What’s Vulnerable › Products

Red Hat Multicluster Global Hub 1.6.6 vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Red Hat Multicluster Global Hub 1.6.6 version is affected

Latest Red Hat Multicluster Global Hub 1.6.6 vulnerabilities

• CVE-2026-66792 — Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clusters (CVSS 9.9)
• CVE-2026-71577 — Multicluster-global-hub: multicluster-global-hub: spec-topic read acl leaks bootstrap kubeconfigs to all managed hubs during migration (CVSS 6.3)
• CVE-2026-71576 — Multicluster-global-hub: multicluster-global-hub: manager trusts self-asserted evt.source() for leaf-hub identity in all status handlers (CVSS 8.5)