CVE-2026-66783Medium· 4.4▾ SunlitA flaw was found in the `submariner-operator` component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability allows a cluster administrator, or any user with permissions to modify the Submariner Custom Resource (CR),…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 24.2 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.4%
A flaw was found in the submariner-operator component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability allows a cluster administrator, or any user with permissions to modify the Submariner Custom Resource (CR), to specify an unvalidated image path. This lack of validation enables an attacker to execute arbitrary code with elevated privileges across the entire cluster, including control-plane nodes, by deploying a malicious image.
rhacm2/subctl-rhel9 (all versions)rhacm2/submariner-rhel9-operator (all versions)rhacm2/subctl-rhel9 (all versions)rhacm2/submariner-rhel9-operator (all versions)rhacm2/submariner-addon-rhel9 (all versions)rhacm2/submariner-operator-bundle (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
To mitigate this issue, restrict access to cluster-admin roles and carefully control permissions for users or service accounts that can modify Submariner Custom Resources. Ensure that only trusted and authorized personnel have the ability to patch Submariner CRs, thereby preventing the injection of malicious images.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-66782Medium· 5.8Submariner-operator: operator clusterrole grants cluster-wide create/update on all configmaps
CVE-2026-85469High· 8.0A flaw was found in quay-builder-qemu
CVE-2026-75569High· 7.7A flaw was found in mce-operator-bundle
CVE-2026-112259Medium· 5.5Gimp: gimp: null pointer dereference in swatchbooker (sbz) palette import
CVE-2026-112260High· 7.1Gimp: gimp: heap out-of-bounds read in xcf text-layer parasite parsing
CVE-2026-103314High· 7.4Stackrox: stackrox: saml response replay allows multiple central authentication tokens