https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:31:32.744585+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-357803 EUVD-2026-357803 2026-10-04T08:31:32.764131+00:00 EUVD-2026-357803 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11393 fkie_cve-2025-11393 2026-10-04T08:31:32.764171+00:00

A flaw was found in runtimes-inventory-rhel8-operator. An internal proxy component is incorrectly configured. Because of this flaw, the proxy attaches the cluster's main administrative credentials to any command it receives, instead of only the specific reports it is supposed to handle.

This allows a standard user within the cluster to send unauthorized commands to the management platform, effectively acting with the full permissions of the cluster administrator. This could lead to unauthorized changes to the cluster's configuration or status on the Red Hat platform.

 https://cve.radiocsirt.org/vuln/ghsa-cc8c-28gj-px38 GHSA-cc8c-28gj-px38 — Misconfigured Internal Proxy in runtimes-inventory-rhel8-operator Grants Standard Users Full Cluster Administrator Acce… 2026-10-04T08:31:32.764211+00:00

Affected: Go: github.com/RedHatInsights/runtimes-inventory-operator

A flaw was found in runtimes-inventory-rhel8-operator. An internal proxy component is incorrectly configured. Because of this flaw, the proxy attaches the cluster's main administrative credentials to any command it receives, instead of only the specific reports it is supposed to handle.

This allows a standard user within the cluster to send unauthorized commands to the management platform, effectively acting with the full permissions of the cluster administrator. This could lead to unauthorized changes to the cluster's configuration or status on the Red Hat platform.

 https://cve.radiocsirt.org/vuln/rhsa-2025:23236 RHSA-2025:23236 — Red Hat Security Advisory: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0.0: new RHEL 9 container image securi… 2026-10-04T08:31:32.764241+00:00

insights-runtimes-tech-preview/runtimes-inventory-rhel8-operator: Improper Proxy Configuration Allows Unauthorized Administrative Commands crypto/x509: Usage of ExtKeyUsageAny disables policy validation in crypto/x509

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2852 WID-SEC-W-2025-2852 — Red Hat Enterprise Linux (Lightspeed): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-04T08:31:32.764262+00:00

Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in Red Hat Enterprise Linux Lightspeed ausnutzen, um Sicherheitsvorkehrungen zu umgehen.