PatchTheCVECVE-2026-71576: A flaw was found in multicluster-global-hub
CVE-2026-71576 is a high-severity flaw (CVSS 8.5) affecting affected software. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming CloudEvents on Kafka status topics. A remote attacker, after compromising a managed hub and obtaining its Kafka client certificate, can manipulate the self-asserted source identity. This allows the attacker to falsify or delete critical data, such as compliance, inventory, and cluster health information, belonging to other hubs
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 8.5 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.3% (top 79%) |
| CISA exploited list | No |
| Weakness | CWE-345 |
| Published | 2026-08-10 |
| Last modified | 2026-10-23 |
Timeline
- Published CVE record published
- Updated Record last modified
Exact fixes by distribution
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-71576?
No fixed release is listed yet. Watch the vendor advisory and apply any mitigation shown on this page.
Is CVE-2026-71576 being exploited?
CVE-2026-71576 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-71576 affect?
CVE-2026-71576 affects affected software. Severity is high (CVSS 8.5). A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming CloudEvents on Kafka status topics. A remote attacker, after compromising a managed hub and obtaining its Kafka client c
How urgent is CVE-2026-71576?
Priority 35/100. High severity