Redhat Cost Management Metrics Operator — known CVE vulnerabilities

Every CVE whose affected-product data names Redhat Cost Management Metrics Operator, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2026-18378 — CVSS 7.6 (high): A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows user able to edit the CR to…
• CVE-2026-18381 — CVSS 7.6 (high): A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator's CostManagementMetricsConfig custom resource allows a…
• CVE-2026-18382 — CVSS 6.8 (medium): A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to…