Vulnerabilities

TI-2026-47429 CVE-2026-66785 · GHSA-37mq-728j-5q43

Submariner: submariner: missing validation of remote endpoint subnets and clusterid enables cross-cluster traffic hijack

LOW 39

A flaw was found in Submariner.

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.00206 Published 2026-08-20 Partial fix · 1790670439, 1790670231 +12 CWE-345

TI-2026-47425 CVE-2026-66780 · GHSA-3xmh-phwc-5f4g

LOW 32

A flaw was found in the submariner-operator component.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00579 Published 2026-08-18 Partial fix · 1789135606, 1789131397 +9 CWE-532

TI-2026-47428 CVE-2026-66783 · GHSA-95w2-696m-24mq

LOW 22

A flaw was found in the `submariner-operator` component of Red Hat Advanced Cluster Management for Kubernetes.

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00363 Published 2026-08-18 Partial fix · 1790670243, 1790670912 +2 CWE-1357

TI-2026-47427 CVE-2026-66782 · GHSA-4mpr-hwg7-q5x5

LOW 28

A flaw was found in the Submariner operator.

CVSS 3.1MEDIUM 5.8 Network High privileges No interaction EPSS 0.00376 Published 2026-08-18 Partial fix · 1790670243, 1790670912 +2 CWE-269

TI-2026-47426 CVE-2026-66781 · GHSA-gcch-g8g2-6852

LOW 25

A flaw was found in the Submariner operator.

CVSS 3.1MEDIUM 5.4 Adjacent network No auth No interaction EPSS 0.00395 Published 2026-08-18 Partial fix · 1787689013, 1787365971 +8 CWE-749