CVE-2026-50236

HIGH

An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers. User-supplied target URLs are fetched server-side without validation, with path neutralization enabling arbitrary endpoint targeting and full response reflection from the console pod's privileged network position.

CVSS v3.1 Score

7.4
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Attack Vector
NETWORK
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW
Published: 8/11/2026Modified: 8/19/2026

Related Intelligence (1)

HIGHVulnerability

NVD HIGH: CVE-2026-50236 — An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhoo...

An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers. User-supplied target URLs are fetched server-side without validation, with path neutralization enabling arbitrary endpoint targeting and full response reflection from the console pod's privileged network position.

CVE-2026-50236
NIST NVD

References (5)

https://access.redhat.com/errata/RHSA-2026:54583https://access.redhat.com/errata/RHSA-2026:54602https://access.redhat.com/errata/RHSA-2026:54770https://access.redhat.com/security/cve/CVE-2026-50236https://bugzilla.redhat.com/show_bug.cgi?id=2484745