CVE-2026-71576

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-71576", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "state": "PUBLISHED", "assignerShortName": "redhat", "dateReserved": "2026-08-07T14:20:37.114Z", "datePublished": "2026-08-10T16:41:53.193Z", "dateUpdated": "2026-09-29T16:43:50.602Z"}, "containers": {"cna": {"title": "Multicluster-global-hub: multicluster-global-hub: manager trusts self-asserted evt.source() for leaf-hub identity in all status handlers", "metrics": [{"other": {"content": {"value": "Important", "namespace": "https://access.redhat.com/security/updates/classification/"}, "type": "Red Hat severity rating"}}, {"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L", "version": "3.1"}, "format": "CVSS"}], "descriptions": [{"lang": "en", "value": "A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming CloudEvents on Kafka status topics. A remote attacker, after compromising a managed hub and obtaining its Kafka client certificate, can manipulate the self-asserted source identity. This allows the attacker to falsify or delete critical data, such as compliance, inventory, and cluster health information, belonging to other hubs in the database."}], "affected": [{"vendor": "Red Hat", "product": "Multicluster Global Hub 1.4.9", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9", "defaultStatus": "affected", "versions": [{"version": "1788355599", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:redhat:multicluster_globalhub:1.4::el9"]}, {"vendor": "Red Hat", "product": "Multicluster Global Hub 1.5.8", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9", "defaultStatus": "affected", "versions": [{"version": "1789515288", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:redhat:multicluster_globalhub:1.5::el9"]}, {"vendor": "Red Hat", "product": "Multicluster Global Hub 1.6.6", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9", "defaultStatus": "affected", "versions": [{"version": "1790086176", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:redhat:multicluster_globalhub:1.6::el9"]}, {"vendor": "Red Hat", "product": "Multicluster Global Hub 1.7.3", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9", "defaultStatus": "affected", "versions": [{"version": "1788377424", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:redhat:multicluster_globalhub:1.7::el9"]}, {"vendor": "Red Hat", "product": "Multicluster Global Hub 1.8.2", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9", "defaultStatus": "affected", "versions": [{"version": "1788359454", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:redhat:multicluster_globalhub:1.8::el9"]}, {"vendor": "Red Hat", "product": "Multicluster Global Hub 1.8.2", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9", "defaultStatus": "affected", "versions": [{"version": "1788359454", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:redhat:multicluster_globalhub:1.8::el9"]}], "references": [{"url": "https://access.redhat.com/errata/RHSA-2026:67516", "name": "RHSA-2026:67516", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:67842", "name": "RHSA-2026:67842", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:68515", "name": "RHSA-2026:68515", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:71597", "name": "RHSA-2026:71597", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:73038", "name": "RHSA-2026:73038", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:73419", "name": "RHSA-2026:73419", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/security/cve/CVE-2026-71576", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512513", "name": "RHBZ#2512513", "tags": ["issue-tracking", "x_refsource_REDHAT"]}], "datePublic": "2026-08-10T14:38:00.000Z", "problemTypes": [{"descriptions": [{"cweId": "CWE-345", "description": "Insufficient Verification of Data Authenticity", "lang": "en", "type": "CWE"}]}], "x_redhatCweChain": "CWE-345: Insufficient Verification of Data Authenticity", "workarounds": [{"lang": "en", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}], "timeline": [{"lang": "en", "time": "2026-08-07T00:00:00.000Z", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2026-08-10T14:38:00.000Z", "value": "Made public."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2026-09-29T16:43:50.602Z"}, "x_generator": {"engine": "cvelib 1.8.