THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-4740 (HIGH 8.2) — A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advanced Cluster Management (ACM). Improper validation of Kubernetes client certificate renewal allows a managed cluster administrator to forge a client certificate that can be approved by the OC

[NVD] CVE-2026-4740 (HIGH 8.2) — A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advanced Cluster Management (ACM). Improper validation of Kubernetes client certificate renewal allows a managed cluster administrator to forge a client certificate that can be approved by the OC

lownvdPublished 2026-04-07

CVE-2026-4740 CVSS: 8.2 HIGH Published: 2026-04-07T15:17:46.797

A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advanced Cluster Management (ACM). Improper validation of Kubernetes client certificate renewal allows a managed cluster administrator to forge a client certificate that can be approved by the OCM controller. This enables cross-cluster privilege esca

Indicators of compromise

CVE-2026-4740cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-4740