Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). Central does not limit the depth of GraphQL queries served on the authenticated GraphQL API. An authenticated user with a valid API token can send deeply nested queries that cause excessive resource consumption in Central, resulting in a denial of service for the management plane.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-07-06 | 2 | Disclosure2 |
| 2026-07-07 | 1 | General1 |
CVE-2026-9165: @RedHat Advanced Cluster Security doesn't limit GraphQL query depth. Any authenticated user can DoS the management plane. CVSS 7.7. Here's what to check Tuesday.
Post summary
The post highlights a DoS vulnerability in RedHat Advanced Cluster Security due to unbounded GraphQL query depth, with a CVSS score of 7.7, but provides no further exploitation or mitigation details.
🚨*CVE* CVE-2026-9165 A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). Central does not limit the depth of GraphQL queries served on the authenticated GraphQL AP… https://www.cve.org/CVERecord?id=CVE-2026-9165 ----- Traducción: Se encontró una v… http://infoflow.cloud`
Post summary
A query depth flaw in Red Hat Advanced Cluster Security for Kubernetes (RHACS) has been disclosed, but no exploitation details, patches, or PoC information are provided.
CVE-2026-9165 A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). Central does not limit the depth of GraphQL queries served on the authenticated GraphQL AP… https://www.cve.org/CVERecord?id=CVE-2026-9165
Post summary
The text announces CVE‑2026‑9165 in Red Hat Advanced Cluster Security, noting that GraphQL queries can be unbounded, but it provides no proof of concept, exploit code, or patch information.