onyx --cves cve-2016-7075

CVE-2016-7075

score: <0.1
cvss: 7.5
epss: 1.6%
published: 2018-09-10
kev added: —
first seen: 2026-10-21

Openshift Enterprise 3 uses Kubernetes that contains a flaw in X.509 client certificate hostname validation, letting attackers bypass authentication with a specially crafted certificate, exploit requires attacker to present a crafted certificate.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

2018-09-10 Published
2026-10-21 Tracked by Onyx
2026-10-21 Public PoC

Exploit availability

Public PoC flagged by vulnx; no direct exploit link among the citations.

Weaknesses

CWE-295

References 3

https://access.redhat.com/errata/RHSA-2016:2064
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7075
https://github.com/kubernetes/kubernetes/issues/34517