THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-75485 (MEDIUM 5.5) — A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. The cluster Proxy object is dumped in raw form, bypassing the oc inspect redaction that would normally sanitize sensitive fields. This exposes proxy basic-auth credentials in the

[NVD] CVE-2026-75485 (MEDIUM 5.5) — A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. The cluster Proxy object is dumped in raw form, bypassing the oc inspect redaction that would normally sanitize sensitive fields. This exposes proxy basic-auth credentials in the

mednvdPublished 2026-08-18

CVE-2026-75485 CVSS: 5.5 MEDIUM Published: 2026-08-18T16:18:20.743

A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. The cluster Proxy object is dumped in raw form, bypassing the oc inspect redaction that would normally sanitize sensitive fields. This exposes proxy basic-auth credentials in the must-gather archive, potentially disclosing sensitiv

MITRE ATT&CK techniques

CredentialsT1589.001

Indicators of compromise

CVE-2026-75485cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-75485