CVE-2026-75762

multicluster-global-hub: multicluster-global-hub: Transport-layer MITM: TLS CA bundle pulled from unvalidated ConfigMap, `InsecureSkipVerify` fallback

View on CVE.org

Published n/a CVSS 3.1 · 6.8 Medium EPSS n/a KEV · Not listed

Description

No description is available for this CVE.

Affected Products

No data.

Vendor Product Versions

Redhat

Multicluster Globalhub

Version	Status	Scheme	Platform
`—`	affected	—	—

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://nvd.nist.gov/vuln/detail/CVE-2026-75762
https://www.cve.org/CVERecord?id=CVE-2026-75762

History

Oct 4, 2026 10:15 PM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Redhat Redhat multicluster Globalhub
Vendors & Products		Redhat Redhat multicluster Globalhub

Sep 1, 2026 12:15 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		No description is available for this CVE.
Title		multicluster-global-hub: multicluster-global-hub: Transport-layer MITM: TLS CA bundle pulled from unvalidated ConfigMap, `InsecureSkipVerify` fallback
Weaknesses		CWE-295
References		https://nvd.nist.gov/vuln/detail/CVE-2026-75762 https://www.cve.org/CVERecord?id=CVE-2026-75762
Metrics	threat_severity `None`	cvssV3_1 `{'score': 6.8, 'vector': 'CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'}` threat_severity `Important`