CVE-2026-111382
Severity: important
Released on: 16/10/2026
Advisory:
Bugzilla: 2553920
Bugzilla Description: freerdp: freerdp: Arbitrary code execution via crafted display frames
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-111381
Severity: important
Released on: 16/10/2026
Advisory:
Bugzilla: 2553917
Bugzilla Description: freerdp: freerdp: Arbitrary code execution via crafted persistent cache file
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-111380
Severity: important
Released on: 16/10/2026
Advisory:
Bugzilla: 2553925
Bugzilla Description: freerdp: FreeRDP: Arbitrary code execution via integer overflow in audio input buffer calculation
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-111379
Severity: important
Released on: 16/10/2026
Advisory:
Bugzilla: 2553911
Bugzilla Description: freerdp: FreeRDP: Arbitrary code execution via crafted persistent cache file
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-111378
Severity: important
Released on: 16/10/2026
Advisory:
Bugzilla: 2553907
Bugzilla Description: freerdp: freerdp: Denial of Service via memory exhaustion in NLA frame parser
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-111377
Severity: moderate
Released on: 16/10/2026
Advisory:
Bugzilla: 2553915
Bugzilla Description: freerdp: FreeRDP: Denial of Service via unbounded static channel reassembly
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-111376
Severity: moderate
Released on: 16/10/2026
Advisory:
Bugzilla: 2553910
Bugzilla Description: freerdp: freerdp: Denial of Service via short clipboard response
CVSS Score:
CVSSv3 Score: 5.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-111375
Severity: moderate
Released on: 16/10/2026
Advisory:
Bugzilla: 2553909
Bugzilla Description: freerdp: FreeRDP: Denial of Service via out-of-bounds read in RAIL window title
CVSS Score:
CVSSv3 Score: 4.8
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-111374
Severity: moderate
Released on: 16/10/2026
Advisory:
Bugzilla: 2553913
Bugzilla Description: freerdp: freerdp: Denial of Service via unadvertised camera stream requests
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-111373
Severity: moderate
Released on: 16/10/2026
Advisory:
Bugzilla: 2553908
Bugzilla Description: freerdp: FreeRDP: Denial of Service via zero-length WebSocket ping
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-617
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-110915
Severity: important
Released on: 15/10/2026
Advisory:
Bugzilla: 2553883
Bugzilla Description: chromium-browser: chromium-browser: Use after free in Compositing
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110919
Severity: important
Released on: 15/10/2026
Advisory:
Bugzilla: 2553882
Bugzilla Description: chromium-browser: chromium-browser: Use after free in V8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-825
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-111272
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553872
Bugzilla Description: LibRaw: LibRaw: Denial of Service via heap-based out-of-bounds read in Nikon metadata parser
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-111269
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553858
Bugzilla Description: libical: libical: Denial of Service via out-of-bounds read in icalvalue_decode_ical_string()
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-109468
Severity: important
Released on: 15/10/2026
Advisory:
Bugzilla: 2553817
Bugzilla Description: dotnet: ASP.NET Core: Denial of Service via unthrottled resource allocation
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-111157
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553751
Bugzilla Description: sox: sox: Denial of Service via crafted WAV file
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-111141
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553732
Bugzilla Description: zziplib: zziplib: Denial of Service via out-of-bounds read in central directory parsing
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-111142
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553744
Bugzilla Description: zziplib: zziplib: Denial of Service via out-of-bounds read in ZIP central directory parsing
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-111137
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553745
Bugzilla Description: libsmi: libsmi: Denial of service via out-of-bounds write in smiValueAsString()
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-111132
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553716
Bugzilla Description: libgxps: libgxps: Denial of Service via crafted XPS document
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-111129
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553697
Bugzilla Description: assimp: assimp: Denial of Service via invalid animation track targets
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-111128
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553719
Bugzilla Description: assimp: assimp: Denial of Service via NULL pointer dereference in Ogre3D importer
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-111125
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553694
Bugzilla Description: cfitsio: cfitsio: Denial of Service via heap-based out-of-bounds read in HCOMPRESS tile decoder
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux AI (RHEL AI) 3,
Full Details
CVE document

CVE-2026-111124
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553758
Bugzilla Description: cfitsio: cfitsio: Denial of Service via out-of-bounds read during image decompression
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux AI (RHEL AI) 3,
Full Details
CVE document

CVE-2026-87029
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553726
Bugzilla Description: undici: undici: Denial of Service via unhandled exception in decompress interceptor
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-248
Affected Packages:
Package States: Cryostat 4,Exploit Intelligence,Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat Ansible Automation Platform 2,Red Hat Build of Podman Desktop,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Trusted Artifact Signer,Secrets Management Console for Red Hat OpenShift,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-62322
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553757
Bugzilla Description: social-auth-core: social-auth-core: unauthorized account access via missing OAuth state validation in LINE backend
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-358
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,
Full Details
CVE document

CVE-2026-109932
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553687
Bugzilla Description: undici: undici: Denial of Service via unbounded WebSocket PONG buffering
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-770
Affected Packages:
Package States: Cryostat 4,Exploit Intelligence,Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat Ansible Automation Platform 2,Red Hat Build of Podman Desktop,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Trusted Artifact Signer,Secrets Management Console for Red Hat OpenShift,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-104150
Severity: important
Released on: 15/10/2026
Advisory:
Bugzilla: 2553743
Bugzilla Description: http-server: http-server: Denial of Service via inefficient regular expression in slug route matcher
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-1333
Affected Packages:
Package States: Node HealthCheck Operator,Node HealthCheck Operator,Node HealthCheck Operator,Node HealthCheck Operator,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-87018
Severity: important
Released on: 15/10/2026
Advisory:
Bugzilla: 2553677
Bugzilla Description: undici: undici: Denial of Service via TLS renegotiation with mismatched certificate
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-617
Affected Packages:
Package States: Cryostat 4,Exploit Intelligence,Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat Ansible Automation Platform 2,Red Hat Build of Podman Desktop,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Trusted Artifact Signer,Secrets Management Console for Red Hat OpenShift,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-109383
Severity: important
Released on: 15/10/2026
Advisory:
Bugzilla: 2553678
Bugzilla Description: undici: undici: Certificate validation bypass via dropped TLS options in Agent
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-295
Affected Packages:
Package States: Cryostat 4,Exploit Intelligence,Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat Ansible Automation Platform 2,Red Hat Build of Podman Desktop,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Trusted Artifact Signer,Secrets Management Console for Red Hat OpenShift,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-109829
Severity: important
Released on: 15/10/2026
Advisory:
Bugzilla: 2553679
Bugzilla Description: undici: undici: Cache poisoning and information disclosure via improper cross-origin redirect caching
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-346
Affected Packages:
Package States: Cryostat 4,Exploit Intelligence,Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat Ansible Automation Platform 2,Red Hat Build of Podman Desktop,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Trusted Artifact Signer,Secrets Management Console for Red Hat OpenShift,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-109841
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553669
Bugzilla Description: undici: undici: Subresource Integrity bypass via non-lowercase algorithm tokens
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-354
Affected Packages:
Package States: Cryostat 4,Exploit Intelligence,Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat Ansible Automation Platform 2,Red Hat Build of Podman Desktop,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Trusted Artifact Signer,Secrets Management Console for Red Hat OpenShift,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-109924
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553663
Bugzilla Description: undici: undici: Denial of Service via memory exhaustion in EventSource client
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-770
Affected Packages:
Package States: Cryostat 4,Exploit Intelligence,Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat Ansible Automation Platform 2,Red Hat Build of Podman Desktop,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Trusted Artifact Signer,Secrets Management Console for Red Hat OpenShift,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-63430
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553658
Bugzilla Description: ammonia: ammonia: Cross-site scripting via improper MathML namespace handling
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-79
Affected Packages:
Package States: Ansible Automation Orchestrator 2026,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-109869
Severity: important
Released on: 15/10/2026
Advisory:
Bugzilla: 2553656
Bugzilla Description: undici: undici: Denial of Service via unhandled stream error on excessive content encodings
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-248
Affected Packages:
Package States: Cryostat 4,Exploit Intelligence,Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat Ansible Automation Platform 2,Red Hat Build of Podman Desktop,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Trusted Artifact Signer,Secrets Management Console for Red Hat OpenShift,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-109131
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2549510
Bugzilla Description: ansible-ui: ansible-ui: stored XSS via unsafe javascript URL scheme in Hub collection module documentation (formatPartURL)
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-79
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,
Full Details
CVE document

CVE-2026-104266
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553619
Bugzilla Description: tinytag: tinytag: Denial of Service via infinite loop in M4A parser
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-835
Affected Packages:
Package States: Lightspeed Core,Lightspeed Core,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,
Full Details
CVE document

