cyfenced.com →

[ CVE-2026-75886 · Published 23 Sep 2026 ]

Vulnerability in Red Hat OpenShift Container Platform 4.17

CVSS 7.2 EPSS <1%No fix listed yet

[ Description ]Official description

A flaw was found in openshift/console. An unauthenticated remote attacker can exploit a misconfiguration in the CatalogdHandler, which lacks proper authentication, and the forwarding of the `openshift-session-token` cookie. This allows the attacker to send requests to the in-cluster catalogd service, leading to the disclosure of the internal operator-catalog index and providing a relay into the openshift-catalogd namespace.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References