TI-2026-25384 CVE-2026-32936 · GHSA-63cw-r7xf-jmwr
CoreDNS DoH GET path missing size validation causes CPU and memory amplification
Priority HIGH 77
CoreDNS is a DNS server that chains plugins.
RHSA-2026:85227
Submariner v0.23 security fixes and container updates
Released 2026-10-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Advanced Cluster Management for Kubernetes 2.16 registry.redhat.io/rhacm2/lighthouse-agent-rhel9, registry.redhat.io/rhacm2/lighthouse-coredns-rhel9, registry.redhat.io/rhacm2/subctl-rhel9 +4
Fixes 11 records
TI-2026-27682 CVE-2026-35579 · GHSA-vp29-5652-4fw9
CoreDNS TSIG authentication bypass on gRPC, QUIC, DoH, and DoH3 transports
Priority HIGH 75
CoreDNS is a DNS server written in Go.
TI-2026-47432 CVE-2026-66788 · GHSA-264j-8377-4hmm
Lighthouse: lighthouse: arbitrary namespace injection via attacker-controlled broker label
Priority MEDIUM 44
A flaw was found in Lighthouse.
TI-2026-47430 CVE-2026-66786 · GHSA-f6r4-g4jr-h7f2
Submariner: submariner: ipsec.conf stanza injection via remote-supplied cablename and subnets
Priority MEDIUM 44
A flaw was found in submariner.
TI-2026-45095 CVE-2026-63209 · GHSA-259r-337f-4rfw
Integer Overflow or Wraparound and Out-of-bounds Write in compress
Priority MEDIUM 40
compress provides various compression algorithms.
TI-2026-47431 CVE-2026-66787 · GHSA-7fh9-j94v-w42j
Lighthouse: lighthouse: cross-cluster dns spoofing via unvalidated endpointslice ip addresses
Priority LOW 39
A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes.
TI-2026-47429 CVE-2026-66785 · GHSA-37mq-728j-5q43
Submariner: submariner: missing validation of remote endpoint subnets and clusterid enables cross-cluster traffic hijack
Priority LOW 39
A flaw was found in Submariner.
TI-2026-47425 CVE-2026-66780 · GHSA-3xmh-phwc-5f4g
Submariner-operator: broker serviceaccount secret (token + ca) logged in full at trace verbosity
Priority LOW 32
A flaw was found in the submariner-operator component.
TI-2026-47427 CVE-2026-66782 · GHSA-4mpr-hwg7-q5x5
Submariner-operator: operator clusterrole grants cluster-wide create/update on all configmaps
Priority LOW 28
A flaw was found in the Submariner operator.
TI-2026-47426 CVE-2026-66781 · GHSA-gcch-g8g2-6852
Submariner-operator: pprof debug endpoint enabled by default on 0.0.0.0:8082 without authentication
Priority LOW 25
A flaw was found in the Submariner operator.
TI-2026-47428 CVE-2026-66783 · GHSA-95w2-696m-24mq
Submariner-operator: release workflow consumes same-org composite action via mutable @devel branch ref
Priority LOW 22
A flaw was found in the `submariner-operator` component of Red Hat Advanced Cluster Management for Kubernetes.