Skip to content
OpenAdvisories

Vendor

openshift-metal3

3 known vulnerabilities.

Products

fakefish 2 bmctest 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-71566

    KubeVirt backend is not authenticated

    FakeFish handles incoming credentials by passing them down to scripts. This works for real hardware because in the end it's up to the BMC to validate them. However, KubeVirt relies on a KUBECONFIG file mounted to the container and completely ignores the crede…

    openshift-metal3 fakefish