CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-71472 — A flaw was found in acm-search-v2-rhel9. This vulnerability allows an authentica...

·Source: NIST NVD

Updated:

Executive Summary

A flaw was found in acm-search-v2-rhel9. This vulnerability allows an authenticated attacker, such as a hub administrator or a Search Custom Resource (CR) editor, to inject malicious shell commands or SQL statements. This occurs because the WORK_MEM string provided in the Search CR is not properly validated before being used in a bash script and an SQL query. Successful exploitation could lead to

Analysis

A flaw was found in acm-search-v2-rhel9. This vulnerability allows an authenticated attacker, such as a hub administrator or a Search Custom Resource (CR) editor, to inject malicious shell commands or SQL statements. This occurs because the WORK_MEM string provided in the Search CR is not properly validated before being used in a bash script and an SQL query. Successful exploitation could lead to arbitrary code execution within the privileged postgres pod, potentially compromising the system. CVSS Score: 9.1. Published: 2026-08-17T20:16:45.777.

Indicators of Compromise (1)

CVE (1)
CVE-2026-71472
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 17, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Would I lie to you? ANZ warns of troubling ‘scam-coaching’ trend

ANZ is warning customers about a troubling rise in 'scam‑coaching' – a tactic where criminals train victims to bypass bank security by giving them scripts, cover stories, and instructions on how to respond to bank staff.

Finextra
MEDIUMVulnerabilityNEW

Korea's Jeonbuk Bank to deploy Ripple Payments for cross-border remittances

Ripple, the leading provider of blockchain-based enterprise solutions across traditional and digital finance, today announced a partnership with Jeonbuk Bank, making it the first regional bank in Korea to deploy Ripple Payments for cross-border remittances, bringing near real-time settlement to businesses that have historically relied on transfers taking days to complete.

Finextra
MEDIUMVulnerabilityNEW

Xceptor extends SaaS offering to Switzerland and Japan

Xceptor, a global leader in data automation for capital markets, today announced it has launched sovereign-grade SaaS in Switzerland and Japan, two of the world’s most demanding markets.

Finextra