CVE-2026-71845: advanced cluster management for kubernetes 2.0; +7 more affected products

Affected technology

advanced cluster management for kubernetes · 2.0
redhat

insights-client · Version not applicable in the source CPE
redhat

Red Hat Advanced Cluster Management for Kubernetes 2.11 · Exact affected versions not specified by the source
Red Hat

Red Hat Advanced Cluster Management for Kubernetes 2.13 · Exact affected versions not specified by the source
Red Hat

Red Hat Advanced Cluster Management for Kubernetes 2.14 · Exact affected versions not specified by the source
Red Hat

Red Hat Advanced Cluster Management for Kubernetes 2.15 · Exact affected versions not specified by the source
Red Hat

Red Hat Advanced Cluster Management for Kubernetes 2.16 · Exact affected versions not specified by the source
Red Hat

Red Hat Advanced Cluster Management for Kubernetes 2.17 · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source
Function: logs

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

An attacker with access to pod logs or centralized logging could obtain the credential, leading to unauthorized access to the CCX API. Vendor/CNA’s CVSS 3.1 assessment (base score 6.3/10) rates confidentiality impact as high; integrity and availability impact as none. NVD’s CVSS 3.1 assessment (base score 7.7/10) rates confidentiality impact as high; integrity and availability impact as none.