<![CDATA[https://access.redhat.com/security/cve/cve-2026-10840]]>
Link Preview Image
cve-details

favicon

(access.redhat.com)

A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources via the tekton-scheduler-role ClusterRole. When Kueue or cert-manager CRDs are present on the cluster, any authenticated user can disrupt workload scheduling, tamper with scheduling priorities, delete other tenants' Workload objects, or induce cert-manager to overwrite TLS Secrets including the default ingress controller certificate.

]]>https://board.circlewithadot.net/topic/ce167cd9-5204-445e-b75f-6b2e9f03ea4e/https-access.redhat.com-security-cve-cve-2026-10840RSS for NodeFri, 05 Jun 2026 17:35:43 GMTThu, 04 Jun 2026 14:21:52 GMT60<![CDATA[Reply to https://access.redhat.com/security/cve/cve-2026-10840 on Thu, 04 Jun 2026 21:31:19 GMT]]>@Spartan_1986 It's so bad.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116693970416397673https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116693970416397673Thu, 04 Jun 2026 21:31:19 GMT<![CDATA[Reply to https://access.redhat.com/security/cve/cve-2026-10840 on Thu, 04 Jun 2026 21:16:31 GMT]]>@cR0w JFC I work in IT and that paragraph still reads like something out of a James Bondage tech-bromance satire.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/Spartan_1986/statuses/116693912224447610https://board.circlewithadot.net/post/https://infosec.exchange/users/Spartan_1986/statuses/116693912224447610Thu, 04 Jun 2026 21:16:31 GMT<![CDATA[Reply to https://access.redhat.com/security/cve/cve-2026-10840 on Thu, 04 Jun 2026 16:04:46 GMT]]>@wdormann @cR0w I need to add this to my onboarding document

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/TindrasGrove/statuses/116692686359694529https://board.circlewithadot.net/post/https://infosec.exchange/users/TindrasGrove/statuses/116692686359694529Thu, 04 Jun 2026 16:04:46 GMT<![CDATA[Reply to https://access.redhat.com/security/cve/cve-2026-10840 on Thu, 04 Jun 2026 15:58:41 GMT]]>@FritzAdalis @cR0w

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/wdormann/statuses/116692662467543523https://board.circlewithadot.net/post/https://infosec.exchange/users/wdormann/statuses/116692662467543523Thu, 04 Jun 2026 15:58:41 GMT<![CDATA[Reply to https://access.redhat.com/security/cve/cve-2026-10840 on Thu, 04 Jun 2026 15:55:45 GMT]]>@wdormann @cR0w
I mean I tell people I don't have a phone... when I'm standing in front of them looking at my phone.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/FritzAdalis/statuses/116692650916584949https://board.circlewithadot.net/post/https://infosec.exchange/users/FritzAdalis/statuses/116692650916584949Thu, 04 Jun 2026 15:55:45 GMT<![CDATA[Reply to https://access.redhat.com/security/cve/cve-2026-10840 on Thu, 04 Jun 2026 14:58:30 GMT]]>@wdormann @cR0w if you haven't seen the Rick & Morty "plumbus" video, it has a similar vibe. always cracks me up.

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/zackwhittaker/statuses/116692425801991753https://board.circlewithadot.net/post/https://mastodon.social/users/zackwhittaker/statuses/116692425801991753Thu, 04 Jun 2026 14:58:30 GMT<![CDATA[Reply to https://access.redhat.com/security/cve/cve-2026-10840 on Thu, 04 Jun 2026 14:50:30 GMT]]>@wdormann

Link Preview Image
]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116692394327421399https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116692394327421399Thu, 04 Jun 2026 14:50:30 GMT<![CDATA[Reply to https://access.redhat.com/security/cve/cve-2026-10840 on Thu, 04 Jun 2026 14:49:28 GMT]]>@wdormann Unlike Reddit who blocks me.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116692390250665592https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116692390250665592Thu, 04 Jun 2026 14:49:28 GMT<![CDATA[Reply to https://access.redhat.com/security/cve/cve-2026-10840 on Thu, 04 Jun 2026 14:48:30 GMT]]>@wdormann @cR0w I assume they mean it's blocked on their network?

