CVE-2026-15584Disclosure

LOWCVSS 7.5 · HIGH

Exploitation ongoing with high activity in latest observed window (2 mentions)

Immediate actions

Prioritize remediation for affected systems immediately
Assume compromise if assets are exposed
Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

A privilege escalation vulnerability was found in the incluster-checks tool for OpenShift. The tool creates privileged debug pods with host filesystem access in the shared default namespace, where any user with the standard edit role can exec into them and obtain root access on cluster nodes.

Back to dashboard

3.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-250

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

Active exploitation appears in 1 classified signals
6 mentions across 2 observed days
Momentum state: stable

What's happening

Active exploitation reported across 1 signal
Technical details provided in 4 signals
Disclosure: 4 classified signals
General: 1 classified signal
Peaked 1d ago at 4 mentions (2026-07-13); latest day: 2
6 total mentions across 2 days

Deep dive

Activity timeline6 mentions / 2d

Signal classification3 categories

Disclosure

466.7%

General

116.7%

Active Exploitation

116.7%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-13	4	Disclosure3General1
2026-07-14	2	Active Exploitation1Disclosure1

Full discourse6 posts

Infoflowcloud@infoflowcloud92d
Disclosure
🚨*CVE* CVE-2026-15584 A privilege escalation vulnerability was found in the incluster-checks tool for OpenShift. The tool creates privileged debug pods with host filesystem access in the s… https://www.cve.org/CVERecord?id=CVE-2026-15584 ----- Traducción: Una vulnerabilidad… http://infoflow.cloud`
Post summary
A privilege escalation vulnerability (CVE-2026-15584) has been identified in the incluster-checks tool for OpenShift, with a CVE record available, but no PoC, exploit, patch, or active exploitation details are provided.
0101147
92 followersView on X
Cyber Threat Observatory | Alan Turing Institute@TuringCyberObs91d
Disclosure
CVE-2026-15584 Red Hat OpenShift Privilege escalation in incluster-checks could let users reach privileged debug pods and gain root access on OpenShift cluster nodes Full analysis: https://github.com/alan-turing-institute/cyber-threat-observatory/blob/main/reports/2026-07-13/TIER_2_CVE-2026-15584.md #CyberSecurity #CloudSecurity #VulnerabilityManagement
Post summary
The text announces a privilege‑escalation flaw in Red Hat OpenShift (CVE‑2026‑15584) that lets attackers reach debug pods and gain root on cluster nodes, and points to a detailed analysis report.
0000137
58 followersView on X
CVE@CVEnew92d
Disclosure
CVE-2026-15584 A privilege escalation vulnerability was found in the incluster-checks tool for OpenShift. The tool creates privileged debug pods with host filesystem access in the s… https://www.cve.org/CVERecord?id=CVE-2026-15584
Post summary
The post discloses a privilege escalation bug in OpenShift’s incluster‑checks tool that enables creation of privileged debug pods with host filesystem access.
00010875
57.8K followersView on X
VulDB 🛡@vuldb92d
Disclosure
A new vulnerability with increased severity was disclosed for Red Hat OpenShift (CVE-2026-15584) https://vuldb.com/vuln/378097
Post summary
A new vulnerability CVE-2026‑15584 affecting Red Hat OpenShift has been disclosed with an increased severity rating, but the text provides no further technical, exploit, or mitigation details.
01000103
2.3K followersView on X
VulDB 🛡@vuldb91d
Active Exploitation
It is possible to see elevated activities targeting Red Hat OpenShift (CVE-2026-15584) https://vuldb.com/vuln/378097/cti
Post summary
The post notes observed elevated activity against Red Hat OpenShift for CVE‑2026‑15584, implying potential active exploitation, but offers no technical, patch, or proof‑of‑concept details.
0000093
2.3K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds91d
General
CVE-2026-15584 Privilege Escalation in OpenShift Incluster-Checks Tool via Debug Pod Access https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-15584
Post summary
A privilege escalation vulnerability (CVE-2026-15584) affecting OpenShift's Incluster-Checks tool is identified via debug pod access, but no further exploit, patch, or PoC details are provided.
0000096
4.1K followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-15584

Infoflowcloud@infoflowcloudDisclosure

A privilege escalation vulnerability (CVE-2026-15584) has been identified in the incluster-checks tool for OpenShift, with a CVE record available, but no PoC, exploit, patch, or active exploitation details are provided.

Cyber Threat Observatory | Alan Turing Institute@TuringCyberObsDisclosure

The text announces a privilege‑escalation flaw in Red Hat OpenShift (CVE‑2026‑15584) that lets attackers reach debug pods and gain root on cluster nodes, and points to a detailed analysis report.

CVE@CVEnewDisclosure

The post discloses a privilege escalation bug in OpenShift’s incluster‑checks tool that enables creation of privileged debug pods with host filesystem access.

VulDB 🛡@vuldbDisclosure

A new vulnerability CVE-2026‑15584 affecting Red Hat OpenShift has been disclosed with an increased severity rating, but the text provides no further technical, exploit, or mitigation details.

VulDB 🛡@vuldbActive Exploitation

The post notes observed elevated activity against Red Hat OpenShift for CVE‑2026‑15584, implying potential active exploitation, but offers no technical, patch, or proof‑of‑concept details.

Vulmon Vulnerability Feed@VulmonFeedsGeneral

A privilege escalation vulnerability (CVE-2026-15584) affecting OpenShift's Incluster-Checks tool is identified via debug pod access, but no further exploit, patch, or PoC details are provided.