https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T23:38:27.462087+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-365501 EUVD-2026-365501 2026-10-06T23:38:27.535018+00:00 EUVD-2026-365501 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54100 fkie_cve-2026-54100 2026-10-06T23:38:27.535054+00:00

A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. WMCO establishes SSH connections to Windows worker nodes without verifying the remote server host key. An adjacent-network attacker who can intercept or redirect WMCO's SSH session can capture WICD and kubelet bootstrap credentials transferred during node configuration, enabling compromise of Windows node identities in the cluster.

 https://cve.radiocsirt.org/vuln/ghsa-q3jf-4x8j-368q GHSA-q3jf-4x8j-368q 2026-10-06T23:38:27.535090+00:00

A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. WMCO establishes SSH connections to Windows worker nodes without verifying the remote server host key. An adjacent-network attacker who can intercept or redirect WMCO's SSH session can capture WICD and kubelet bootstrap credentials transferred during node configuration, enabling compromise of Windows node identities in the cluster.

 https://cve.radiocsirt.org/vuln/rhsa-2026:47173 RHSA-2026:47173 — Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.22.1 product release 2026-10-06T23:38:27.535108+00:00

windows-machine-config-operator: windows-machine-config-operator: WICD CSR extra-Organization allows privilege escalation to system:masters windows-machine-config-operator: windows-machine-config-operator: SSH host key not verified enables credential theft

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2552 WID-SEC-W-2026-2552 — Red Hat OpenShift für Windows Containers (WMCO): Mehrere Schwachstellen 2026-10-06T23:38:27.535128+00:00

Ein Angreifer kann mehrere Schwachstellen in Red Hat OpenShift für Windows Containers ausnutzen, um Administratorrechte zu erlangen und vertrauliche Informationen offenzulegen.