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-12T15:44:50.677334Z", "id": "CVE-2026-71576", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-12T15:45:08.195Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-71576", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-12T15:44:50.677334Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-12T15:44:59.884Z"}}], "cna": {"title": "Multicluster-global-hub: multicluster-global-hub: manager trusts self-asserted evt.source() for leaf-hub identity in all status handlers", "metrics": [{"other": {"type": "Red Hat severity rating", "content": {"value": "Important", "namespace": "https://access.redhat.com/security/updates/classification/"}}}, {"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}], "affected": [{"cpes": ["cpe:/a:redhat:multicluster_globalhub:1.4::el9"], "vendor": "Red Hat", "product": "Multicluster Global Hub 1.4.9", "versions": [{"status": "unaffected", "version": "1788355599", "lessThan": "*", "versionType": "rpm"}], "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:multicluster_globalhub:1.5::el9"], "vendor": "Red Hat", "product": "Multicluster Global Hub 1.5.8", "versions": [{"status": "unaffected", "version": "1789515288", "lessThan": "*", "versionType": "rpm"}], "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:multicluster_globalhub:1.6::el9"], "vendor": "Red Hat", "product": "Multicluster Global Hub 1.6.6", "versions": [{"status": "unaffected", "version": "1790086176", "lessThan": "*", "versionType": "rpm"}], "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:multicluster_globalhub:1.7::el9"], "vendor": "Red Hat", "product": "Multicluster Global Hub 1.7.3", "versions": [{"status": "unaffected", "version": "1788377424", "lessThan": "*", "versionType": "rpm"}], "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:multicluster_globalhub:1.8::el9"], "vendor": "Red Hat", "product": "Multicluster Global Hub 1.8.2", "versions": [{"status": "unaffected", "version": "1788359454", "lessThan": "*", "versionType": "rpm"}], "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:multicluster_globalhub:1.8::el9"], "vendor": "Red Hat", "product": "Multicluster Global Hub 1.8.2", "versions": [{"status": "unaffected", "version": "1788359454", "lessThan": "*", "versionType": "rpm"}], "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}], "timeline": [{"lang": "en", "time": "2026-08-07T00:00:00.000Z", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2026-08-10T14:38:00.000Z", "value": "Made public."}], "datePublic": "2026-08-10T14:38:00.000Z", "references": [{"url": "https://access.redhat.com/errata/RHSA-2026:67516", "name": "RHSA-2026:67516", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:67842", "name": "RHSA-2026:67842", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:68515", "name": "RHSA-2026:68515", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:71597", "name": "RHSA-2026:71597", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:73038", "name": "RHSA-2026:73038", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:73419", "name": "RHSA-2026:73419", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/security/cve/CVE-2026-71576", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512513", "name": "RHBZ#2512513", "tags": ["issue-tracking", "x_refsource_REDHAT"]}], "workarounds": [{"lang": "en", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}], "x_generator": {"engine": "cvelib 1.8.0"}, "descriptions": [{"lang": "en", "value": "A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming CloudEvents on Kafka status topics. A remote attacker, after compromising a managed hub and obtaining its Kafka client certificate, can manipulate the self-asserted source identity. This allows the attacker to falsify or delete critical data, such as compliance, inventory, and cluster health information, belonging to other hubs in the database."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-345", "description": "Insufficient Verification of Data Authenticity"}]}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2026-09-29T16:43:50.602Z"}, "x_redhatCweChain": "CWE-345: Insufficient Verification of Data Authenticity"}}, "cveMetadata": {"cveId": "CVE-2026-71576", "state": "PUBLISHED", "dateUpdated": "2026-09-29T16:43:50.602Z", "dateReserved": "2026-08-07T14:20:37.114Z", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "datePublished": "2026-08-10T16:41:53.193Z", "assignerShortName": "redhat"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:multicluster_globalhub:1.4::el9"], "defaultStatus": "affected", "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9", "product": "Multicluster Global Hub 1.4.9", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1788355599", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:multicluster_globalhub:1.5::el9"], "defaultStatus": "affected", "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9", "product": "Multicluster Global Hub 1.5.8", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1789515288", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:multicluster_globalhub:1.6::el9"], "defaultStatus": "affected", "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9", "product": "Multicluster Global Hub 1.6.6", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1790086176", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:multicluster_globalhub:1.7::el9"], "defaultStatus": "affected", "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9", "product": "Multicluster Global Hub 1.7.3", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1788377424", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:multicluster_globalhub:1.8::el9"], "defaultStatus": "affected", "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9", "product": "Multicluster Global Hub 1.8.2", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1788359454", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:multicluster_globalhub:1.8::el9"], "defaultStatus": "affected", "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9", "product": "Multicluster Global Hub 1.8.2", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1788359454", "versionType": "rpm"}]}], "source": "secalert@redhat.