Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CVE-2026-42965
Red Hat Red Hat OpenShift Container Platform 4.17 — Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation
AV AC PR UI S C I A CVSS EPSS %ile KEV
N L L N U H N N 6.5 .0053 42.8 —
AFFECTED
Product Versions Fixed
Red Hat OpenShift Container Platform 4.17 unspecified 1789938693
Red Hat OpenShift Container Platform 4.18 unspecified 1788578875
Red Hat OpenShift Container Platform 4.19 unspecified 1786771399
Red Hat OpenShift Container Platform 4.20 unspecified 1786496552
Red Hat OpenShift Container Platform 4.21 unspecified 1786498169
Red Hat OpenShift Container Platform 4.22 unspecified 1786584196
Red Hat OpenShift Container Platform 4 unspecified —
TIMELINE
May 28 Reserved by redhat
May 29 Published (CNA: redhat)
Aug 18 PATCH SHIPPED — CVE-2026-42965 (Red Hat OpenShift Container Platform 4.20). Fixed in Red Hat OpenShift Container Platform 4.20 1786496552.
Description
A flaw was found in the OpenShift Router. A user with EndpointSlice write access can exploit this vulnerability by creating a Service backed by an FQDN (Fully Qualified Domain Name) EndpointSlice that resolves to a cloud metadata endpoint. This allows the router to proxy requests to the cloud metadata endpoint, leading to the disclosure of instance credentials and other sensitive metadata. This bypasses previous security measures for validating IP addresses.
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
|---|
| May 28, 2026 | Reserved | Reserved by redhat |
| May 29, 2026 | Published | Published (CNA: redhat) |
| August 18, 2026 | PATCH SHIPPED | PATCH SHIPPED — CVE-2026-42965 (Red Hat OpenShift Container Platform 4.20). Fixed in Red Hat OpenShift Container Platform 4.20 1786496552. |
Affected
Affected products and packages — 7 rows
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|
| Red Hat | Red Hat OpenShift Container Platform 4.17 | — | — | 1789938693 |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | — | 1788578875 |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | — | — | 1786771399 |
| Red Hat | Red Hat OpenShift Container Platform 4.20 | — | — | 1786496552 |
| Red Hat | Red Hat OpenShift Container Platform 4.21 | — | — | 1786498169 |
| Red Hat | Red Hat OpenShift Container Platform 4.22 | — | — | 1786584196 |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | — |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-42965 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Sunday, October 4, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
