Skip to content
OpenAdvisories
Critical RHSA-2026:20436 1 CVE

Red Hat Security Advisory: Red Hat build of MicroShift 4.16.63 security update

Published May 28, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 9

ReleasePackageFixed in
Red Hat · OpenShift 4 openshift:4.16::el9 microshift 0:4.16.63-202605251227.p0.g1133ac0.assembly.4.16.63.el9
Red Hat · OpenShift 4 openshift:4.16::el9 microshift-greenboot 0:4.16.63-202605251227.p0.g1133ac0.assembly.4.16.63.el9
Red Hat · OpenShift 4 openshift:4.16::el9 microshift-multus 0:4.16.63-202605251227.p0.g1133ac0.assembly.4.16.63.el9
Red Hat · OpenShift 4 openshift:4.16::el9 microshift-multus-release-info 0:4.16.63-202605251227.p0.g1133ac0.assembly.4.16.63.el9
Red Hat · OpenShift 4 openshift:4.16::el9 microshift-networking 0:4.16.63-202605251227.p0.g1133ac0.assembly.4.16.63.el9
Red Hat · OpenShift 4 openshift:4.16::el9 microshift-olm 0:4.16.63-202605251227.p0.g1133ac0.assembly.4.16.63.el9
Red Hat · OpenShift 4 openshift:4.16::el9 microshift-olm-release-info 0:4.16.63-202605251227.p0.g1133ac0.assembly.4.16.63.el9
Red Hat · OpenShift 4 openshift:4.16::el9 microshift-release-info 0:4.16.63-202605251227.p0.g1133ac0.assembly.4.16.63.el9
Red Hat · OpenShift 4 openshift:4.16::el9 microshift-selinux 0:4.16.63-202605251227.p0.g1133ac0.assembly.4.16.63.el9

Vulnerabilities 1

  • Critical 9.1
    CVE-2026-33186 Public exploit

    gRPC-Go has an authorization bypass via missing leading slash in :path

    gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests …

    grpc grpc-go zot kubescape Debian Ubuntu Alpine Wolfi Go

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2449833
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20436.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-33186
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-33186
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-33186
  • article
    https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3