VYPR

RHACS Central

by Red Hat

CVEs (1)

  • CVE-2026-19278MedAug 10, 2026
    risk 0.44cvss 6.8epss

    A flaw was found in StackRox/RHACS Central's Auth Machine-to-Machine (M2M) token exchange. When an administrator configures M2M role mappings, the system uses unanchored regular expressions for matching claim values. This allows an attacker with a valid OpenID Connect (OIDC)…