rhceph-dev/odf4-mcg-core-rhel9 vulnerabilities
CVEs whose affected-version data names the rhceph-dev/odf4-mcg-core-rhel9 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-86330High· 7.2An OS command injection flaw was found in the set_hostname_internal function of NooBaa's cluster_internal_api
An OS command injection flaw was found in the set_hostname_internal function of NooBaa's cluster_internal_api. This component is responsible for managing the Multi-Cloud Object Gateway in OpenShift Data Foundation. The vulnerability occu…
▾ TwilightRed Hat · odf4/mcg-core-rhel9EPSS 2.2%via NVD
CVE-2026-94368High· 7.1A flaw was found in the signature verification logic of noobaa-core, the core component of the NooBaa Multicloud Object Gateway
A flaw was found in the signature verification logic of noobaa-core, the core component of the NooBaa Multicloud Object Gateway. The issue occurs when the service processes S3 presigned URLs using Signature Version 4 (SigV4). Due to impr…
▾ TwilightRed Hat · odf4/mcg-core-rhel9EPSS 0.23%via NVD