Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in search-v2-operator. This component's `search-serviceaccount` has overly broad permissions, allowing it to impersonate users and groups across the entire cluster. If an attacker gains access to any of the pods running under this service account, they could exploit this to achieve `system:masters` access, granting them full control over the cluster.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-17 | 3 | Disclosure3 |
| 2026-08-18 | 1 | Patch1 |
🐛 VULNERABILITIES (CVSS 8.8) CVE-2026-70495: — severity important — Red Hat Security Data (JSON) https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-70495.json #PatchManagement #Vulnerability #CVE
Post summary
The tweet announces CVE‑2026‑70495 with a CVSS score of 8.8, directs users to Red Hat security data for patching, and offers no PoC, exploit, or active exploitation details.
🚨*CVE* CVE-2026-70495 A flaw was found in search-v2-operator. This component's `search-serviceaccount` has overly broad permissions, allowing it to impersonate users and groups across the … https://www.cve.org/CVERecord?id=CVE-2026-70495 ----- Traducción: CVE-2026-70495 Se … https://infoflow.cloud`
Post summary
A privilege‑escalation flaw in the search-v2-operator allows the search-serviceaccount to impersonate any user or group. No PoC, exploit, patch, or active exploitation information is provided.
CVE-2026-70495 A flaw was found in search-v2-operator. This component's `search-serviceaccount` has overly broad permissions, allowing it to impersonate users and groups across the … https://www.cve.org/CVERecord?id=CVE-2026-70495
Post summary
A vulnerability was disclosed in the `search-v2-operator` where an overly broad `search-serviceaccount` permission set could let attackers impersonate users and groups.
There is a new vulnerability with elevated criticality in Red Hat Advanced Cluster Management for Kubernetes (CVE-2026-70495) https://vuldb.com/vuln/391396
Post summary
The text announces a newly identified high‑severity vulnerability (CVE‑2026‑70495) affecting Red Hat Advanced Cluster Management for Kubernetes, without providing technical details, PoC, or exploitation evidence.