CVE-2026-71299: Red Hat Multicluster Engine For Kubernetes

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A flaw was found in Maestro. Its REST API write endpoints were registered without proper authentication middleware. This allows a remote attacker to perform unauthorized write operations, such as creating, modifying, or deleting consumers and resource bundles. This could lead to data integrity issues or a denial of service (DoS).

Affected products

• Red Hat Multicluster Engine For Kubernetes

Published 2026-10-05. Last modified 2026-10-07.