CVE-2026-55453
Severity: important
Released on: 15/10/2026
Advisory:
Bugzilla: 2553616
Bugzilla Description: cups: cups: Arbitrary code execution via newline injection in printer status messages
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-93
Affected Packages:
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-55467
Severity: low
Released on: 15/10/2026
Advisory:
Bugzilla: 2553617
Bugzilla Description: cups: cups: Denial of Service via unsanitized fax job attributes
CVSS Score:
CVSSv3 Score: 2.5
Vector:
CWE: CWE-88
Affected Packages:
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-108334
Severity: important
Released on: 15/10/2026
Advisory:
Bugzilla: 2548768
Bugzilla Description: github.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-management/rhcl-operator-product-build/kuadrant-operator: kuadrant-operator: Crafted HTTPRoute match values can bypass Gateway policy overrides
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-917
Affected Packages:
Package States: Red Hat Connectivity Link 1,Red Hat Connectivity Link 1,Red Hat Connectivity Link 1,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-100352
Severity: important
Released on: 15/10/2026
Advisory:
Bugzilla: 2553588
Bugzilla Description: github.com/getkin/kin-openapi: kin-openapi: Denial of Service via improper handling of non-finite numeric values
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-100351
Severity: important
Released on: 15/10/2026
Advisory:
Bugzilla: 2553587
Bugzilla Description: github.com/getkin/kin-openapi: kin-openapi: Authentication bypass via URL path decoding discrepancy
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-289
Affected Packages:
Package States: Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-100349
Severity: important
Released on: 15/10/2026
Advisory:
Bugzilla: 2553589
Bugzilla Description: github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil pointer dereference in response validation
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-100350
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553584
Bugzilla Description: github.com/getkin/kin-openapi: kin-openapi: Denial of Service via redundant regular expression compilation in query parameter decoding
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-100347
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553580
Bugzilla Description: github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unsupported HTTP methods on static paths
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-248
Affected Packages:
Package States: Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-92982
Severity: important
Released on: 15/10/2026
Advisory:
Bugzilla: 2522227
Bugzilla Description: ansible-operator-plugins: Ansible Operator Plugins: Arbitrary Code Execution via Jinja2 Template Injection
CVSS Score:
CVSSv3 Score: 8.5
Vector:
CWE: CWE-1336
Affected Packages:
Package States: Migration Toolkit for Applications 8,Migration Toolkit for Containers,Migration Toolkit for Virtualization,OpenShift Service Mesh 3,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Service Telemetry Framework 1.5,Service Telemetry Framework 1.5,
Full Details
CVE document

CVE-2026-104715
Severity: important
Released on: 15/10/2026
Advisory:
Bugzilla: 2545023
Bugzilla Description: cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-88
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-18659
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553182
Bugzilla Description: org.eclipse.jetty/jetty-security: Eclipse Jetty: Security constraint bypass via HTTP method substrings
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-358
Affected Packages:
Package States: Exploit Intelligence,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,Red Hat AMQ Broker 7,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel - HawtIO 4,Red Hat build of Apicurio Registry 3,Red Hat build of Debezium 3,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 9,Red Hat Fuse 7,Red Hat Offline Knowledge Portal,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-18660
Severity: important
Released on: 15/10/2026
Advisory:
Bugzilla: 2553134
Bugzilla Description: org.eclipse.jetty/jetty-server: org.eclipse.jetty/jetty-proxy: Eclipse Jetty: Access control bypass via case-sensitive host filtering
CVSS Score:
CVSSv3 Score: 8.2
Vector:
CWE: CWE-178
Affected Packages:
Package States: Exploit Intelligence,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,Red Hat AMQ Broker 7,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel - HawtIO 4,Red Hat build of Apicurio Registry 3,Red Hat build of Apicurio Registry 3,Red Hat build of Debezium 3,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Fuse 7,Red Hat Fuse 7,Red Hat Offline Knowledge Portal,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-79824
Severity: important
Released on: 15/10/2026
Advisory:
Bugzilla: 2553131
Bugzilla Description: python: python: Arbitrary file overwrite via directory traversal in TAR archives
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-22
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift Virtualization 4,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-77711
Severity: important
Released on: 15/10/2026
Advisory:
Bugzilla: 2553119
Bugzilla Description: org.eclipse.jetty/jetty-client: jetty-client: Information disclosure via improper proxy authentication handling
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-201
Affected Packages:
Package States: Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel - HawtIO 4,Red Hat build of Apicurio Registry 3,Red Hat build of Debezium 3,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 9,Red Hat Fuse 7,Red Hat Offline Knowledge Portal,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-76184
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553118
Bugzilla Description: org.eclipse.jetty/jetty-client: org.eclipse.jetty/jetty-http-tools: jetty-client: Information disclosure via improper redirect path normalization
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-201
Affected Packages:
Package States: Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel - HawtIO 4,Red Hat build of Apicurio Registry 3,Red Hat build of Debezium 3,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 9,Red Hat Fuse 7,Red Hat Offline Knowledge Portal,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-76182
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553117
Bugzilla Description: org.eclipse.jetty/jetty-server: org.eclipse.jetty.ee10/jetty-ee10-servlets: org.eclipse.jetty.ee9/jetty-ee9-servlets: org.eclipse.jetty.ee8/jetty-ee8-servlets: Eclipse Jetty: Query parameter injection via unescaped URI paths
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-140
Affected Packages:
Package States: Exploit Intelligence,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,Red Hat AMQ Broker 7,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel - HawtIO 4,Red Hat build of Apicurio Registry 3,Red Hat build of Debezium 3,Red Hat build of Debezium 3,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Fuse 7,Red Hat Offline Knowledge Portal,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-109855
Severity: important
Released on: 15/10/2026
Advisory: RHSA-2026:76677, RHSA-2026:83198,
Bugzilla: 2553103
Bugzilla Description: undici: undici: Denial of Service via failed HTTP/2 WebSocket handshake
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-248
Affected Packages: nodejs26-main-11.20.0-1.26.11.1.0.3.hum1,grafana12-4-main-12.4.12-0.4.hum1,nodejs26-main-26.11.1-0.3.hum1,
Package States: Cryostat 4,Exploit Intelligence,Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat Ansible Automation Platform 2,Red Hat Build of Podman Desktop,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Trusted Artifact Signer,Secrets Management Console for Red Hat OpenShift,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-102475
Severity: important
Released on: 15/10/2026
Advisory:
Bugzilla: 2553075
Bugzilla Description: io.vertx/vertx-http-proxy: vertx-http-proxy: Denial of Service via unbounded memory allocation in body transformer
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Exploit Intelligence,Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Quarkus,
Full Details
CVE document

CVE-2026-85634
Severity: important
Released on: 15/10/2026
Advisory:
Bugzilla: 2528476
Bugzilla Description: wildfly-core: wildfly-core: Deployer RBAC role privilege escalation via path traversal in deployment name
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-22
Affected Packages:
Package States: Red Hat Fuse 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-110923
Severity: moderate
Released on: 15/10/2026
Advisory: RHSA-2026:82247,
Bugzilla: 2553028
Bugzilla Description: openssh: openssh: sftp can write outside the destination directory from a server-supplied path
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-22
Affected Packages: openssh-main-10.5p1-1.2.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-110924
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553033
Bugzilla Description: openssh: openssh: GSSAPI delegated credentials can be stored after a failed authentication
CVSS Score:
CVSSv3 Score: 4.8
Vector:
CWE: CWE-459
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-110925
Severity: moderate
Released on: 15/10/2026
Advisory: RHSA-2026:82247,
Bugzilla: 2553034
Bugzilla Description: openssh: openssh: '$' and '\' in a command-line username expand through %u
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-78
Affected Packages: openssh-main-10.5p1-1.2.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-110926
Severity: moderate
Released on: 15/10/2026
Advisory: RHSA-2026:82247,
Bugzilla: 2553035
Bugzilla Description: openssh: openssh: shared LZ77 compression dictionary leaks plaintext across channels
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-203
Affected Packages: openssh-main-10.5p1-1.2.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-110927
Severity: moderate
Released on: 15/10/2026
Advisory: RHSA-2026:82247,
Bugzilla: 2553037
Bugzilla Description: openssh: openssh: a compressed payload can expand past the maximum packet size
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-770
Affected Packages: openssh-main-10.5p1-1.2.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-110928
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553038
Bugzilla Description: openssh: openssh: authorized_keys restrict does not apply to tunnel forwarding
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-284
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-110929
Severity: important
Released on: 15/10/2026
Advisory:
Bugzilla: 2553039
Bugzilla Description: openssh: openssh: post-authentication process retains root without file-descriptor passing
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-250
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-99999
Severity: critical
Released on: 15/10/2026
Advisory:
Bugzilla: 2553429
Bugzilla Description: kernel: ipv4: validate checksum_start before completing checksum
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-88753
Severity: moderate
Released on: 15/10/2026
Advisory:
Bugzilla: 2553572
Bugzilla Description: markdown2: markdown2: Denial of Service via crafted Markdown document
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-1333
Affected Packages:
Package States: Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-110872
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552972
Bugzilla Description: nodemailer: nodemailer: Denial of Service via inefficient SMTP reply parsing
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-1322
Affected Packages:
Package States: Red Hat Developer Hub,Red Hat Enterprise Linux 10,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-110871
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552965
Bugzilla Description: nodemailer: nodemailer: Denial of Service via inefficient header parsing
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-1322
Affected Packages:
Package States: Red Hat Developer Hub,Red Hat Enterprise Linux 10,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-110870
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552969
Bugzilla Description: nodemailer: nodemailer: Domain allow-list bypass via improper address comment parsing
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-791
Affected Packages:
Package States: Red Hat Developer Hub,Red Hat Enterprise Linux 10,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-110869
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2552974
Bugzilla Description: nodemailer: nodemailer: Denial of Service via regular expression backtracking in SMTP authentication parsing
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-1333
Affected Packages:
Package States: Red Hat Developer Hub,Red Hat Enterprise Linux 10,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-110868
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552982
Bugzilla Description: renovate: Renovate: Information disclosure via Server-Side Request Forgery
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-918
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110866
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552993
Bugzilla Description: renovate: Renovate: Protection mechanism bypass via pull request rebase
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-841
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110865
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2552980
Bugzilla Description: renovate: Renovate: HTTP header injection via shared configuration presets
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-15
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110860
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552968
Bugzilla Description: GitPython: GitPython: Arbitrary file relocation via symbolic link traversal in Submodule.move()
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-59
Affected Packages:
Package States: Exploit Intelligence,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-110859
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2552989
Bugzilla Description: GitPython: GitPython: Arbitrary file read via argument injection in branch checkout
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-88
Affected Packages:
Package States: Exploit Intelligence,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-110857
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2552966
Bugzilla Description: GitPython: GitPython: Arbitrary code execution via unsafe URL protocol handling
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-88
Affected Packages:
Package States: Exploit Intelligence,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-110856
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2552977
Bugzilla Description: GitPython: GitPython: Denial of Service via regular expression backtracking in date parsing
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-1333
Affected Packages:
Package States: Exploit Intelligence,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-110855
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552997
Bugzilla Description: GitPython: GitPython: Information disclosure via environment variable expansion in submodule names
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-497
Affected Packages:
Package States: Exploit Intelligence,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-110839
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2552996
Bugzilla Description: freerdp: FreeRDP: Denial of Service via grayscale JPEG clipboard conversion
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-110838
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2552961
Bugzilla Description: freerdp: FreeRDP: Unauthenticated keystroke injection via premature input dispatch
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-306
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-110837
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2552978
Bugzilla Description: freerdp: freerdp: Denial of Service via heap-based buffer overflow during MP3 audio decoding
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-122
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-110836
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552991
Bugzilla Description: freerdp: freerdp: Denial of Service via crafted gateway Content-Type header
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-110835
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552973
Bugzilla Description: freerdp: freerdp: HTTP header injection via crafted proxy routing token
CVSS Score:
CVSSv3 Score: 4.0
Vector:
CWE: CWE-93
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-110834
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552985
Bugzilla Description: freerdp: freerdp: Denial of Service via out-of-lifecycle serial requests
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-110833
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552988
Bugzilla Description: freerdp: freerdp: Denial of Service via unbounded memory consumption during RDPDR reassembly
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-400
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-110832
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552983
Bugzilla Description: freerdp: freerdp: Denial of Service via memory exhaustion in dynamic virtual channels
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-400
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-110831
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552984
Bugzilla Description: freerdp: FreeRDP: Denial of Service via file handle leak during drive redirection
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-775
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-110830
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552970
Bugzilla Description: freerdp: freerdp: Denial of Service via file descriptor exhaustion in serial device handling
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-400
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-110829
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552986
Bugzilla Description: freerdp: FreeRDP: Denial of Service via malformed rdpsnd channel fragment
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-110816
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552954
Bugzilla Description: qs: qs: Denial of Service via unhandled exception during array serialization
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-248
Affected Packages:
Package States: Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-110772
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552788
Bugzilla Description: sure: sure: Unauthorized transaction modification via bulk update missing authorization
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-639
Affected Packages:
Package States: Red Hat Enterprise Linux 8,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-109527
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2552745
Bugzilla Description: mcp: mcp: Denial of Service via unbounded HTTP request body buffering
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Ansible Automation Orchestrator 2026,Exploit Intelligence,Lightspeed Core,Lightspeed Core,Lightspeed Core,Migration Toolkit for Applications 8,OpenShift Lightspeed,OpenShift Lightspeed,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux command line assistant,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Virtualization 4,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-107350
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2552733
Bugzilla Description: pgbouncer: pgbouncer: Privilege escalation via secondary startup message during SCRAM authentication
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-841
Affected Packages:
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-107349
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2552735
Bugzilla Description: pgbouncer: pgbouncer: Denial of Service via empty parameter name in startup options
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-107348
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552741
Bugzilla Description: pgbouncer: pgbouncer: Denial of Service via integer overflow in message buffer growth
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-96596
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552674
Bugzilla Description: erlang: hex_core: hex: rebar3: erl_tar: Denial of Service via crafted GNU sparse TAR archive
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-59951
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2552683
Bugzilla Description: mcp: mcp: Denial of Service via session memory exhaustion in streamable HTTP servers
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-772
Affected Packages:
Package States: Ansible Automation Orchestrator 2026,Exploit Intelligence,Lightspeed Core,Lightspeed Core,Lightspeed Core,Migration Toolkit for Applications 8,OpenShift Lightspeed,OpenShift Lightspeed,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux command line assistant,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Virtualization 4,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-77524
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2552475
Bugzilla Description: github.com/kedacore/keda: KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-918
Affected Packages:
Package States: Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,OpenShift Serverless,OpenShift Serverless,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,
Full Details
CVE document

