{"vulnerability": "CVE-2026-72526", "sightings": [{"uuid": "c70a7c8b-41c0-4ba2-9afa-a97fe3046619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72526", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msu3irlfct2d", "content": "CVE-2026-72526\nA vulnerability in OpenShift's multicloud integrations component allows an attacker to execute arbitrary code on managed clusters. This can happen if a tenant with permission to create applications on the hub\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-12T02:30:05.591681Z"}, {"uuid": "a3142de0-ad09-43f1-ae44-f7c25c323880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72526", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3msu6pvenuw26", "content": "OpenShift Turns One Tenant\u2019s App Permission Into Cluster-Wide Disaster\nPANIC 86% | Lag 0.0h | CVE-2026-72526 in OpenShift's multicloud integrations component can let an attacker execute arbitrar\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-12T03:27:45.849365Z"}, {"uuid": "b17a95ca-2adf-4903-b171-4e00e022f341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72526", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msualf2uo62a", "content": "\ud83d\udd34 CVE-2026-72526 - Critical (9.9)\n\nA flaw was found in the multicloud-integrations component. The Application propagation controller...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72526/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T04:01:03.920591Z"}, {"uuid": "49aa2b9f-e13c-4d65-8e12-b78f86c18437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72526", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hlfgalslvcsdn", "content": "CVE-2026-72526 - Multicloud-integrations: multicloud-integrations: pull-model propagation allows hub tenant to target arbitrary spoke cluster via unvalidated ocm-managed-cluster annotation\nCVE ID : CVE-2026-72526\n \n Published : Aug. 12, 2026, 2:16 a.m. | 1\u00a0hour, 27\u00a0minutes ago...", "creation_timestamp": "2026-08-12T04:14:06.790040Z"}, {"uuid": "501da4ce-e74e-48e2-8d36-45615596fbcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72526", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117080655603961968", "content": "CVE-2026-72526 (CRITICAL, CVSS 9.9) in Red Hat Advanced Cluster Management for Kubernetes 2 lets low-priv hub users escalate to cluster-admin on managed clusters. No official fix. Restrict Application creation permissions now. https://radar.offseq.com/threat/cve-2026-72526-unintended-proxy-or-intermediary-confused-deputy-in-red-hat-red-hat-advanced-cluster-d135ff679a7da34d #OffSeq #RedHat #Kubernetes #CVE2026_72526", "creation_timestamp": "2026-08-12T04:30:27.851931Z"}, {"uuid": "a40cc93e-ac86-479f-9690-ce107d2b3a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72526", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msuca2kjex2t", "content": "Red Hat Advanced Cluster Management for Kubernetes 2 hit by CRITICAL vuln (CVE-2026-72526, CVSS 9.9) \u2014 low-priv users can gain cluster-admin on managed clusters. Restrict Application creation permissions. https://radar.offseq.com/threat/cve-2026-72526-unintended-proxy-or-intermediary-confused-dep...", "creation_timestamp": "2026-08-12T04:30:29.576314Z"}]}