[UPDATE] [high] Red Hat OpenShift: Multiple vulnerabilities

highCVE-2021-35065 CVE-2022-46175

A remote, authenticated or anonymous attacker can exploit multiple vulnerabilities in Red Hat OpenShift to conduct a denial of service attack or manipulate data.

CSIRTS triage

vendor: Red Hat product: OpenShift Denial of serviceOther

What: Multiple vulnerabilities in OpenShift allow remote attackers to conduct denial of service attacks or manipulate data.
Who is affected: Deployments running affected versions of Red Hat OpenShift.
Urgency: High severity with no current exploitation reported, but requires prompt remediation to prevent data manipulation and service disruption.
Action: Apply Red Hat security updates addressing CVE-2021-35065 and CVE-2022-46175 to affected OpenShift installations.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch OpenShift

Get an email when a new OpenShift advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity: high
Published: 2026-08-03
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0328

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Moderate exploitation riskCVE-2021-350651.6% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 73% of all EPSS-scored CVEs.
Moderate exploitation riskCVE-2022-461759.3% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 95% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2021-35065	coverage & exploitation status	NVD · CVE.org
CVE-2022-46175	coverage & exploitation status	NVD · CVE.org

Recent advisories for Red Hat OpenShift

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

medium[NEW] [medium] Red Hat OpenShift Container Platform (fast-uri, OpenTelemetry-Go): Multiple vulnerabilitiescert-bund · 2026-08-07
medium[UPDATE] [medium] Red Hat OpenShift Container Platform (Router): Vulnerability allows bypassing security measu…cert-bund · 2026-08-06
high[UPDATE] [high] Kiali for Red Hat OpenShift Service Mesh (Axios, Go, Follow-redirects): Multiple vulnerabiliti…cert-bund · 2026-08-06
medium[UPDATE] [medium] Red Hat OpenShift Container Platform (kubelet, cri-o, kube-apiserver): Vulnerability allows …cert-bund · 2026-08-06
high[UPDATE] [high] Red Hat OpenShift Container Platform (gRPC-Go): Vulnerability allows bypassing security measur…cert-bund · 2026-08-06
high[UPDATE] [high] Red Hat OpenShift Service Mesh: Vulnerability allows code executioncert-bund · 2026-08-06