CVE-2026-100236
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2541488
Bugzilla Description: dpdk: dpdk: heap out-of-bounds read/write in GSO header copy
CVSS Score:
CVSSv3 Score: 8.6
Vector:
CWE: CWE-787
Affected Packages:
Package States: Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenStack Platform 13 (Queens),
Full Details
CVE document

CVE-2026-93683
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2537015
Bugzilla Description: dpdk: dpdk: Guest-triggered out-of-bounds walk via vhost indirect descriptor length TOCTOU
CVSS Score:
CVSSv3 Score: 6.4
Vector:
CWE: CWE-367
Affected Packages:
Package States: Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenStack Platform 13 (Queens),
Full Details
CVE document

CVE-2026-86856
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2529897
Bugzilla Description: dpdk: dpdk: Stack and heap buffer overflow in nfp vDPA driver
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenStack Platform 13 (Queens),
Full Details
CVE document

CVE-2026-86849
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2529858
Bugzilla Description: dpdk: dpdk: Integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenStack Platform 13 (Queens),
Full Details
CVE document

CVE-2026-86848
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2529853
Bugzilla Description: dpdk: dpdk: Time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-367
Affected Packages:
Package States: Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenStack Platform 13 (Queens),
Full Details
CVE document

CVE-2026-86847
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2529847
Bugzilla Description: dpdk: dpdk: Guest can trigger infinite loop in vhost-crypto writeback chain cleanup
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-824
Affected Packages:
Package States: Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenStack Platform 13 (Queens),
Full Details
CVE document

CVE-2026-86846
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2529846
Bugzilla Description: dpdk: dpdk: Guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenStack Platform 13 (Queens),
Full Details
CVE document

CVE-2026-86845
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2529844
Bugzilla Description: dpdk: dpdk: Guest-triggered use-after-free and type confusion in vhost-crypto session cleanup
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenStack Platform 13 (Queens),
Full Details
CVE document

CVE-2026-86567
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2529685
Bugzilla Description: dpdk: dpdk: VDUSE handler fails to invalidate vring pointers when IOTLB is invalidated, leading to use-after-unmap
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States: Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenStack Platform 13 (Queens),
Full Details
CVE document

CVE-2026-86566
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2529684
Bugzilla Description: dpdk: dpdk: Guest with runt RX descriptors underflows copy length in vhost enqueue (split and packed rings)
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-191
Affected Packages:
Package States: Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenStack Platform 13 (Queens),
Full Details
CVE document

CVE-2026-86565
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2529683
Bugzilla Description: dpdk: dpdk: Guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write
CVSS Score:
CVSSv3 Score: 8.2
Vector:
CWE: CWE-787
Affected Packages:
Package States: Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenStack Platform 13 (Queens),
Full Details
CVE document

CVE-2026-86563
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2529668
Bugzilla Description: dpdk: dpdk: Double offset bug in vhost log mapping calculation
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-131
Affected Packages:
Package States: Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenStack Platform 13 (Queens),
Full Details
CVE document

CVE-2026-86562
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2529667
Bugzilla Description: dpdk: dpdk: Control-queue descriptor double-fetch overflows host heap in DPDK vhost (VDUSE)
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-362
Affected Packages:
Package States: Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenStack Platform 13 (Queens),
Full Details
CVE document

CVE-2026-86561
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2529666
Bugzilla Description: dpdk: dpdk: Missing memory size validation before mmap in vhost memory region setup
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 10,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 8,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Fast Datapath for RHEL 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenStack Platform 13 (Queens),
Full Details
CVE document

CVE-2026-97205
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2552359
Bugzilla Description: nginx: NGINX ngx_http_core_module vulnerability
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-15176
Severity: important
Released on: 14/10/2026
Advisory: RHSA-2026:83427,
Bugzilla: 2552352
Bugzilla Description: nginx: nginx: heap-based buffer overflow in ngx_http_core_module via alias with rewrite referencing $request_filename
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-122
Affected Packages: nginx-main-1.30.6-1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-110642
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2552249
Bugzilla Description: xhtml2pdf: xhtml2pdf: Arbitrary command execution via crafted file names
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-78
Affected Packages:
Package States: Red Hat Quay 3,Red Hat Quay 3,
Full Details
CVE document

CVE-2026-110602
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552272
Bugzilla Description: libmspack: libmspack: Memory corruption via uninitialized pointer free in kwajd_open
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-763
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2017-20286
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2552259
Bugzilla Description: DevIL: DevIL: Arbitrary code execution via crafted GIF image
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-787
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-92392
Severity: important
Released on: 14/10/2026
Advisory: RHSA-2026:82895, RHSA-2026:80349,
Bugzilla: 2548642
Bugzilla Description: curl: curl: HTTP/2 upload Use-After-Free
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-416
Affected Packages: curl-main-8.23.0-0.1.hum1,rust-main-1.99.0-1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat JBoss Core Services,Red Hat OpenShift Container Platform 4,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-86414
Severity: low
Released on: 14/10/2026
Advisory: RHSA-2026:82895,
Bugzilla: 2550343
Bugzilla Description: curl: curl: leaking host credentials to HTTP proxy
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-201
Affected Packages: curl-main-8.23.0-0.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat JBoss Core Services,Red Hat OpenShift Container Platform 4,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-86410
Severity: low
Released on: 14/10/2026
Advisory: RHSA-2026:82895,
Bugzilla: 2550356
Bugzilla Description: curl: curl: redirect to SFTP or SCP bypasses host verification
CVSS Score:
CVSSv3 Score: 6.8
Vector:
CWE: CWE-297
Affected Packages: curl-main-8.23.0-0.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat JBoss Core Services,Red Hat OpenShift Container Platform 4,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-92388
Severity: moderate
Released on: 14/10/2026
Advisory: RHSA-2026:82895,
Bugzilla: 2550692
Bugzilla Description: curl: curl: FTP wildcard write callback mixup
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-416
Affected Packages: curl-main-8.23.0-0.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat JBoss Core Services,Red Hat OpenShift Container Platform 4,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-104795
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2543917
Bugzilla Description: insights-runtime-extractor: insights-runtime-extractor: Container Escape via Privileged Binary Execution
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-250
Affected Packages:
Package States: Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-88842
Severity: low
Released on: 14/10/2026
Advisory: RHSA-2026:81391,
Bugzilla: 2531355
Bugzilla Description: busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruption
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: CWE-125
Affected Packages: busybox-main-1.37.0-9.4.hum1,
Package States:
Full Details
CVE document

