CVE-2026-1784 — Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection
The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy. It was found that the checks performed on the spec.path YAML stanza i…
Published: 2026-06-02 · CVSS: 8.8 · CVSS 3.1
The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy. It was found that the checks performed on the spec.path YAML stanza in a Route document was insufficient and could allow a controlled injection of the HAProxy configuration.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7