni 2026

Terakhir diubah

1 Oktober 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber redhat.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-15: External Control of System or Configuration Setting

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 8,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2026-1784 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2436075 issue tracking · advisory vendor
• https://access.redhat.com/errata/RHSA-2026:23241
• https://access.redhat.com/errata/RHSA-2026:23246
• https://access.redhat.com/errata/RHSA-2026:25045
• https://access.redhat.com/errata/RHSA-2026:25182
• https://access.redhat.com/errata/RHSA-2026:25194
• https://access.redhat.com/errata/RHSA-2026:26543
• https://access.redhat.com/errata/RHSA-2026:28893
• https://access.redhat.com/errata/RHSA-2026:28964
• https://access.redhat.com/errata/RHSA-2026:70647
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1784.json