CVE-2026-100231
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2541468
Bugzilla Description: gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect UTF-16 size calculation for non-BMP characters
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-100229
Severity: low
Released on: 14/10/2026
Advisory:
Bugzilla: 2541471
Bugzilla Description: gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds write in gst_h266_parser_parse_dci() due to off-by-one array bound check
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-88829
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2531343
Bugzilla Description: busybox: busybox: HTTP request smuggling via pipelined requests in httpd reverse proxy
CVSS Score:
CVSSv3 Score: 7.2
Vector:
CWE: CWE-444
Affected Packages:
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-90954
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2533007
Bugzilla Description: busybox: busybox: dpkg-deb extraction-root escape via per-ar-member deferred symlink flush
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-59
Affected Packages:
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-86476
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2529510
Bugzilla Description: gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated GstVideoMeta plane extents in gst_video_frame_map_id and video_meta_deserialize
CVSS Score:
CVSSv3 Score: 8.4
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-94370
Severity: important
Released on: 14/10/2026
Advisory:
Bugzilla: 2552092
Bugzilla Description: qt-mcu: Qt: Memory corruption via improper string handling in Qt Quick Ultralite
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-1341
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-109968
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2462394
Bugzilla Description: clevis: clevis: PKCS#11 LUKS passphrase logged in plaintext to world-readable file
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-532
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-109969
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2550361
Bugzilla Description: clevis: clevis: no authentication on PKCS#11 AF_UNIX sockets allows key injection under permissive umask
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-306
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-109970
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2550362
Bugzilla Description: clevis: clevis: PKCS#11 token PIN written to world-readable file
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-538
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-109971
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2550363
Bugzilla Description: clevis: clevis: PKCS#11 token PIN exposed on command line via pkcs11-tool
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-214
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98386
Severity: low
Released on: 14/10/2026
Advisory:
Bugzilla: 2552186
Bugzilla Description: kernel: scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-474
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98401
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552187
Bugzilla Description: kernel: net: iptunnel: fix stale transport header during tunnel decapsulation
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98425
Severity: low
Released on: 14/10/2026
Advisory:
Bugzilla: 2552189
Bugzilla Description: kernel: wifi: mac80211: don't warn when an IBSS has no channel to scan
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-617
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98428
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552190
Bugzilla Description: kernel: ALSA: usb: 6fire: Avoid embedded URBs
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98431
Severity: low
Released on: 14/10/2026
Advisory:
Bugzilla: 2552191
Bugzilla Description: kernel: RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-833
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98407
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552193
Bugzilla Description: kernel: wifi: rsi: fix heap OOB write on key removal
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98414
Severity: low
Released on: 14/10/2026
Advisory:
Bugzilla: 2552194
Bugzilla Description: kernel: memcg: avoid charging the root memcg from obj_cgroup_charge_pages()
CVSS Score:
CVSSv3 Score: 2.3
Vector:
CWE: CWE-617
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98390
Severity: low
Released on: 14/10/2026
Advisory:
Bugzilla: 2552195
Bugzilla Description: kernel: x86/amd_node: Avoid divide by zero on virtualized systems
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-369
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98421
Severity: low
Released on: 14/10/2026
Advisory:
Bugzilla: 2552196
Bugzilla Description: kernel: wifi: mac80211: require a peer station for TDLS setup confirm
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-617
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98397
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552197
Bugzilla Description: kernel: platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98423
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552198
Bugzilla Description: kernel: wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98427
Severity: low
Released on: 14/10/2026
Advisory:
Bugzilla: 2552199
Bugzilla Description: kernel: net/sched: codel: bound the dropping loop per dequeue call
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98393
Severity: low
Released on: 14/10/2026
Advisory:
Bugzilla: 2552200
Bugzilla Description: kernel: net: ipv4: Fix UDP length overflow with PMTU discover and big MTU
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98420
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552201
Bugzilla Description: kernel: ksmbd: follow SMB2 session expiration semantics
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-826
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98395
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552202
Bugzilla Description: kernel: powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exit
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-617
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98429
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552203
Bugzilla Description: kernel: RDMA/efa: Keep EQ resources alive while IRQ is registered
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-821
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98430
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552204
Bugzilla Description: kernel: RDMA/efa: Keep admin queues alive while IRQ is registered
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-826
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98389
Severity: low
Released on: 14/10/2026
Advisory:
Bugzilla: 2552205
Bugzilla Description: kernel: drm/amdgpu: skip gfx switch_power_profile during GPU reset
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-617
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98413
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552206
Bugzilla Description: kernel: selinux: always fill AVC decision in avc_has_perm_noaudit()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98405
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552207
Bugzilla Description: kernel: smb: client: fix missing iov bounds check in parse_posix_sids()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98410
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552208
Bugzilla Description: kernel: watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-459
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98403
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552209
Bugzilla Description: kernel: s390/boot: Avoid IPL parameter append past command line
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98416
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552210
Bugzilla Description: kernel: dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()
CVSS Score:
CVSSv3 Score: 4.1
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98406
Severity: low
Released on: 14/10/2026
Advisory:
Bugzilla: 2552212
Bugzilla Description: kernel: wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-617
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98408
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552213
Bugzilla Description: kernel: watchdog: rzv2h: Avoid division by zero
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-369
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98412
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552214
Bugzilla Description: kernel: power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()
CVSS Score:
CVSSv3 Score: 4.1
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98400
Severity: low
Released on: 14/10/2026
Advisory:
Bugzilla: 2552215
Bugzilla Description: kernel: s390/ipl: Fix NULL deref in kdump without re-IPL parm block
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98388
Severity: low
Released on: 14/10/2026
Advisory:
Bugzilla: 2552216
Bugzilla Description: kernel: exec: do_close_on_exec() before taking exec_update_lock
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-833
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98394
Severity: low
Released on: 14/10/2026
Advisory:
Bugzilla: 2552217
Bugzilla Description: kernel: af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98398
Severity: low
Released on: 14/10/2026
Advisory:
Bugzilla: 2552218
Bugzilla Description: kernel: locking/lockdep: Invalidate stale class_cache entries for zapped classes
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98387
Severity: low
Released on: 14/10/2026
Advisory:
Bugzilla: 2552219
Bugzilla Description: kernel: s390/crypto: Fix skcipher_walk return code handling in aes_s390
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98396
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552220
Bugzilla Description: kernel: powerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-270
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98411
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552221
Bugzilla Description: kernel: power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()
CVSS Score:
CVSSv3 Score: 4.1
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98399
Severity: low
Released on: 14/10/2026
Advisory:
Bugzilla: 2552222
Bugzilla Description: kernel: s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98426
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552223
Bugzilla Description: kernel: wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98392
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552224
Bugzilla Description: kernel: Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-193
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98409
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552225
Bugzilla Description: kernel: watchdog: rtd119x: Avoid division by zero
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-369
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98391
Severity: low
Released on: 14/10/2026
Advisory:
Bugzilla: 2552226
Bugzilla Description: kernel: drm/xe: Guard page-fault worker with runtime PM check
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-617
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98402
Severity: low
Released on: 14/10/2026
Advisory:
Bugzilla: 2552227
Bugzilla Description: kernel: net: icmp: avoid invalid transport header access in icmp_send tracepoint
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-824
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98404
Severity: low
Released on: 14/10/2026
Advisory:
Bugzilla: 2552228
Bugzilla Description: kernel: drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98424
Severity: low
Released on: 14/10/2026
Advisory:
Bugzilla: 2552229
Bugzilla Description: kernel: wifi: cfg80211: undo netns switch if renaming the wiphy fails
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-252
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98422
Severity: low
Released on: 14/10/2026
Advisory:
Bugzilla: 2552230
Bugzilla Description: kernel: wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-617
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98415
Severity: moderate
Released on: 14/10/2026
Advisory:
Bugzilla: 2552231
Bugzilla Description: kernel: soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-92817
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2552046
Bugzilla Description: Ignition: Ignition: Arbitrary code execution via improper session privilege validation
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-266
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-110142
Severity: moderate
Released on: 13/10/2026
Advisory:
Bugzilla: 2551892
Bugzilla Description: chromium-browser: Use after free in FileSystem
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110167
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551903
Bugzilla Description: chromium-browser: Use after free in Media
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110155
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551978
Bugzilla Description: chromium-browser: Buffer overflow in PDFium
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-122
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110171
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551980
Bugzilla Description: chromium-browser: Use after free in Media
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110138
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551881
Bugzilla Description: chromium-browser: Use after free in ShapeDetection
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110147
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551920
Bugzilla Description: chromium-browser: Use after free in PDF
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110157
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551926
Bugzilla Description: chromium-browser: Use after free in SVG
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110154
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551994
Bugzilla Description: chromium-browser: Use after free in Canvas
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110141
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551901
Bugzilla Description: chromium-browser: Observable discrepancy in Media
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-203
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110163
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551931
Bugzilla Description: chromium-browser: Use after free in DOM
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110164
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551967
Bugzilla Description: chromium-browser: Use after free in DOM
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110172
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551969
Bugzilla Description: chromium-browser: Use after free in Media
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110169
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551907
Bugzilla Description: chromium-browser: Use after free in V8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110168
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551970
Bugzilla Description: chromium-browser: Use after free in V8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110139
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551979
Bugzilla Description: chromium-browser: Use after free in Media
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110166
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551918
Bugzilla Description: chromium-browser: Buffer overflow in Animation
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-122
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110153
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551923
Bugzilla Description: chromium-browser: Use after free in Media
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110145
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551925
Bugzilla Description: chromium-browser: Use after free in Passwords
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110159
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551932
Bugzilla Description: chromium-browser: Incorrect authorization in Updater
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-863
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110158
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551943
Bugzilla Description: chromium-browser: Use after free in Passwords
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110144
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551955
Bugzilla Description: chromium-browser: Incorrect authorization in Mojo
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-863
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110150
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551902
Bugzilla Description: chromium-browser: Privilege elevation in Installer
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-250
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110146
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551953
Bugzilla Description: chromium-browser: Information leak in Passwords
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-200
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110137
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551977
Bugzilla Description: chromium-browser: Use after free in WebRTC
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110156
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551982
Bugzilla Description: chromium-browser: Incorrect reference resolution in Extensions
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-706
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110140
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551986
Bugzilla Description: chromium-browser: Type confusion in V8
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-843
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110162
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551884
Bugzilla Description: chromium-browser: Use after free in Desktop
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110143
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551930
Bugzilla Description: chromium-browser: Use of uninitialized variable in ThirdParty lmza_sdk
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-457
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110160
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551935
Bugzilla Description: chromium-browser: Missing authorization in ReadingMode
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-862
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110170
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551941
Bugzilla Description: chromium-browser: Use after free in Bindings
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110148
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551879
Bugzilla Description: chromium-browser: Use after free in SVG
CVSS Score:
CVSSv3 Score: 9.6
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110161
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551894
Bugzilla Description: chromium-browser: Use after free in Network
CVSS Score:
CVSSv3 Score: 9.6
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110165
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551927
Bugzilla Description: chromium-browser: Use after free in Core
CVSS Score:
CVSSv3 Score: 9.6
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110151
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551989
Bugzilla Description: chromium-browser: Use after free in Media
CVSS Score:
CVSSv3 Score: 9.6
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110149
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551917
Bugzilla Description: chromium-browser: Use after free in Browser
CVSS Score:
CVSSv3 Score: 9.6
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-110152
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551939
Bugzilla Description: chromium-browser: angle: Buffer overflow in ANGLE
CVSS Score:
CVSSv3 Score: 9.6
Vector:
CWE: CWE-122
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-110136
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551968
Bugzilla Description: chromium-browser: Use after free in PDF
CVSS Score:
CVSSv3 Score: 9.6
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-55601
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551789
Bugzilla Description: multitail: multitail: Arbitrary command execution via improper input escaping in execute-on-match feature
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE: CWE-78
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-102599
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551068
Bugzilla Description: engine.io: engine.io: Denial of Service via protocol revision mismatch during transport upgrade
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-248
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-86063
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2551595
Bugzilla Description: claude-code: Claude Code: arbitrary code execution via unverified commit hash during plugin installation
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-494
Affected Packages:
Package States: Red Hat OpenShift Dev Spaces,
Full Details
CVE document

