CVE-2026-71576

A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming CloudEvents on Kafka status topics. A remote attacker, after compromising a managed hub and obtaining its Kafka client certificate, can manipulate the self-asserted source identity. This allows the attacker to falsify or delete critical data, such as compliance, inventory, and cluster health information, belonging to other hubs in the database.

• CWE-345

• https://access.redhat.com/security/cve/CVE-2026-71576
• https://bugzilla.redhat.com/show_bug.cgi?id=2512513

Published

Aug 10, 2026

Last Modified

Aug 12, 2026

Status

Received

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-71557go-git is an extensible git implementation library written i…6.3
• CVE-2026-71558Heap type confusion vulnerability in Apache Fory C++ deseria…9.8
• CVE-2026-71559Deserialization of Untrusted Data vulnerability in the Go im…7.5
• CVE-2026-7156A vulnerability was detected in Totolink A8000RU 7.1cu.643_b…9.8
• CVE-2026-71560Out-of-bounds Read vulnerability in Apache Fory C++ deserial…9.1
• CVE-2026-7157A flaw has been found in disler aider-mcp-server up to b2516…7.3
• CVE-2026-71577A flaw was found in multicluster-global-hub. During a Manage…6.3
• CVE-2026-7158A vulnerability has been found in dmitryglhf mcp-url-downloa…7.3
• CVE-2026-7159A vulnerability was found in douinc mkdocs-mcp-plugin up to …7.3
• CVE-2026-7160A vulnerability was determined in Tenda HG3 2.0. This vulner…8.8
• CVE-2026-7161An insufficient encryption vulnerability exists in the Devic…9.3
• CVE-2026-7162Successful exploitation of the integer overflow vulnerabilit…7.8