Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

RHSA-2026:39981 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceRHSA-2026:39981

RHSA-2026:39981

CRITICAL9.1

Red Hat Security Advisory: Cost Management Metrics Operator Update

Published Jul 15, 2026

Modified 2 days ago

Details

Details:

The Cost Management Metrics Operator is a component of the Red Hat Cost Managment service for Openshift. The operator runs on the latest supported versions of Openshift. This operator obtains OpenShift usage data by querying Prometheus every hour to create metric reports that it uploads to Cost Management at console.redhat.com.

References

https://access.redhat.com/errata/RHSA-2026:39981

https://access.redhat.com/security/cve/CVE-2025-5278

https://access.redhat.com/security/cve/CVE-2026-0915

https://access.redhat.com/security/cve/CVE-2026-31790

https://access.redhat.com/security/cve/CVE-2026-34182

https://access.redhat.com/security/cve/CVE-2026-34183

https://access.redhat.com/security/cve/CVE-2026-42764

https://access.redhat.com/security/cve/CVE-2026-45445

https://access.redhat.com/security/cve/CVE-2026-45447

https://access.redhat.com/security/cve/CVE-2026-4878

https://access.redhat.com/security/cve/CVE-2026-5450

https://access.redhat.com/security/updates/classification

https://access.redhat.com/security/updates/classification/

https://docs.redhat.com/en/documentation/cost_management_service/1-latest/html/getting_started_with_cost_management/steps-to-cost-management

https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39981.json

CVSS Analysis

CVSS v3.1

9.1

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

NoneA:N

9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Upstream

CVE-2025-5278 CVE-2026-0915 CVE-2026-31790 CVE-2026-34182 CVE-2026-34183 CVE-2026-42764 CVE-2026-45445 CVE-2026-45447 CVE-2026-4878 CVE-2026-5450

Ecosystems

Timeline

PublishedJul 15, 2026

ModifiedSep 8, 2026