CyberRota
← Ana sayfaya dön

CVE-2026-10840

HIGH · CVSS 7.1 EPSS %0.14

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-06-04T12:16:24.813 · Çekilme zamanı: 2026-06-30T12:09:41.939784+00:00

CyberRota Yorumu

Saldırganın giriş yapmış olması gerekebilir.

CVE
CVE-2026-10840
Severity
HIGH
CVSS
7.1
EPSS
%0.14

Orijinal NVD Açıklaması

A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources via the tekton-scheduler-role ClusterRole. When Kueue or cert-manager CRDs are present on the cluster, any authenticated user can disrupt workload scheduling, tamper with scheduling priorities, delete other tenants' Workload objects, or induce cert-manager to overwrite TLS Secrets including the default ingress controller certificate.