Vulnerabilities

TI-2026-39027 CVE-2026-54100 · GHSA-q3jf-4x8j-368q

Windows-machine-config-operator: windows-machine-config-operator: ssh host key not verified enables credential theft

LOW 38

A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform.

CVSS 3.1HIGH 8.3 Adjacent network No auth No interaction EPSS 0.00303 Published 2026-06-22 Partial fix · 1789075615, 1789075603 +2 CWE-295

TI-2026-39026 CVE-2026-54099 · GHSA-x82v-328r-gf3h

LOW 39

A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00131 Published 2026-06-22 Partial fix · 1789075615, 1789075603 +3 CWE-269