CVE-2026-110220
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2550792
Bugzilla Description: github.com/kubeflow/hub: Kubeflow Model Registry: Privilege escalation via Server-Side Request Forgery in InferenceService annotation
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-918
Affected Packages:
Package States: Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-110249
Severity: moderate
Released on: 13/10/2026
Advisory:
Bugzilla: 2550754
Bugzilla Description: thunderbird: thunderbird: Denial of Service via excessive attributes in SOAP response
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-110247
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2550753
Bugzilla Description: thunderbird: thunderbird: Arbitrary code execution via integer overflow in libmime
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-33374
Severity: moderate
Released on: 13/10/2026
Advisory:
Bugzilla: 2550703
Bugzilla Description: grafana: grafana: Denial of Service via unbounded request body size in Prometheus rule conversion API
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Multicluster Global Hub,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-15577
Severity: moderate
Released on: 13/10/2026
Advisory:
Bugzilla: 2550704
Bugzilla Description: grafana: Grafana: Unauthorized configuration modification via status subresource
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-425
Affected Packages:
Package States: Multicluster Global Hub,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-95502
Severity: moderate
Released on: 13/10/2026
Advisory: RHSA-2026:76677,
Bugzilla: 2550709
Bugzilla Description: grafana: grafana: Denial of Service via oversized Git Sync responses
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-770
Affected Packages: grafana12-4-main-12.4.12-0.4.hum1,
Package States: Multicluster Global Hub,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-93294
Severity: moderate
Released on: 13/10/2026
Advisory:
Bugzilla: 2550715
Bugzilla Description: grafana: Grafana: Information disclosure via Azure Monitor resource proxy
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-918
Affected Packages:
Package States: Multicluster Global Hub,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-109828
Severity: moderate
Released on: 13/10/2026
Advisory:
Bugzilla: 2550711
Bugzilla Description: libsndfile: libsndfile: Information disclosure via uninitialized variable use in WAV parsing
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,
Full Details
CVE document

CVE-2026-58280
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla:
Bugzilla Description:
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-66822
Severity: moderate
Released on: 13/10/2026
Advisory:
Bugzilla:
Bugzilla Description:
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-201
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-69651
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla:
Bugzilla Description:
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-70159
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla:
Bugzilla Description:
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-70175
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla:
Bugzilla Description:
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-70179
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla:
Bugzilla Description:
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-70181
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla:
Bugzilla Description:
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-70183
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla:
Bugzilla Description:
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-863
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-70194
Severity: moderate
Released on: 13/10/2026
Advisory:
Bugzilla:
Bugzilla Description:
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE:
Affected Packages:
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-96957
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla:
Bugzilla Description:
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-347
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-102870
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2548777
Bugzilla Description: dotnet: dotnet10.0: ASP.NET Core Remote Code Execution Vulnerability
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-94
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-96222
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2548802
Bugzilla Description: dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerability
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-295
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-101899
Severity: moderate
Released on: 13/10/2026
Advisory: RHSA-2026:76430, RHSA-2026:76677, RHSA-2026:76448,
Bugzilla: 2550659
Bugzilla Description: axios: Axios: Information disclosure via improper CIDR proxy bypass handling
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-1025
Affected Packages: grafana12-4-main-12.4.12-0.4.hum1,grafana13-2-main-13.2.3-0.1.hum1,grafana13-1-main-13.1.7-0.1.hum1,
Package States:
Full Details
CVE document

CVE-2026-102832
Severity: moderate
Released on: 13/10/2026
Advisory:
Bugzilla: 2550634
Bugzilla Description: jupyterlab: JupyterLab: Improper trust assignment via active document switching
CVSS Score:
CVSSv3 Score: 4.2
Vector:
CWE: CWE-279
Affected Packages:
Package States: Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-102342
Severity: moderate
Released on: 13/10/2026
Advisory:
Bugzilla: 2550595
Bugzilla Description: ammonia: ammonia: Stored cross-site scripting via SVG animation elements
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-79
Affected Packages:
Package States: Ansible Automation Orchestrator 2026,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-105460
Severity: low
Released on: 13/10/2026
Advisory:
Bugzilla: 2545923
Bugzilla Description: bluez: bluez: stack-based out-of-bounds read in btmon via unvalidated num_keys in return_link_keys_evt()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-88838
Severity: moderate
Released on: 13/10/2026
Advisory:
Bugzilla: 2531352
Bugzilla Description: busybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictions
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-693
Affected Packages:
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-88834
Severity: low
Released on: 13/10/2026
Advisory:
Bugzilla: 2531348
Bugzilla Description: busybox: busybox: httpd user existence oracle in non-default shadow-disabled builds
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-203
Affected Packages:
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-88833
Severity: moderate
Released on: 13/10/2026
Advisory:
Bugzilla: 2531347
Bugzilla Description: busybox: busybox: udhcpc integer underflow in DHCP packet length calculation causes denial of service
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-191
Affected Packages:
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-109964
Severity: moderate
Released on: 13/10/2026
Advisory:
Bugzilla: 2550562
Bugzilla Description: ImageMagick: ImageMagick: Arbitrary code execution via crafted PICT image
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-124
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-109956
Severity: moderate
Released on: 13/10/2026
Advisory:
Bugzilla: 2550515
Bugzilla Description: nltk: nltk: Arbitrary file write via path traversal in WekaClassifier
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-22
Affected Packages:
Package States: Lightspeed Core,Lightspeed Core,Lightspeed Core,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,Red Hat Ansible Automation Platform 2,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-109955
Severity: moderate
Released on: 13/10/2026
Advisory:
Bugzilla: 2550544
Bugzilla Description: hono: hono: Security bypass via double path decoding
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-551
Affected Packages:
Package States: Migration Toolkit for Applications 8,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Enterprise Linux 10,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Dev Spaces,
Full Details
CVE document

CVE-2026-107832
Severity: low
Released on: 13/10/2026
Advisory:
Bugzilla: 2550519
Bugzilla Description: fastify: fastify: Header validation bypass via incomplete schema case normalization
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-178
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Dev Spaces,
Full Details
CVE document

