High8.8Red Hat Linux

High [CVE-2026-1784] Remote Code Execution Through HAProxy Configuration Injection

This high-severity Red Hat Linux advisory covers CVE-2026-1784 affecting Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.15.

CVE-2026-1784 Published Jun 2, 2026

CVE-2026-1784

Affected products & platforms

Red Hat LinuxUnclassified

Open vendor advisory

Android app · Google Play

Monitor future Red Hat Linux CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Get CVE alerts See app features

Summary

Remote Code Execution Through HAProxy Configuration Injection. Red Hat rates this important (CVSS 8.8).

Weakness: CWE-15.

Affected package(s): openshift4/ose-cluster-ingress-rhel9-operator:1780988280, openshift4/ose-cluster-ingress-rhel9-operator:1780962617, openshift4/ose-cluster-ingress-rhel9-operator:1780444348, openshift4/ose-cluster-ingress-rhel9-operator:1780990977, openshift4/ose-cluster-ingress-operator:1781123014, openshift4/ose-cluster-ingress-rhel9-operator:1780043338.

Resolved in Red Hat advisory RHSA-2026:28893 — update the affected packages (`sudo dnf update`).

Affected products named by the advisory: Red Hat OpenShift Container Platform 4.13; Red Hat OpenShift Container Platform 4.14; Red Hat OpenShift Container Platform 4.15; Red Hat OpenShift Container Platform 4.16; and 4 more.

Affected versions

openshift4/ose-cluster-ingress-rhel9-operator:1780988280
openshift4/ose-cluster-ingress-rhel9-operator:1780962617
openshift4/ose-cluster-ingress-rhel9-operator:1780444348
openshift4/ose-cluster-ingress-rhel9-operator:1780990977
openshift4/ose-cluster-ingress-operator:1781123014
openshift4/ose-cluster-ingress-rhel9-operator:1780043338
openshift4/ose-cluster-ingress-rhel9-operator:1781928857
openshift4/ose-cluster-ingress-operator:1781870101

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Fixed versions

RHSA-2026:28893

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Mitigation checklist

Recommended fix / mitigation

Update the affected package(s) to the fixed version shipped in RHSA-2026:28893 (`sudo dnf update` / `yum update`).

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.