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/ajn142/statuses/116692386473250288https://board.circlewithadot.net/post/https://infosec.exchange/users/ajn142/statuses/116692386473250288Thu, 04 Jun 2026 14:48:30 GMT<![CDATA[Reply to https://access.redhat.com/security/cve/cve-2026-10840 on Thu, 04 Jun 2026 14:48:27 GMT]]>@wdormann Sorry, I mean it's blocked on my network. Intentionally.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116692386297751669https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116692386297751669Thu, 04 Jun 2026 14:48:27 GMT<![CDATA[Reply to https://access.redhat.com/security/cve/cve-2026-10840 on Thu, 04 Jun 2026 14:48:01 GMT]]>@cR0w
"Don't have YouTube"...
YouTube is a website?

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/wdormann/statuses/116692384603837319https://board.circlewithadot.net/post/https://infosec.exchange/users/wdormann/statuses/116692384603837319Thu, 04 Jun 2026 14:48:01 GMT<![CDATA[Reply to https://access.redhat.com/security/cve/cve-2026-10840 on Thu, 04 Jun 2026 14:45:43 GMT]]>@cR0w @wdormann it's creepy!
Like, are we sure it isn't Chris?

watches for the 8millionth time

]]>https://board.circlewithadot.net/post/https://infosec.exchange/ap/users/116093572746253175/statuses/116692375514912905https://board.circlewithadot.net/post/https://infosec.exchange/ap/users/116093572746253175/statuses/116692375514912905Thu, 04 Jun 2026 14:45:43 GMT<![CDATA[Reply to https://access.redhat.com/security/cve/cve-2026-10840 on Thu, 04 Jun 2026 14:45:03 GMT]]>@jackryder @wdormann They're the same picture.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116692372887018763https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116692372887018763Thu, 04 Jun 2026 14:45:03 GMT<![CDATA[Reply to https://access.redhat.com/security/cve/cve-2026-10840 on Thu, 04 Jun 2026 14:42:08 GMT]]>@cR0w @wdormann He looks like Chris Hansen from an alternative timeline where he went "Sales guy" instead of "Have a seat..."

]]>https://board.circlewithadot.net/post/https://infosec.exchange/ap/users/116093572746253175/statuses/116692361455771405https://board.circlewithadot.net/post/https://infosec.exchange/ap/users/116093572746253175/statuses/116692361455771405Thu, 04 Jun 2026 14:42:08 GMT<![CDATA[Reply to https://access.redhat.com/security/cve/cve-2026-10840 on Thu, 04 Jun 2026 14:40:55 GMT]]>@jackryder @wdormann Ah. Yeah, that one's a classic.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116692356651860288https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116692356651860288Thu, 04 Jun 2026 14:40:55 GMT<![CDATA[Reply to https://access.redhat.com/security/cve/cve-2026-10840 on Thu, 04 Jun 2026 14:40:32 GMT]]>@cR0w @wdormann It's a video of a guy talking a bunch of science stuff.

The fictional Retro Encabulator device, which uses six hydrocoptic marzel vanes and an ambifacient lunar wane shaft to prevent unwanted side fumbling. We can't believe the salesman was able to keep a straight face.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/ap/users/116093572746253175/statuses/116692355185508281https://board.circlewithadot.net/post/https://infosec.exchange/ap/users/116093572746253175/statuses/116692355185508281Thu, 04 Jun 2026 14:40:32 GMT<![CDATA[Reply to https://access.redhat.com/security/cve/cve-2026-10840 on Thu, 04 Jun 2026 14:37:41 GMT]]>@wdormann I don't have YouTube but searching the link looks like the Rockwell Retroencabulator video?

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116692343939340415https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116692343939340415Thu, 04 Jun 2026 14:37:41 GMT<![CDATA[Reply to https://access.redhat.com/security/cve/cve-2026-10840 on Thu, 04 Jun 2026 14:28:25 GMT]]>@cR0w
https://www.youtube.com/watch?v=aW2LvQUcwqc

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/wdormann/statuses/116692307498222010https://board.circlewithadot.net/post/https://infosec.exchange/users/wdormann/statuses/116692307498222010Thu, 04 Jun 2026 14:28:25 GMT