Dashboard / CVE-2026-4740

CVE-2026-4740

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-04-07 Modified: 2026-10-26 First seen: 2026-10-29 Status: pending_score

Description

A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advanced Cluster Management (ACM). Improper validation of Kubernetes client certificate renewal allows a managed cluster administrator to forge a client certificate that can be approved by the OCM controller. This enables cross-cluster privilege escalation and may allow an attacker to gain control over other managed clusters, including the hub cluster.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
redhat advanced_cluster_management_for_kubernetes -

References & Advisories (9)

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.15%
Raw Score 0.001480
Percentile 4.0%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00148
2026-10-28
0.00148

Intelligence Sources

nvd ref →

External Links