https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 09:32:12 +0000 https://cve.radiocsirt.org/vuln/cve-2026-71576 <p><strong>Affected:</strong> Red Hat Multicluster Global Hub 1.4.9, Red Hat Multicluster Global Hub 1.5.8, Red Hat Multicluster Global Hub 1.6.6, Red Hat Multicluster Global Hub 1.7.3, Red Hat Multicluster Global Hub 1.8.2</p> <p>A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming CloudEvents on Kafka status topics. A remote attacker, after compromising a managed hub and obtaining its Kafka client certificate, can manipulate the self-asserted source identity. This allows the attacker to falsify or delete critical data, such as compliance, inventory, and cluster health information, belonging to other hubs in the database.</p> <p><strong>Affected:</strong> Red Hat Multicluster Global Hub 1.4.9, Red Hat Multicluster Global Hub 1.5.8, Red Hat Multicluster Global Hub 1.6.6, Red Hat Multicluster Global Hub 1.7.3, Red Hat Multicluster Global Hub 1.8.2</p> <p>A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming CloudEvents on Kafka status topics. A remote attacker, after compromising a managed hub and obtaining its Kafka client certificate, can manipulate the self-asserted source identity. This allows the attacker to falsify or delete critical data, such as compliance, inventory, and cluster health information, belonging to other hubs in the database.</p> https://cve.radiocsirt.org/vuln/cve-2026-71576