VDB
CVE-2026-66785
CVE-2026-66785
PUBLISHED
CVSS 2.5 LOW
Reported by redhat · Published August 20, 2026
A flaw was found in Submariner. This vulnerability allows a malicious cluster (spoke) to redirect network traffic from other connected clusters (peer clusters) by publishing a specially crafted network endpoint. The system fails to properly validate the network subnets provided by the malicious cluster, enabling it to declare arbitrary network ranges. Consequently, all network traffic intended for these arbitrary ranges from peer clusters will be rerouted through the attacker's tunnel, potentially leading to unauthorized information disclosure or network disruption.
Risk Scores
CVSS 3.1
2.5
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | 1788023916 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | 1788023940 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | 1788105072 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | 1788043964 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | 1788043961 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | 1788073481 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | 1788043970 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | 1788043964 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | 1788023916 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 | 1788043970 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 |
…and 5 more
Timeline
- Aug 20, 2026 CVE Published
- Aug 21, 2026 Coalition ESS Score
- Aug 24, 2026 EPSS Score
- Aug 28, 2026 EPSS Score
- Sep 2, 2026 EPSS Score
- Sep 3, 2026 EPSS Score
- Sep 3, 2026 CVE Updated
- Sep 4, 2026 Distribution Patch
- Sep 4, 2026 Security Advisory
References
- RHSA-2026:63016 vendor-advisoryx_refsource_REDHAT
- vdb-entryx_refsource_REDHAT
- RHBZ#2507530 issue-trackingx_refsource_REDHAT