THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-71576 (HIGH 8.5) — A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming CloudEvents on Kafka status topics. A remote attacker, after compromising a managed hub and obtaining its Kafka client certificate, can manipulate the self-asse

[NVD] CVE-2026-71576 (HIGH 8.5) — A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming CloudEvents on Kafka status topics. A remote attacker, after compromising a managed hub and obtaining its Kafka client certificate, can manipulate the self-asse

lownvdPublished 2026-08-10

CVE-2026-71576 CVSS: 8.5 HIGH Published: 2026-08-10T17:17:36.060

A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming CloudEvents on Kafka status topics. A remote attacker, after compromising a managed hub and obtaining its Kafka client certificate, can manipulate the self-asserted source identity. This allows the attacker to fals

Indicators of compromise

CVE-2026-71576cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-71576