{"schema_version":1,"title":"Redhat Insights-Client vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 4 vulnerabilities in Redhat Insights-Client: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-71846, was published on 12 August 2026.","url":"https://junglewise.ai/threats/technologies/insights-client","json_url":"https://junglewise.ai/threats/technologies/insights-client.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/insights-client","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":1,"all_time":4,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":4},"latest":[{"cve":"CVE-2026-71846","cvss":6.5,"epss":0.0016,"slug":"cve-2026-71846-red-hat-insights-client-excessive-kubernetes-permissions-in","title":"Red Hat insights-client excessive Kubernetes permissions in ServiceAccount","severity":"medium","exploited":false,"published_at":"2026-08-12T22:17:16.143+00:00","url":"https://junglewise.ai/threats/cve-2026-71846-red-hat-insights-client-excessive-kubernetes-permissions-in"},{"cve":"CVE-2026-71845","cvss":6.3,"epss":0.005,"slug":"cve-2026-71845-a-flaw-was-found-in-insights-client-the-setdefault-function-logs","title":"A flaw was found in insights-client. The setDefault() function logs the value of every environment variable it…","severity":"medium","exploited":false,"published_at":"2026-08-11T20:18:45.8+00:00","url":"https://junglewise.ai/threats/cve-2026-71845-a-flaw-was-found-in-insights-client-the-setdefault-function-logs"},{"cve":"CVE-2026-71475","cvss":6.8,"epss":0.0069,"slug":"cve-2026-71475-a-flaw-was-found-in-insights-client-a-compromised-managed-cluster","title":"A flaw was found in insights-client. A compromised managed cluster, referred to as a 'spoke', can inject unencoded…","severity":"medium","exploited":false,"published_at":"2026-08-11T20:18:45.673+00:00","url":"https://junglewise.ai/threats/cve-2026-71475-a-flaw-was-found-in-insights-client-a-compromised-managed-cluster"},{"cve":"CVE-2026-71474","cvss":7.1,"epss":0.0016,"slug":"cve-2026-71474-a-flaw-was-found-in-insights-client-when-the-application-receives","title":"A flaw was found in insights-client. When the application receives a non-200 response, it logs the request headers…","severity":"high","exploited":false,"published_at":"2026-08-11T20:18:45.547+00:00","url":"https://junglewise.ai/threats/cve-2026-71474-a-flaw-was-found-in-insights-client-when-the-application-receives"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Redhat Enterprise Linux","slug":"enterprise-linux","vulnerabilities":50,"url":"https://junglewise.ai/threats/technologies/enterprise-linux"},{"name":"Redhat Linux","slug":"linux","vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/linux"},{"name":"Redhat Openshift Container Platform","slug":"openshift-container-platform","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/openshift-container-platform"},{"name":"Redhat 389 Directory Server","slug":"389-directory-server","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/389-directory-server"},{"name":"Redhat Hardened Images","slug":"hardened-images","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/hardened-images"},{"name":"Redhat Quay","slug":"quay","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/quay"},{"name":"Redhat Advanced Cluster Management For Kubernetes","slug":"advanced-cluster-management-for-kubernetes","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/advanced-cluster-management-for-kubernetes"},{"name":"Redhat Ansible Automation Platform","slug":"ansible-automation-platform","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/ansible-automation-platform"},{"name":"Redhat Ansible Developer","slug":"ansible-developer","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/ansible-developer"},{"name":"Redhat Ansible Inside","slug":"ansible-inside","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/ansible-inside"},{"name":"Redhat Enterprise Linux Desktop","slug":"enterprise-linux-desktop","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/enterprise-linux-desktop"},{"name":"Redhat Enterprise Linux Hpc Node","slug":"enterprise-linux-hpc-node","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/enterprise-linux-hpc-node"}],"technology":{"hub":true,"name":"Redhat Insights-Client","slug":"insights-client","vendor":{"hub":true,"name":"Redhat","slug":"redhat","url":"https://junglewise.ai/threats/vendors/redhat"},"aliases":[],"description":"Red Hat client software for collecting system diagnostics and configuration information.","url":"https://junglewise.ai/threats/technologies/insights-client"},"most_severe":[{"cve":"CVE-2026-71474","cvss":7.1,"epss":0.0016,"slug":"cve-2026-71474-a-flaw-was-found-in-insights-client-when-the-application-receives","title":"A flaw was found in insights-client. When the application receives a non-200 response, it logs the request headers…","severity":"high","exploited":false,"published_at":"2026-08-11T20:18:45.547+00:00","url":"https://junglewise.ai/threats/cve-2026-71474-a-flaw-was-found-in-insights-client-when-the-application-receives"},{"cve":"CVE-2026-71475","cvss":6.8,"epss":0.0069,"slug":"cve-2026-71475-a-flaw-was-found-in-insights-client-a-compromised-managed-cluster","title":"A flaw was found in insights-client. A compromised managed cluster, referred to as a 'spoke', can inject unencoded…","severity":"medium","exploited":false,"published_at":"2026-08-11T20:18:45.673+00:00","url":"https://junglewise.ai/threats/cve-2026-71475-a-flaw-was-found-in-insights-client-a-compromised-managed-cluster"},{"cve":"CVE-2026-71846","cvss":6.5,"epss":0.0016,"slug":"cve-2026-71846-red-hat-insights-client-excessive-kubernetes-permissions-in","title":"Red Hat insights-client excessive Kubernetes permissions in ServiceAccount","severity":"medium","exploited":false,"published_at":"2026-08-12T22:17:16.143+00:00","url":"https://junglewise.ai/threats/cve-2026-71846-red-hat-insights-client-excessive-kubernetes-permissions-in"},{"cve":"CVE-2026-71845","cvss":6.3,"epss":0.005,"slug":"cve-2026-71845-a-flaw-was-found-in-insights-client-the-setdefault-function-logs","title":"A flaw was found in insights-client. The setDefault() function logs the value of every environment variable it…","severity":"medium","exploited":false,"published_at":"2026-08-11T20:18:45.8+00:00","url":"https://junglewise.ai/threats/cve-2026-71845-a-flaw-was-found-in-insights-client-the-setdefault-function-logs"}],"generated_at":"2026-11-11T03:07:00.183524+00:00"}