VulnSocial

CVE-2026-75885Disclosure

LOWCVSS 9.3 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/devfile/samples/` endpoints allows a remote attacker to send crafted devfile payloads. This can lead to Server-Side Request Forgery (SSRF), where the console pod makes requests to internal services and reflects partial responses to the attacker. Additionally, by sending repeated large requests without a specified content length, an attacker can cause unbounded memory growth, leading to a Denial of Service (DoS).

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-918

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 5 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 4 signals
  • Disclosure: 3 classified signals
  • Peaked 1d ago at 2 mentions (2026-09-21); latest day: 1
  • 5 total mentions across 4 days

Deep dive

Activity timeline5 mentions / 4d
01122Mentions · 2026-09-18: 1Mentions · 2026-09-19: 1Mentions · 2026-09-21: 2Mentions · 2026-09-25: 1Patch / Workaround · 2026-09-18: 1Patch / Workaround · 2026-09-21: 1Technical Details · 2026-09-19: 1Technical Details · 2026-09-21: 2Technical Details · 2026-09-25: 109-1809-1909-2109-25
Signal classification2 categories
Disclosure
360.0%
Patch
240.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-09-181
Patch1
2026-09-191
Disclosure1
2026-09-212
Disclosure1Patch1
2026-09-251
Disclosure1
Full discourse5 posts
  • HOL@HashgraphOnline
    Patch

    Anyone who can reach your OpenShift console Route can poke internal cluster services with no login. Unauth Devfile API. No RHSA yet. Lock down the Route, then watch for the errata. CVE-2026-75885 https://hol.org/blog/cve-2026-75885-openshift-console-unauth-devfile-ssrf https://t.co/eo1fixD47V

    Post summary

    The tweet reports CVE-2026-75885, an unauthenticated Devfile API vulnerability in OpenShift console, and recommends locking down the Route as a workaround until an official patch is released.

    011701.2K
    19.2K followersView on X
  • ThreatAft@ThreatAft
    Patch

    🚨 OPENSHIFT CONSOLE CVE-2026-75885 — CVSS 9.3 Two endpoints missing authHandler: • /api/devfile/ • /api/devfile/samples/ NO PATCH AVAILABLE. Block /api/devfile/* at ingress NOW. → https://threataft.com/articles/openshift-console-cve-2026-75885-unauthenticated-ssrf-dos #OpenShift #CVE #SSRF #PatchNow #CyberSecurity #ThreatIntel

    Post summary

    The post discloses OpenShift Console CVE-2026-75885 with technical details about missing authentication on two endpoints and a high CVSS score. Although it states no patch is available, it provides a concrete ingress-blocking workaround, making Patch the primary classification.

    10000219
    44 followersView on X
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Disclosure

    CVE-2026-75885 Red Hat OpenShift console: unauth SSRF via /api/devfile/ endpoints plus memory-exhaustion DoS. CVSS 9.3. No patch yet - restrict exposure now. https://www.valtersit.com/cve/CVE-2026-75885 #CVE #infosec #RedHat #RedHat #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker

    Post summary

    The tweet discloses CVE-2026-75885 affecting Red Hat OpenShift console, detailing unauthenticated SSRF and memory-exhaustion DoS with CVSS 9.3, and notes no patch is yet available, urging exposure restriction.

    0000045
    1.1K followersView on X
  • sunil kumawat@Sunil_kumawat17
    Disclosure

    @ThreatAft OpenShift’s CVE-2026-75885 combines unauthenticated SSRF with console memory exhaustion. A management UI should not be treated like an ordinary app route—restrict exposure now and verify the fixed build for your OCP stream.

    Post summary

    The tweet announces CVE-2026-75885, describing an unauthenticated SSRF that causes console memory exhaustion in OpenShift and urges immediate restriction of exposure and verification of a fixed build, without providing a patch or exploit details.

    0000047
    23 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-75885 A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/devfile/samples/` endpoints allows a remote attacker to send crafte… https://www.cve.org/CVERecord?id=CVE-2026-75885

    Post summary

    The tweet discloses CVE‑2026-75885, an unauthenticated access flaw in the OpenShift console affecting two API endpoints, enabling a remote attacker to send crafted requests, without mentioning a PoC, exploit, patch, or active exploitation.

    000001.0K
    58.1K followersView on X

Explore more

Back to dashboard