CVE-2026-109740
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2550404
Bugzilla Description: firefox: firefox: Sandbox escape via incorrect boundary conditions in Win32 widget
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-653
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-109729
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2550420
Bugzilla Description: firefox: firefox: arbitrary code execution via use-after-free in JIT compiler
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-109156
Severity: moderate
Released on: 13/10/2026
Advisory:
Bugzilla: 2550349
Bugzilla Description: mlserver: MLServer: Arbitrary file write via path traversal in environment archive extraction
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-22
Affected Packages:
Package States: Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-109152
Severity: moderate
Released on: 13/10/2026
Advisory:
Bugzilla: 2550321
Bugzilla Description: scp: scp.py: Arbitrary file overwrite via path traversal
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-22
Affected Packages:
Package States: Confidential Compute Attestation,Migration Toolkit for Containers,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat OpenShift Container Platform 4,Red Hat OpenStack Platform 18.0,
Full Details
CVE document

CVE-2026-109854
Severity: low
Released on: 13/10/2026
Advisory:
Bugzilla: 2550285
Bugzilla Description: m17n-lib: Uninitialized stack read in ISO-2022 Compound Text UTF-8 decoding
CVSS Score:
CVSSv3 Score: 2.5
Vector:
CWE: CWE-457
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-110036
Severity: low
Released on: 13/10/2026
Advisory:
Bugzilla: 2474403
Bugzilla Description: device-mapper-persistent-data: device-mapper-persistent-data: Denial of Service via crafted block indices
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: CWE-190
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-109976
Severity: low
Released on: 13/10/2026
Advisory:
Bugzilla: 2550375
Bugzilla Description: clevis: clevis: integer underflow in PKCS#11 data socket handler crashes daemon on unbound client connection
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-95114
Severity: important
Released on: 13/10/2026
Advisory:
Bugzilla: 2550591
Bugzilla Description: libwebsockets: libwebsockets: Denial of Service via out-of-bounds read in LEJP parser
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: A-MQ Interconnect 1,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat Service Interconnect 2,
Full Details
CVE document

CVE-2026-103658
Severity: important
Released on: 12/10/2026
Advisory:
Bugzilla: 2550001
Bugzilla Description: aspell: aspell: Arbitrary code execution via crafted dictionary file
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-109561
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549958
Bugzilla Description: goose: goose: Authorization bypass via uncleared read-only tool annotations
CVSS Score:
CVSSv3 Score: 4.2
Vector:
CWE: CWE-270
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-109380
Severity: important
Released on: 12/10/2026
Advisory:
Bugzilla: 2549954
Bugzilla Description: modern-tar: modern-tar: Denial of Service via memory exhaustion from crafted archives
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 9,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-83535
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2526402
Bugzilla Description: openstack-network-exporter: Basic-auth uses plaintext password storage and non-constant-time comparison
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-208
Affected Packages:
Package States: Red Hat OpenStack Platform 18.0,
Full Details
CVE document

CVE-2026-83536
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2526401
Bugzilla Description: openstack-network-exporter: http.Server has no ReadHeaderTimeout / ReadTimeout (Slowloris)
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-400
Affected Packages:
Package States: Red Hat OpenStack Platform 18.0,
Full Details
CVE document

CVE-2026-103061
Severity: important
Released on: 12/10/2026
Advisory:
Bugzilla: 2549857
Bugzilla Description: gleam: gleam: Arbitrary directory deletion via path traversal in package metadata
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-22
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-85471
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2528221
Bugzilla Description: quay: quay: Webhook notification SSRF -- hostname-string blocklist trivially bypassable
CVSS Score:
CVSSv3 Score: 6.4
Vector:
CWE: CWE-918
Affected Packages:
Package States: mirror registry for Red Hat OpenShift,mirror registry for Red Hat OpenShift 2,Red Hat Quay 3,Red Hat Quay 3,
Full Details
CVE document

CVE-2026-87744
Severity: important
Released on: 12/10/2026
Advisory: RHSA-2026:83520, RHSA-2026:83082,
Bugzilla: 2530524
Bugzilla Description: io.quarkus:quarkus-hibernate-orm-rest-data-panache: Missing Authorization in Quarkus REST Data Panache via Dropped Security Annotations
CVSS Score:
CVSSv3 Score: 9.1
Vector:
CWE: CWE-425
Affected Packages: io.quarkus/quarkus-hibernate-orm-rest-data-panache:3.27.6.redhat-00004,io.quarkus/quarkus-hibernate-orm-rest-data-panache:3.33.4.redhat-00004,
Package States: Exploit Intelligence,
Full Details
CVE document

CVE-2026-109448
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549850
Bugzilla Description: postgresql-odbc: postgresql-odbc: Denial of Service via integer wraparound in SQLBindParameter
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-124
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-105274
Severity: low
Released on: 12/10/2026
Advisory:
Bugzilla: 2549845
Bugzilla Description: hex_core: hex: rebar3: hex_core: Denial of Service via uncontrolled decompression of repository responses
CVSS Score:
CVSSv3 Score: 3.1
Vector:
CWE: CWE-409
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-93879
Severity: moderate
Released on: 12/10/2026
Advisory: RHSA-2026:83520, RHSA-2026:83082,
Bugzilla: 2540892
Bugzilla Description: org.hibernate.validator:hibernate-validator: Hibernate Validator - unescaped {duplicates} message parameter is re-evaluated as Expression Language (unauthenticated DoS)
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-400
Affected Packages: org.hibernate.validator/hibernate-validator:9.0.1.Final-redhat-00002,org.hibernate.validator/hibernate-validator:9.1.3.Final-redhat-00002,
Package States: Exploit Intelligence,Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Apache Camel for Spring Boot 4,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Enterprise Linux 10,Red Hat Fuse 7,Red Hat Fuse 7,Red Hat Fuse 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat Satellite 6,Red Hat Single Sign-On 7,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-94451
Severity: moderate
Released on: 12/10/2026
Advisory: RHSA-2026:83520, RHSA-2026:83082,
Bugzilla: 2537516
Bugzilla Description: quarkus-hibernate-orm-rest-data-panache: quarkus-hibernate-orm-rest-data-panache: Information Disclosure and DoS via Unvalidated Sort Parameter in REST Data Panache
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-20
Affected Packages: io.quarkus/quarkus-hibernate-orm-rest-data-panache:3.27.6.redhat-00004,io.quarkus/quarkus-hibernate-orm-rest-data-panache:3.33.4.redhat-00004,
Package States: Exploit Intelligence,
Full Details
CVE document

