rhacm2/lighthouse-coredns-rhel9 vulnerabilities
CVEs whose affected-version data names the rhacm2/lighthouse-coredns-rhel9 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2026-66786Critical· 9.1A flaw was found in submariner
A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition (CRD) without proper validation. A malicious cluster can exploit this by publishing a Ca…
CVE-2026-66787High· 8.7A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes
A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability stems from insufficient validation of advertised IP addresses within EndpointSlice objects. A compromised spoke cluste…
CVE-2026-66788Critical· 9.9A flaw was found in Lighthouse
A flaw was found in Lighthouse. A remote attacker, by compromising a spoke cluster, can exploit a vulnerability where the destination namespace for resource injection is derived from an attacker-controlled label or annotation on the brok…
CVE-2024-5042Medium· 6.6A flaw was found in the Submariner project
A flaw was found in the Submariner project. Due to unnecessary role-based access control permissions, a privileged attacker can run a malicious container on a node that may allow them to steal service account tokens and further compromis…