VDB

CVE-2026-66781

CVE-2026-66781 PUBLISHED CVSS 5.4 MEDIUM

Reported by redhat · Published August 18, 2026

A flaw was found in the Submariner operator. The Submariner Custom Resource (CR), used for configuring network connectivity, stores the IPsec pre-shared key (PSK) in an unencrypted format. This key, which is critical for securing communication between Kubernetes clusters, can be accessed by unauthorized parties. Such access enables an attacker to passively decrypt network traffic flowing between any two clusters in the mesh, resulting in sensitive information disclosure.

Risk Scores

CVSS 3.1
5.4
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Affected Products

VendorProductVersions
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.111787689013
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.131787365971
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.141787362756
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.151787362733
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.161787362694
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.171787362658
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.171788105072
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.171788073481
Red HatRed Hat Advanced Cluster Management for Kubernetes 2
Red HatRed Hat Advanced Cluster Management for Kubernetes 2
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.161787362694, 1787362694, 1787362694
Red HatRed Hat Advanced Cluster Management for Kubernetes 2
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.171787362658, 1787362658, 1787362658
Red HatRed Hat Advanced Cluster Management for Kubernetes 2
Red HatRed Hat Advanced Cluster Management for Kubernetes 2
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.131787365971, 1787365971, 1787365971
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.111787689013, 1787689013, 1787689013
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.171788105072, 1788105072
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.171788073481, 1788073481
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.151787362733, 1787362733, 1787362733

…and 1 more

Timeline

  • Aug 18, 2026 CVE Published
  • Aug 20, 2026 Coalition ESS Score
  • Aug 24, 2026 EPSS Score
  • Aug 27, 2026 EPSS Score
  • Sep 2, 2026 EPSS Score
  • Sep 3, 2026 EPSS Score
  • Sep 6, 2026 Distribution Patch
  • Sep 6, 2026 Distribution Patch
  • Sep 6, 2026 Distribution Patch
  • Sep 6, 2026 Distribution Patch
  • Sep 6, 2026 Distribution Patch
  • Sep 6, 2026 Distribution Patch

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›