[NEW] [high] Red Hat OpenShift: Multiple vulnerabilities

CSIRTS triage

What

Multiple vulnerabilities in Red Hat OpenShift enable arbitrary code execution, privilege escalation, denial of service, information disclosure, and file manipulation.

Who is affected

Red Hat OpenShift deployments.

Urgency

High urgency; vulnerabilities allow remote code execution and privilege escalation.

Action

Apply Red Hat security updates for OpenShift addressing CVE-2026-15154, CVE-2026-15467, CVE-2026-15581, CVE-2026-16456, CVE-2026-16745, CVE-2026-18608, CVE-2026-18611, and CVE-2026-18617.

AI-assisted analysis generated from the source advisory — verify against the original.

Details

Source

CERT-Bund (BSI) Security Advisories (DE · national-cert · site)

Severity

high

Published

2026-08-11

Exploitation

Not in CISA KEV at last sync

Language

Machine-translated to English — verify against the original

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2750

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

• Low exploitation riskCVE-2026-151540.30% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 23% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-154670.38% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 31% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-155810.25% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 17% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-164560.31% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 24% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-167450.27% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 19% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-186080.43% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 36% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-186110.40% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 33% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-186170.45% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 37% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-186180.54% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 43% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-186200.32% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 25% of all EPSS-scored CVEs.

Referenced CVEs

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

• highCVE-2026-18982: A flaw was found in the RHOAI training-operator. This vulnerability allows a user with standar…nvd
• highCVE-2026-18951: A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator. The RH…nvd
• highCVE-2026-18950: A flaw was found in odh-dashboard. An authenticated user of the dashboard can exploit a vulner…nvd
• highCVE-2026-18949: A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised …nvd
• criticalCVE-2026-18948: A flaw was found in Feast. The system improperly deserializes user-defined functions (UDFs) st…nvd
• highCVE-2026-18947: A flaw was found in Feast. An authorization bypass vulnerability exists in the /materialize an…nvd
• highCVE-2026-18941: A flaw was found in Feast and feast-operator. The default configuration for both the Feast SDK…nvd
• highCVE-2026-18621: A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges…nvd
• highCVE-2026-18620: A flaw was found in Data Science Pipelines. A restricted user, or tenant, can exploit an impro…nvd
• highCVE-2026-18618: A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated, …nvd
• highCVE-2026-18617: A flaw was found in the Data Science Pipelines Operator (DSPO). A namespace editor can exploit…nvd
• highCVE-2026-18611: A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an unauthen…nvd

Recent advisories for Red Hat OpenShift

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

• medium[UPDATE] [medium] Red Hat OpenShift: Vulnerability Enables File Manipulationcert-bund · 2026-08-25
• high[NEW] [high] Red Hat OpenShift (oauth-proxy): Vulnerability enables Security Measure Bypasscert-bund · 2026-08-21
• medium[NEW] [medium] Red Hat OpenShift Container Platform (fast-uri, OpenTelemetry-Go): Multiple vulnerabilitiescert-bund · 2026-08-21
• medium[UPDATE] [medium] Red Hat OpenShift Container Platform (protobufjs, fast-uri): Multiple vulnerabilitiescert-bund · 2026-08-21
• high[UPDATE] [high] Red Hat OpenShift Container Platform (gRPC-Go): Vulnerability allows bypassing security measur…cert-bund · 2026-08-20
• high[UPDATE] [high] Red Hat OpenShift Container Platform: Vulnerability enables code executioncert-bund · 2026-08-19

More from CERT-Bund (BSI) Security Advisories

• high[NEW] [high] Linux Kernel: Multiple vulnerabilities2026-08-25
• medium[NEW] [medium] libTIFF: Multiple Vulnerabilities2026-08-25
• high[NEW] [high] Contao: Multiple Vulnerabilities2026-08-25
• medium[NEW] [medium] Django: Multiple Vulnerabilities2026-08-25
• high[NEW] [high] Red Hat Enterprise Linux (Apicurio Registry): Multiple Vulnerabilities2026-08-25