CVE-2026-50236 in OpenShift Console

Summary

by MITRE • 08/11/2026

An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers. User-supplied target URLs are fetched server-side without validation, with path neutralization enabling arbitrary endpoint targeting and full response reflection from the console pod's privileged network position.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Disclosure: 08/11/2026
• Moderation: accepted
• Entry: VDB-388037
• CPE: ready
• CWE: CWE-918 (confirmed)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low
• Sector: Hospital, Education, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-50236
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-50236
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-50236/