Red Hat Security Advisory

RHSA-2026:55810

Multicluster Global Hub 1.4.8 security update

Released 2026-08-17 · Red Hat rating Critical · View on Red Hat →

Fixed in

Multicluster Global Hub 1.4.9 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator

Fixes 4 records

TI-2026-40371 CVE-2026-55969 · GHSA-x8jh-qfcv-fp29

Integer overflow in Apache Thrift

MEDIUM 46

Integer Overflow or Wraparound vulnerability in Apache Thrift C++, c_glib, Go, netstd, Delphi and Haxe bindings.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0103 Published 2026-07-27 Partial fix · 0.24.0 CWE-190

TI-2026-25775 CVE-2026-33376 · GHSA-3r2p-7499-27q3

Auth Proxy IPv6 whitelist bypass

LOW 34

When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00282 Published 2026-05-13 Partial fix · 11.6.14+security-04, 12.2.8+security-04 +3 CWE-1188

TI-2026-25776 CVE-2026-33377 · GHSA-5cv7-h7gr-wjgh

Dashboard Import Overwrites ACL — Editor Privilege Escalation to Dashboard Admin

LOW 33

An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00226 Published 2026-05-13 Partial fix · 11.6.14+security-04, 12.2.8+security-04 +3 CWE-284

TI-2026-30614 CVE-2026-42306 · GHSA-rg2x-37c3-w2rh

Moby: Race condition in docker cp allows bind mount redirection to host path

LOW 30

Moby is an open source container framework.

CVSS 3.1HIGH 7.2 Local Low privileges User interaction EPSS 0.00104 Published 2026-06-12 Partial fix · 2.0.0-beta.14 CWE-367