Skip to content

CVE-2026-66794

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
August 20, 2026
Last Seen
August 20, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Red Hat Kubernetes SSRF Vulnerability Exposes Internal Services to Attackers69.0

Red Hat disclosed CVE-2026-66794, a high-severity SSRF vulnerability in the cluster-proxy-addon of the Multicluster Engine for Kubernetes. This flaw, rated with a CVSS v3.1 score of 9.3, allows unauthenticated remote attackers to access internal services across managed Kubernetes clusters via a publ...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Server-Side Request Forgery (ssrf)Red HatCWE-918 - Server-Side Request Forgery (ssrf)T1190 - Exploit Public-Facing ApplicationKubernetesMulticluster Engine For Kubernetes