CVE-2026-109351
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549767
Bugzilla Description: gix-pack: gix-pack: Denial of Service via crafted pack-header object count
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-109350
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549792
Bugzilla Description: gix-pack: gix-pack: Denial of Service via malformed packfile delta entries
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-1285
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-109349
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549829
Bugzilla Description: gix-pack: gix-pack: Denial of Service via crafted pack header
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-617
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-109344
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549751
Bugzilla Description: dompurify: DOMPurify: Cross-Site Scripting via unneutralized elements detached during in-place sanitization
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-79
Affected Packages:
Package States: Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-109345
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549763
Bugzilla Description: dompurify: DOMPurify: Cross-site scripting via unsanitized raw text in in-place mode
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-79
Affected Packages:
Package States: Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-109282
Severity: low
Released on: 12/10/2026
Advisory:
Bugzilla: 2549838
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via type confusion in INFO, JSON, and YAML encoders
CVSS Score:
CVSSv3 Score: 2.5
Vector:
CWE: CWE-843
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-109280
Severity: low
Released on: 12/10/2026
Advisory:
Bugzilla: 2549805
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via use-after-free in -fx option
CVSS Score:
CVSSv3 Score: 2.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-109281
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549839
Bugzilla Description: ImageMagick: ImageMagick: Information disclosure via crafted -fx expression
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-109279
Severity: low
Released on: 12/10/2026
Advisory:
Bugzilla: 2549725
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via race condition during security policy access
CVSS Score:
CVSSv3 Score: 2.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-109278
Severity: low
Released on: 12/10/2026
Advisory:
Bugzilla: 2549789
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via memory leak in wavelet-denoise operation
CVSS Score:
CVSSv3 Score: 2.9
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-109277
Severity: low
Released on: 12/10/2026
Advisory:
Bugzilla: 2549795
Bugzilla Description: ImageMagick: ImageMagick: Security policy bypass via -script operation
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: CWE-283
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-109276
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549809
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via temporary file leak in JNG decoder
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-459
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-109274
Severity: low
Released on: 12/10/2026
Advisory:
Bugzilla: 2549729
Bugzilla Description: ImageMagick: ImageMagick: Security policy bypass via TOCTOU symlink race condition
CVSS Score:
CVSSv3 Score: 2.5
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-109275
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549817
Bugzilla Description: ImageMagick: ImageMagick: Code injection via crafted MVG file
CVSS Score:
CVSSv3 Score: 4.8
Vector:
CWE: CWE-94
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-109273
Severity: low
Released on: 12/10/2026
Advisory:
Bugzilla: 2549735
Bugzilla Description: ImageMagick: ImageMagick: Information disclosure via crafted PostScript file
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-109271
Severity: low
Released on: 12/10/2026
Advisory:
Bugzilla: 2549765
Bugzilla Description: ImageMagick: ImageMagick: Denial of service via use-after-free in the WBINFO decoder
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-109272
Severity: low
Released on: 12/10/2026
Advisory:
Bugzilla: 2549797
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via crafted PostScript file
CVSS Score:
CVSSv3 Score: 2.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-109270
Severity: low
Released on: 12/10/2026
Advisory:
Bugzilla: 2549821
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via memory leak in the -process option
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-109269
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549736
Bugzilla Description: ImageMagick: ImageMagick: Information disclosure via crafted JPEG file
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-109268
Severity: low
Released on: 12/10/2026
Advisory:
Bugzilla: 2549834
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via use-after-free in PDF writer
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-109267
Severity: low
Released on: 12/10/2026
Advisory:
Bugzilla: 2549746
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via stack overflow in MSL decoder
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-109265
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549740
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via malformed XMP profile
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-109264
Severity: low
Released on: 12/10/2026
Advisory:
Bugzilla: 2549793
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via uncontrolled recursion in MVG decoder
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-109263
Severity: low
Released on: 12/10/2026
Advisory:
Bugzilla: 2549828
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via memory leak in YUV encoder
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-109262
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549824
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via memory leak in SVG encoder
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-109261
Severity: low
Released on: 12/10/2026
Advisory:
Bugzilla: 2549841
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via memory leak in GIF encoder
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-109260
Severity: low
Released on: 12/10/2026
Advisory:
Bugzilla: 2549818
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via memory leak in PNG encoder
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-109259
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549773
Bugzilla Description: ImageMagick: ImageMagick: Information disclosure via crafted TGA image
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-109258
Severity: low
Released on: 12/10/2026
Advisory:
Bugzilla: 2549734
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via invalid memory free in fx operation
CVSS Score:
CVSSv3 Score: 2.5
Vector:
CWE: CWE-763
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-109257
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549766
Bugzilla Description: freerdp: freerdp: Denial of Service via double-free in NSCodec
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-1341
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-109256
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549835
Bugzilla Description: freerdp: FreeRDP: Denial of Service via heap buffer overflow during clipboard image conversion
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-109255
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549722
Bugzilla Description: freerdp: freerdp: Arbitrary code execution via integer truncation in license stream validation
CVSS Score:
CVSSv3 Score: 6.8
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-109254
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549730
Bugzilla Description: freerdp: freerdp: Denial of Service via use-after-free during audio channel disconnect
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-109253
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549807
Bugzilla Description: freerdp: freerdp: Denial of Service via out-of-bounds read in RDPEAR
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-109252
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549762
Bugzilla Description: freerdp: freerdp: Denial of Service via truncated authentication data
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-109251
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549777
Bugzilla Description: freerdp: FreeRDP: Denial of Service via invalid video geometry coordinates
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-109250
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549830
Bugzilla Description: freerdp: FreeRDP: arbitrary code execution via heap buffer overflow during smartcard key enumeration
CVSS Score:
CVSSv3 Score: 6.6
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-109248
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549771
Bugzilla Description: freerdp: freerdp: Denial of Service via heap out-of-bounds read in clipboard handling
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-109249
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549791
Bugzilla Description: freerdp: FreeRDP: Denial of Service via crafted Remote Assistance file
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-109247
Severity: low
Released on: 12/10/2026
Advisory:
Bugzilla: 2549779
Bugzilla Description: freerdp: freerdp: Information disclosure via clipboard path traversal
CVSS Score:
CVSSv3 Score: 3.1
Vector:
CWE: CWE-22
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-109246
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549822
Bugzilla Description: freerdp: freerdp: Denial of Service via divide-by-zero error in shadow server
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-369
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-109245
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549811
Bugzilla Description: freerdp: freerdp: Information disclosure via improper TLS certificate validation
CVSS Score:
CVSSv3 Score: 6.8
Vector:
CWE: CWE-295
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-109244
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549788
Bugzilla Description: freerdp: freerdp: Information disclosure via insecure file permissions in winpr-makecert
CVSS Score:
CVSSv3 Score: 6.6
Vector:
CWE: CWE-276
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-109242
Severity: important
Released on: 12/10/2026
Advisory:
Bugzilla: 2549790
Bugzilla Description: freerdp: FreeRDP: Denial of Service via uninitialized progressive tile handling
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-109243
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549810
Bugzilla Description: freerdp: freerdp: Information disclosure via insecure private key permissions
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-378
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-109240
Severity: low
Released on: 12/10/2026
Advisory:
Bugzilla: 2549780
Bugzilla Description: freerdp: freerdp: Denial of Service via unvalidated buffer size in USB redirection
CVSS Score:
CVSSv3 Score: 3.1
Vector:
CWE: CWE-617
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-109241
Severity: low
Released on: 12/10/2026
Advisory:
Bugzilla: 2549816
Bugzilla Description: freerdp: freerdp: Denial of Service via NULL pointer dereference in video redirection channel
CVSS Score:
CVSSv3 Score: 3.1
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-75888
Severity: important
Released on: 12/10/2026
Advisory:
Bugzilla: 2517888
Bugzilla Description: openshift/console: openshift/console: Authenticated SSRF via Helm chart URL fetch
CVSS Score:
CVSSv3 Score: 7.7
Vector:
CWE: CWE-918
Affected Packages:
Package States: Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-105668
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549707
Bugzilla Description: hex: hex: Release cooldown protection bypass via retired package releases
CVSS Score:
CVSSv3 Score: 6.8
Vector:
CWE: CWE-807
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-105280
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549705
Bugzilla Description: hex: hex: Integrity check bypass via standard output package fetch
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-354
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-103503
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549700
Bugzilla Description: hex: hex: Host impersonation via improper CA certificate store validation
CVSS Score:
CVSSv3 Score: 6.8
Vector:
CWE: CWE-295
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-105081
Severity: low
Released on: 12/10/2026
Advisory:
Bugzilla: 2549626
Bugzilla Description: ImageMagick: ImageMagick: Security policy bypass via symbolic link
CVSS Score:
CVSSv3 Score: 3.6
Vector:
CWE: CWE-59
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-107203
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2547470
Bugzilla Description: foreman: domain and subnet interface API skips host search filters
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-863
Affected Packages:
Package States: Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-107193
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2547437
Bugzilla Description: foreman: API filter lookup ignores a search-limited filter permission
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-639
Affected Packages:
Package States: Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-98385
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549480
Bugzilla Description: kernel: sched/cache: Decouple sched_cache_group from mm to fix UAF
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-109194
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2549645
Bugzilla Description: quay: Build trigger UUID IDOR in Quay API
CVSS Score:
CVSSv3 Score: 6.4
Vector:
CWE: CWE-639
Affected Packages:
Package States: Red Hat Quay 3,Red Hat Quay 3,
Full Details
CVE document

CVE-2026-109195
Severity: low
Released on: 12/10/2026
Advisory:
Bugzilla: 2549646
Bugzilla Description: quay: Repository auto-prune policy UUID IDOR in Quay API
CVSS Score:
CVSSv3 Score: 3.1
Vector:
CWE: CWE-639
Affected Packages:
Package States: Red Hat Quay 3,Red Hat Quay 3,
Full Details
CVE document

CVE-2026-109833
Severity: moderate
Released on: 12/10/2026
Advisory:
Bugzilla: 2550367
Bugzilla Description: gnome-remote-desktop: Heap buffer overflow in gnome-remote-desktop VNC TLS peek buffer handling allows remote denial of service
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-121
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-108976
Severity: important
Released on: 11/10/2026
Advisory:
Bugzilla: 2549383
Bugzilla Description: emacs: zero-click local command execution via TRAMP
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-184
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-108859
Severity: important
Released on: 11/10/2026
Advisory:
Bugzilla: 2549285
Bugzilla Description: github.com/mark3labs/mcp-go: mcp-go: Denial of Service via unbounded HTTP request body buffering
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Connectivity Link 1,Red Hat Connectivity Link 1,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift distributed tracing 3,Red Hat OpenShift distributed tracing 3,
Full Details
CVE document

CVE-2026-108858
Severity: moderate
Released on: 11/10/2026
Advisory:
Bugzilla: 2549296
Bugzilla Description: lorax: lorax: Information disclosure via API token logging
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-538
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-108749
Severity: low
Released on: 11/10/2026
Advisory:
Bugzilla: 2549241
Bugzilla Description: docling-serve: docling-serve: Information disclosure via missing authentication on memory endpoints
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-306
Affected Packages:
Package States: Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-108575
Severity: moderate
Released on: 11/10/2026
Advisory:
Bugzilla: 2549217
Bugzilla Description: litellm: LiteLLM: Improper authorization via api_key parameter manipulation
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-639
Affected Packages:
Package States: Lightspeed Core,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-108574
Severity: moderate
Released on: 11/10/2026
Advisory:
Bugzilla: 2550492
Bugzilla Description: litellm: litellm: Authorization bypass via session identifier manipulation
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-639
Affected Packages:
Package States: Lightspeed Core,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-108573
Severity: moderate
Released on: 11/10/2026
Advisory:
Bugzilla: 2549216
Bugzilla Description: assimp: assimp: Denial of Service via out-of-bounds read in PLY file handler
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-108693
Severity: moderate
Released on: 11/10/2026
Advisory:
Bugzilla: 2549171
Bugzilla Description: ImageMagick: ImageMagick: Arbitrary code execution via insecure search path
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-427
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-108597
Severity: moderate
Released on: 10/10/2026
Advisory:
Bugzilla: 2552059
Bugzilla Description: cohere: cohere: Arbitrary file overwrite via path traversal in archive extraction
CVSS Score:
CVSSv3 Score: 4.8
Vector:
CWE: CWE-22
Affected Packages:
Package States: Lightspeed Core,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-17025
Severity: moderate
Released on: 10/10/2026
Advisory:
Bugzilla: 2548949
Bugzilla Description: graphene: graphene: Stored Cross-Site Scripting via profile fields
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-79
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 9,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-109082
Severity: moderate
Released on: 09/10/2026
Advisory:
Bugzilla: 2549478
Bugzilla Description: keycloak-services: keycloak-services: CIBA confidential-only contract not enforced for public clients
CVSS Score:
CVSSv3 Score: 6.8
Vector:
CWE: CWE-287
Affected Packages:
Package States: Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-107823
Severity: important
Released on: 09/10/2026
Advisory: RHSA-2026:83108,
Bugzilla: 2548750
Bugzilla Description: mariadb: mariadb: Privilege escalation via unescaped newlines in view parser
CVSS Score:
CVSSv3 Score: 7.2
Vector:
CWE: CWE-93
Affected Packages: mariadb10-11-main-10.11.18-4.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenStack Platform 13 (Queens),
Full Details
CVE document

