Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy. It was found that the checks performed on the spec.path YAML stanza in a Route document was insufficient and could allow a controlled injection of the HAProxy configuration.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-06-25 | 1 | Disclosure1 |
| 2026-06-30 | 1 | General1 |
CVE-2026-1784 is a good patch-discipline check. Affected systems / remote code execution. Public details are enough to start scoping. Where does this show up in your environment?
Post summary
The text is a brief reminder about CVE‑2026‑1784, highlighting its remote code execution risk without providing exploitation details, a PoC, or patch instructions.
🚨 HIGH: CVE-2026-1784 (CVSS 8.8) - OpenShift Route resource vulnerable to HAProxy config injection via insufficient spec[.]path validation. Local attackers with low privs can achieve high impact across confidentiality, integrity & availability. #CVE #PatchNow https://t.co/aBPlOqqkbX
Post summary
A new high‑severity vulnerability (CVE‑2026‑1784) affecting OpenShift Route resources via HAProxy config injection is disclosed, with a call for urgent patching.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | redhat | openshift_container_platform | 4.0 | - | - |