CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2026-66786: Red Hat Advanced Cluster Management for Kubernetes 2.16 (exact versions not specified); +2 more affected products

CVE-2026-66786. CVSS 3.1 base score 9.1 (CRITICAL, Vendor/CNA). EPSS 0.01357 (percentile 0.71236), scored 19-Oct-2026.

Affected technology

Red Hat Advanced Cluster Management for Kubernetes 2.16 · Exact affected versions not specified by the source
Red Hat

Red Hat Advanced Cluster Management for Kubernetes 2.17 · Exact affected versions not specified by the source
Red Hat

Red Hat Advanced Cluster Management for Kubernetes 2 · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · High privileges required · No user interaction required

What an attacker can do

An attacker can inject arbitrary configuration parameters or execute commands through leftupdown hooks, leading to remote code execution as root on the gateway node. Vendor/CNA’s CVSS 3.1 assessment (base score 9.1/10) rates confidentiality, integrity and availability impact as high.

Published

CWE
CWE-94
CCR priority
36.7 /100 (P4)
CVSS 3.1
9.1 /10 · CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H · Vendor/CNA
EPSS
0.01357 · percentile 0.71236 · 2026-10-19
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-66786.html