Vulnerabilities CVE-2026-1784

CVE-2026-1784

High

Open

TLP:CLEAR

Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy. It was found that the checks performed on the spec.path YAML stanza in a Route document was insufficient and could allow a controlled injection of the HAProxy configuration.

Details

CVSS Score: 8.8
EPSS Score ⓘ: 0.19%

9.4th percentile
CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Confidence: 90%
Published: Jun 2, 2026
Last Modified: Aug 11, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.