VDB

CVE-2026-50236

CVE-2026-50236 PUBLISHED CVSS 7.4 HIGH

Reported by redhat · Published August 11, 2026

An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers. User-supplied target URLs are fetched server-side without validation, with path neutralization enabling arbitrary endpoint targeting and full response reflection from the console pod's privileged network position.

Risk Scores

CVSS 3.1
7.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Affected Products

VendorProductVersions
Red HatRed Hat OpenShift Container Platform 4.141787056403
Red HatRed Hat OpenShift Container Platform 4.151787028559
Red HatRed Hat OpenShift Container Platform 4.161787054159
Red HatRed Hat OpenShift Container Platform 4.171787631382
Red HatRed Hat OpenShift Container Platform 4.181786540776
Red HatRed Hat OpenShift Container Platform 4.191786486822
Red HatRed Hat OpenShift Container Platform 4.201786534931
Red HatRed Hat OpenShift Container Platform 4.211786574043
Red HatRed Hat OpenShift Container Platform 4.221786607915
Red HatRed Hat OpenShift Container Platform 4.171787631382, 1787631382, 1787631382
Red HatRed Hat OpenShift Container Platform 4.161787054159, 1787054159, 1787054159
Red HatRed Hat OpenShift Container Platform 4.151787028559, 1787028559, 1787028559
Red HatRed Hat OpenShift Container Platform 4
Red HatRed Hat OpenShift Container Platform 4.181786540776, 1786540776, 1786540776
Red HatRed Hat OpenShift Container Platform 4.211786574043, 1786574043, 1786574043
Red HatRed Hat OpenShift Container Platform 4.191786486822, 1786486822, 1786486822
Red HatRed Hat OpenShift Container Platform 4.201786534931, 1786534931, 1786534931
Red HatRed Hat OpenShift Container Platform 4.141787056403, 1787056403, 1787056403
Red HatRed Hat OpenShift Container Platform 4
Red HatRed Hat OpenShift Container Platform 4.21786534931, 1786534931, 1786534931

…and 1 more

Timeline

  • Aug 11, 2026 CVE Published
  • Aug 12, 2026 Coalition ESS Score
  • Aug 24, 2026 EPSS Score
  • Aug 27, 2026 EPSS Score
  • Sep 1, 2026 EPSS Score
  • Sep 6, 2026 EPSS Score
  • Sep 9, 2026 EPSS Score
  • Sep 12, 2026 EPSS Score
  • Sep 16, 2026 EPSS Score
  • Sep 18, 2026 EPSS Score
  • Sep 22, 2026 Distribution Patch
  • Sep 22, 2026 Distribution Patch

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›