Redhat Cost Management vulnerabilities

• red hat cost management 4, redhat cost management metrics operator +1 more Project-koku/koku-metrics-operator: koku-metrics-operator: service-account client credentials sent to user-controlled token_url CVE-2026-18382 6.8 MediumJuly 30, 2026
• red hat cost management 4, redhat cost management metrics operator +1 more Project-koku/koku-metrics-operator: koku-metrics-operator: cluster pull-secret token exfiltration via user-controlled api_url (ssrf / confused deputy) CVE-2026-18378 7.6 HighJuly 30, 2026
• red hat cost management 4, redhat cost management metrics operator +1 more Project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled prometheus service_address CVE-2026-18381 7.6 HighJuly 30, 2026
• microsoft p11-kit, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +16 more +18 more P11-kit: null dereference via c_derivekey with specific null parameters CVE-2026-2100 Fix available 5.3 MediumFebruary 9, 2026
• eclipse jetty, ietf http, http/2 +166 more +168 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023