CVE-2026-4740: redhat advanced_cluster_management_for_kubernetes Improper Certificate Validation

EPSS trend

Probability

0.16%

Chance of exploitation in the next 30 days

Percentile

5%

Versus all other CVEs

30-day change

+0.02 pp

From 0.15% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.16%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (blog.arfevrier.fr)
Maturity: unknown

References

14 links

access.redhat.com/errata/RHSA-2026:11414Vendor AdvisoryX Refsource REDHAT
access.redhat.com/errata/RHSA-2026:13542Vendor AdvisoryX Refsource REDHAT
access.redhat.com/errata/RHSA-2026:13853Vendor AdvisoryX Refsource REDHAT
access.redhat.com/errata/RHSA-2026:8218Vendor AdvisoryX Refsource REDHAT
access.redhat.com/errata/RHSA-2026:9848Vendor AdvisoryX Refsource REDHAT
access.redhat.com/security/cve/CVE-2026-4740VDB EntryX Refsource REDHATWEBVendor Advisory
blog.arfevrier.fr/open-cluster-management-cross-cluster-escape/ExploitThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=2450590Issue TrackingX Refsource REDHATWEBVendor Advisory
security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4740.jsonX Sadp Csaf Vex
nvd.nist.gov/vuln/detail/CVE-2026-4740Advisory

Show all 14 references

Related vulnerabilities

CVE-2025-14874chainguardjitsucom-jitsu+270.56%10mo ago18-12-2025 08:40A flaw was found in Nodemailer. This vulnerability allows a denial of service (DoS) via a crafted email address header that triggers infinite recursion in the address parser.CVE-2025-57851redhatadvanced_cluster_management_for_kubernetes0.11%6mo ago08-04-2026 13:55A container privilege escalation flaw was found in certain Multicluster Engine for Kubernetes images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.CVE-2025-6017redhatadvanced_cluster_management_for_kubernetes0.14%1y ago02-07-2025 06:36A flaw was found in Red Hat Advanced Cluster Management through versions 2.10, before 2.10.7, 2.11, before 2.11.4, and 2.12, before 2.12.4. This vulnerability allows an unprivileged user to view confidential managed cluster credentials through the UI. This information should only be accessible to authorized users and may result in the loss of confidentiality of administrative information, which could be leaked to unauthorized actors.CVE-2020-25688redhatadvanced_cluster_management_for_kubernetes0.25%5y ago23-11-2020 21:07A flaw was found in rhacm versions before 2.0.5 and before 2.1.0. Two internal service APIs were incorrectly provisioned using a test certificate from the source repository. This would result in all installations using the same certificates. If an attacker could observe network traffic internal to a cluster, they could use the private key to decode API requests that should be protected by TLS sessions, potentially obtaining information they would not otherwise be able to. These certificates are not used for service authentication, so no opportunity for impersonation or active MITM attacks were made possible.CVE-2020-25655red hatopen-cluster-management+10.61%5y ago09-11-2020 14:38An issue was discovered in ManagedClusterView API, that could allow secrets to be disclosed to users without the correct permissions. Views created for an admin user would be made available for a short time to users with only view permission. In this short time window the user with view permission could read cluster secrets that should only be disclosed to admin users.CVE-2022-2238redhatadvanced_cluster_management_for_kubernetes0.92%4y ago01-09-2022 19:56A vulnerability was found in the search-api container in Red Hat Advanced Cluster Management for Kubernetes when a query in the search filter gets parsed by the backend. This flaw allows an attacker to craft specific strings containing special characters that lead to crashing the pod and affects system availability while restarting.

All vulnerabilities inadvanced_cluster_management_for_kubernetes

CVE-2026-4740: redhat advanced_cluster_management_for_kubernetes Improper Certificate Validation

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References