Remote Code Execution Flaw in Multicluster Global Hub by Red Hat
CVE-2026-71576

8.5HIGH

Key Information:

Vendor

Red Hat
Status
Multicluster Global Hub
Vendor
CVE Published:
10 August 2026

What is CVE-2026-71576?

A vulnerability in Red Hat's Multicluster Global Hub allows a remote attacker with access to a managed hub's Kafka client certificate to manipulate the source identity of incoming CloudEvents. This oversight permits the attacker to falsify or even erase vital data, including compliance, inventory, and cluster health information relevant to other hubs, jeopardizing the integrity of the database.

References

https://access.redhat.com/security/cve/CVE-2026-71576
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2512513
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.