Red Hat Enterprise Linux Multicluster Engine for Kubernetes

productDE

cpe:/o:redhat:enterprise_linux:multicluster_engine_for_kubernetes

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical5high3medium0low

updated 2026-10-27

vulnerabilities (50)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-37903US	critical10.0	4.21% (91st)	Exploit	no fix	2023-07-21	—
CVE-2026-27145US	—	0.59% (48th)	Exploit	no fix	2026-06-02	—
CVE-2026-46595US	—OT elevated	0.56% (46th)	Exploit	no fix	2026-05-22	—
CVE-2026-42508US	—	6.91% (94th)	—	no fix	2026-05-22	—
CVE-2026-39821US	—	1.83% (79th)	—	no fix	2026-05-22	—
CVE-2026-33811US	high7.5	0.88% (59th)	—	no fix	2026-05-07	—
CVE-2026-33814US	high7.5	0.84% (58th)	—	no fix	2026-05-07	—
CVE-2026-42499US	—	0.80% (56th)	—	no fix	2026-05-07	—
CVE-2026-39820US	high7.5	0.78% (56th)	—	no fix	2026-05-07	—
CVE-2024-45336US	—	0.73% (54th)	—	no fix	2025-01-28	—
CVE-2024-45340US	—	0.71% (53rd)	—	no fix	2025-01-28	—
CVE-2026-13676US	—	0.69% (53rd)	—	no fix	2026-06-29	—
CVE-2026-39832US	—	0.68% (52nd)	—	no fix	2026-05-22	—
CVE-2026-39830US	—	0.68% (52nd)	—	no fix	2026-05-22	—
CVE-2025-22867US	—	0.65% (51st)	—	no fix	2025-02-06	—
CVE-2026-39836US	high7.5	0.63% (50th)	—	no fix	2026-05-07	—
CVE-2025-22865US	—	0.61% (49th)	—	no fix	2025-01-28	—
CVE-2026-39834US	—	0.60% (48th)	—	no fix	2026-05-22	—
CVE-2024-45341US	—	0.57% (47th)	—	no fix	2025-01-28	—
CVE-2026-42504US	—	0.56% (46th)	—	no fix	2026-06-02	—
CVE-2023-3089US	high7.5	0.52% (44th)	—	no fix	2023-07-05	—
CVE-2026-39835US	—	0.50% (43rd)	—	no fix	2026-05-22	—
CVE-2026-39831US	—OT elevated	0.48% (41st)	—	no fix	2026-05-22	—
CVE-2026-46597US	—	0.47% (41st)	—	no fix	2026-05-22	—
CVE-2026-39833US	—OT elevated	0.47% (40th)	—	no fix	2026-05-22	—
CVE-2026-39829US	—	0.47% (40th)	—	no fix	2026-05-22	—
CVE-2026-46598US	—	0.41% (35th)	—	no fix	2026-05-22	—
CVE-2026-39825US	—	0.39% (33rd)	—	no fix	2026-05-07	—
CVE-2026-44740US	—	0.39% (33rd)	—	no fix	2026-06-01	—
CVE-2026-42500US	—	0.38% (32nd)	—	no fix	2026-05-29	—
CVE-2026-39826US	—	0.37% (31st)	—	no fix	2026-05-07	—
CVE-2026-42507US	—	0.37% (31st)	—	no fix	2026-06-02	—
CVE-2026-39828US	—	0.37% (31st)	—	no fix	2026-05-22	—
CVE-2026-33809US	—	0.33% (27th)	—	no fix	2026-03-25	—
CVE-2026-25680US	—	0.33% (26th)	—	no fix	2026-05-22	—
CVE-2026-39823US	—	0.31% (24th)	—	no fix	2026-05-07	—
CVE-2025-22866US	—	0.29% (21st)	—	no fix	2025-02-06	—
CVE-2026-39827US	—	0.28% (20th)	—	no fix	2026-05-22	—
CVE-2026-42506US	—	0.24% (14th)	—	no fix	2026-05-22	—
CVE-2026-42501US	—	0.23% (14th)	—	no fix	2026-05-07	—
CVE-2026-42502US	—	0.22% (13th)	—	no fix	2026-05-22	—
CVE-2026-27136US	—	0.22% (13th)	—	no fix	2026-05-22	—
CVE-2026-25681US	—	0.22% (13th)	—	no fix	2026-05-22	—
CVE-2026-39882US	—	0.19% (9th)	—	no fix	2026-04-08	—
CVE-2026-39819US	medium5.3	0.18% (7th)	—	no fix	2026-05-07	—
CVE-2026-39817US	medium5.9	0.17% (6th)	—	no fix	2026-05-07	—
CVE-2025-57853US	—OT elevated	0.16% (5th)	—	no fix	2026-04-08	—
CVE-2025-58713US	—OT elevated	0.14% (4th)	—	no fix	2026-04-08	—
CVE-2025-57854US	—OT elevated	0.14% (4th)	—	no fix	2026-04-08	—
CVE-2025-57851US	medium6.7OT elevated	0.11% (1st)	—	no fix	2026-04-08	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-276Incorrect Default Permissions4 CVEs
CWE-1021Improper Restriction of Rendered UI Layers or Frames3 CVEs
CWE-295Improper Certificate Validation3 CVEs
CWE-606Unchecked Input for Loop Condition3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-281Improper Preservation of Permissions2 CVEs
CWE-347Improper Verification of Cryptographic Signature2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)50 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan