MEDIUMUnknown

insights-client-rhel9: insights-client: Spoke-controlled ClusterID injected unencoded into Insights API URL path

insights-client-rhel9: insights-client: Spoke-controlled ClusterID injected unencoded into Insights API URL path

CVE-2026-71475Published 3 weeks agoUpdated 3 weeks agoSource: Red Hat

Affected packages

No package-level mapping for this advisory.

Exploit signal

Known exploited (CISA KEV)
No
EPSS score
EPSS percentile

EPSS is the probability a CVE is exploited in the wild; percentile is its rank among all CVEs.

insights-client-rhel9: insights-client: Spoke-controlled ClusterID injected unencoded into Insights API URL path | HackTribune