CVE-2026-75886Published
Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token forwarding
cve-program · CVE-2026-75886
Publishedopenshift4/ose-console-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.17",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "openshift4/ose-console-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1789939565",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift:4.17::el9"
]
}openshift4/ose-console-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "openshift4/ose-console-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1789904865",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
]
}openshift4/ose-console-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.19",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "openshift4/ose-console-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1790095950",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
]
}openshift4/ose-console-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.20",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "openshift4/ose-console-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1790112153",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
]
}openshift4/ose-console-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.21",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "openshift4/ose-console-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1790142788",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
]
}openshift4/ose-console-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.22",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "openshift4/ose-console-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1790130905",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift:4.22::el9"
]
}openshift4/ose-console
https://access.redhat.com/downloads/content/package-browser/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "openshift4/ose-console",
"defaultStatus": "unaffected",
"cpes": [
"cpe:/a:redhat:openshift:4"
]
}Original source record · Cite this exact observation · Complete original publisher JSON