FOUR critical vulnerabilities were detected in various software products, with Red Hat disclosing three major flaws in its Kubernetes management system. The most severe, CVE-2026-66792, has a CVSS score of 9.9 and allows a privileged user to escalate their privileges to 'cluster-admin', potentially compromising the entire managed cluster. The vulnerabilities list includes:
1. **CVE-2026-66792** - Critical flaw for privilege escalation (CVSS 9.9)
2. **CVE-2026-66795** - Managed cluster import controller vulnerability (CVSS 9.1)
3. **CVE-2026-71472** - ACM search component vulnerability (CVSS 9.1).
Currently, there are no confirmed exploitations, but it is recommended to apply security patches as they become available and tighten role-based access controls (RBAC) to mitigate risks.