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming CloudEvents on Kafka status topics. A remote attacker, after compromising a managed hub and obtaining its Kafka client certificate, can manipulate the self-asserted source identity. This allows the attacker to falsify or delete critical data, such as compliance, inventory, and cluster health information, belonging to other hubs in the database."}, {"lang": "es", "value": "Se encontr\u00f3 una vulnerabilidad en multicluster-global-hub. El componente gestor valida incorrectamente la identidad de origen de los CloudEvents entrantes en los temas de estado de Kafka. Un atacante remoto, despu\u00e9s de comprometer un hub gestionado y obtener su certificado de cliente Kafka, puede manipular la identidad de origen autoafirmada. Esto permite al atacante falsificar o eliminar datos cr\u00edticos, como informaci\u00f3n de cumplimiento, inventario y estado del cl\u00faster, perteneciente a otros hubs en la base de datos."}], "id": "CVE-2026-71576", "lastModified": "2026-10-24T15:10:00.190", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L", "version": "3.1"}, "exploitabilityScore": 3.1, "impactScore": 4.7, "source": "secalert@redhat.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-71576", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-12T15:44:50.677334Z", "version": "2.0.3"}}]}, "published": "2026-08-10T17:17:36.060", "references": [{"source": "secalert@redhat.com", "url": "https://access.redhat.com/errata/RHSA-2026:67516"}, {"source": "secalert@redhat.com", "url": "https://access.redhat.com/errata/RHSA-2026:67842"}, {"source": "secalert@redhat.com", "url": "https://access.redhat.com/errata/RHSA-2026:68515"}, {"source": "secalert@redhat.com", "url": "https://access.redhat.com/errata/RHSA-2026:71597"}, {"source": "secalert@redhat.com", "url": "https://access.redhat.com/errata/RHSA-2026:73038"}, {"source": "secalert@redhat.com", "url": "https://access.redhat.com/errata/RHSA-2026:73419"}, {"source": "secalert@redhat.com", "url": "https://access.redhat.com/security/cve/CVE-2026-71576"}, {"source": "secalert@redhat.com", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512513"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-345"}], "source": "secalert@redhat.com", "type": "Secondary"}]}

{"bugzilla": {"description": "multicluster-global-hub: multicluster-global-hub: Manager trusts self-asserted evt.Source() for leaf-hub identity in all status handlers", "id": "2512513", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512513"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L", "status": "draft"}, "cwe": "CWE-345", "details": ["A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming CloudEvents on Kafka status topics. A remote attacker, after compromising a managed hub and obtaining its Kafka client certificate, can manipulate the self-asserted source identity. This allows the attacker to falsify or delete critical data, such as compliance, inventory, and cluster health information, belonging to other hubs in the database."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-71576", "package_state": [{"cpe": "cpe:/a:redhat:multicluster_globalhub", "fix_state": "Affected", "package_name": "multicluster-globalhub/multicluster-globalhub-manager-rhel9", "product_name": "Multicluster Global Hub"}], "public_date": "2026-08-10T14:38:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-71576\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-71576"], "statement": "This is an Important flaw where a compromised managed hub, possessing a valid Kafka client certificate, can impersonate other hubs within the Multicluster Global Hub environment. This allows an attacker to falsify or delete critical compliance, inventory, and cluster health data, leading to significant data integrity issues.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": null}], "enrichment": {"confidence": 97.0, "confidence_source": "matching", "scores": [{"score": 97.0, "source": "matching"}]}, "original": {"product": "Multicluster Global Hub", "source": "cna", "vendor": "Red Hat"}, "product": "multicluster_globalhub", "vendor": "redhat"}], "created": "2026-08-10T20:15:03.645449+00:00", "updated": "2026-08-11T14:00:14.147898+00:00", "vendors": ["redhat", "redhat$PRODUCT$multicluster_globalhub"]}