CVE-2026-107822
Severity: moderate
Released on: 09/10/2026
Advisory: RHSA-2026:83108,
Bugzilla: 2548738
Bugzilla Description: mariadb: MariaDB: Privilege escalation via ACL cache key collision
CVSS Score:
CVSSv3 Score: 6.4
Vector:
CWE: CWE-694
Affected Packages: mariadb10-11-main-10.11.18-4.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenStack Platform 13 (Queens),
Full Details
CVE document

CVE-2026-107821
Severity: moderate
Released on: 09/10/2026
Advisory: RHSA-2026:83108,
Bugzilla: 2548734
Bugzilla Description: mariadb: mariadb: Arbitrary code execution via crafted FRM metadata
CVSS Score:
CVSSv3 Score: 6.7
Vector:
CWE: CWE-787
Affected Packages: mariadb10-11-main-10.11.18-4.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenStack Platform 13 (Queens),
Full Details
CVE document

CVE-2026-107819
Severity: moderate
Released on: 09/10/2026
Advisory:
Bugzilla: 2548735
Bugzilla Description: mariadb-connector-c: mariadb-connector-c: Information disclosure via improper TLS hostname verification
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-295
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-107818
Severity: important
Released on: 09/10/2026
Advisory: RHSA-2026:83108,
Bugzilla: 2548736
Bugzilla Description: mariadb: mariadb: Privilege escalation via environment variable injection during service restart
CVSS Score:
CVSSv3 Score: 8.4
Vector:
CWE: CWE-15
Affected Packages: mariadb10-11-main-10.11.18-4.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenStack Platform 13 (Queens),
Full Details
CVE document

CVE-2026-107817
Severity: moderate
Released on: 09/10/2026
Advisory: RHSA-2026:83108,
Bugzilla: 2548737
Bugzilla Description: mariadb: mariadb: Denial of Service via invalid binary JSON in mysql_json plugin
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-125
Affected Packages: mariadb10-11-main-10.11.18-4.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenStack Platform 13 (Queens),
Full Details
CVE document

CVE-2026-107816
Severity: moderate
Released on: 09/10/2026
Advisory: RHSA-2026:83108,
Bugzilla: 2548739
Bugzilla Description: mariadb: mariadb: Information disclosure via embedded null bytes in query cache plugin
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-125
Affected Packages: mariadb10-11-main-10.11.18-4.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenStack Platform 13 (Queens),
Full Details
CVE document

CVE-2026-107815
Severity: important
Released on: 09/10/2026
Advisory: RHSA-2026:83108,
Bugzilla: 2548718
Bugzilla Description: mariadb: mariadb: Arbitrary code execution via CONNECT engine out-of-bounds write
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-787
Affected Packages: mariadb10-11-main-10.11.18-4.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenStack Platform 13 (Queens),
Full Details
CVE document

CVE-2026-107814
Severity: important
Released on: 09/10/2026
Advisory: RHSA-2026:83108,
Bugzilla: 2548712
Bugzilla Description: mariadb: mariadb: Arbitrary code execution via insecure service account home directory
CVSS Score:
CVSSv3 Score: 8.4
Vector:
CWE: CWE-427
Affected Packages: mariadb10-11-main-10.11.18-4.1.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenStack Platform 13 (Queens),
Full Details
CVE document

CVE-2026-108119
Severity: moderate
Released on: 09/10/2026
Advisory: RHSA-2026:81391,
Bugzilla: 2548611
Bugzilla Description: busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses CVE-2026-26158 fix
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-59
Affected Packages: busybox-main-1.37.0-9.4.hum1,
Package States: Red Hat Enterprise Linux 6,
Full Details
CVE document

CVE-2026-102554
Severity: important
Released on: 09/10/2026
Advisory:
Bugzilla: 2548685
Bugzilla Description: com.google.guava/guava: Google Guava: Denial of Service via unthrottled memory allocation during deserialization
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Exploit Intelligence,Exploit Intelligence,Migration Toolkit for Applications 8,Migration Toolkit for Applications 8,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AMQ Broker 7,Red Hat AMQ Clients,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apicurio Registry 3,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat build of OpenJDK Konflux Container Build,Red Hat build of OpenJDK Konflux Container Build,Red Hat build of Quarkus,Red Hat Ceph Storage 7,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Fuse 7,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat JBoss Web Server 7,Red Hat Offline Knowledge Portal,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenStack Platform 16.2,Red Hat Satellite 6,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-95702
Severity: important
Released on: 09/10/2026
Advisory:
Bugzilla: 2548662
Bugzilla Description: gvisor.dev/gvisor: gVisor: Arbitrary code execution via use-after-free in VFS
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-108106
Severity: important
Released on: 09/10/2026
Advisory:
Bugzilla: 2548629
Bugzilla Description: org.xerial.snappy/snappy-java: snappy-java: Denial of Service via unbounded memory allocation during decompression
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apicurio Registry 3,Red Hat build of Debezium 3,Red Hat build of Quarkus,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Fuse 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Offline Knowledge Portal,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-108104
Severity: moderate
Released on: 09/10/2026
Advisory:
Bugzilla: 2548628
Bugzilla Description: org.xerial.snappy/snappy-java: snappy-java: information disclosure via double release of pooled buffers
CVSS Score:
CVSSv3 Score: 4.8
Vector:
CWE: CWE-1341
Affected Packages:
Package States: Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apicurio Registry 3,Red Hat build of Debezium 3,Red Hat build of Quarkus,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Fuse 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Offline Knowledge Portal,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-108063
Severity: moderate
Released on: 09/10/2026
Advisory:
Bugzilla:
Bugzilla Description:
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-108039
Severity: important
Released on: 09/10/2026
Advisory:
Bugzilla: 2548457
Bugzilla Description: org.apache.cxf/cxf-core: Apache CXF: Denial of Service via unrestricted XML parsing
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Apache Camel for Spring Boot 4,Red Hat Fuse 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat JBoss Web Server 5,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-107937
Severity: important
Released on: 09/10/2026
Advisory:
Bugzilla: 2548463
Bugzilla Description: org.apache.cxf/cxf-core: Apache CXF: Denial of Service via large multipart attachment headers
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Apache Camel for Spring Boot 4,Red Hat Fuse 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat JBoss Web Server 5,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-97791
Severity: important
Released on: 09/10/2026
Advisory:
Bugzilla: 2548455
Bugzilla Description: org.apache.cxf/cxf-rt-ws-security: Apache CXF: Authentication bypass via shared token validation state
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-488
Affected Packages:
Package States: Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Apache Camel for Spring Boot 4,Red Hat Fuse 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-97468
Severity: important
Released on: 09/10/2026
Advisory:
Bugzilla: 2548464
Bugzilla Description: org.apache.cxf/cxf-rt-ws-security: org.apache.cxf/cxf-services-sts-core: Apache CXF: Authentication bypass via hash collision in token cache
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-328
Affected Packages:
Package States: Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Apache Camel for Spring Boot 4,Red Hat Fuse 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-78384
Severity: important
Released on: 09/10/2026
Advisory:
Bugzilla: 2548458
Bugzilla Description: org.apache.cxf/cxf-core: Apache CXF: Denial of Service via uncontrolled data decompression
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-409
Affected Packages:
Package States: Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat build of Apache Camel for Spring Boot 4,Red Hat Fuse 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat JBoss Web Server 5,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-71884
Severity: moderate
Released on: 09/10/2026
Advisory:
Bugzilla: 2548449
Bugzilla Description: org.bouncycastle:bcprov-lts8on: bouncycastle: Information disclosure via keystream reuse in native CTR cipher
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-323
Affected Packages:
Package States: Red Hat build of Apicurio Registry 3,
Full Details
CVE document

CVE-2026-104635
Severity: moderate
Released on: 09/10/2026
Advisory:
Bugzilla: 2548406
Bugzilla Description: protobuf: protobuf: Denial of Service via deeply nested JSON input
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-770
Affected Packages:
Package States: OpenShift Service Mesh 3,Red Hat AMQ Clients,Red Hat Ansible Automation Platform 2,Red Hat Ceph Storage 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenStack Platform 16.2,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Update Infrastructure 4 for Cloud Providers,
Full Details
CVE document

CVE-2026-107655
Severity: moderate
Released on: 09/10/2026
Advisory: RHSA-2026:80679,
Bugzilla: 2548399
Bugzilla Description: cups: NULL pointer dereference via embedded job ticket comments allows remote denial of service
CVSS Score:
CVSSv3 Score: 4.0
Vector:
CWE: CWE-476
Affected Packages: cups-main-2.4.19-4.4.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-101028
Severity: moderate
Released on: 09/10/2026
Advisory:
Bugzilla: 2548379
Bugzilla Description: ash: Ash: Information disclosure via missing authorization checks in aggregate queries
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-1230
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-107890
Severity: low
Released on: 09/10/2026
Advisory: RHSA-2026:81410,
Bugzilla: 2548358
Bugzilla Description: cups: cups: Denial of Service via repeated IPP group tags
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: CWE-476
Affected Packages: cups-main-2.4.19-4.5.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-107888
Severity: moderate
Released on: 09/10/2026
Advisory: RHSA-2026:81410,
Bugzilla: 2548360
Bugzilla Description: cups: CUPS: Denial of Service via deleted temporary printer
CVSS Score:
CVSSv3 Score: 5.1
Vector:
CWE: CWE-476
Affected Packages: cups-main-2.4.19-4.5.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-107886
Severity: low
Released on: 09/10/2026
Advisory: RHSA-2026:81410,
Bugzilla: 2548356
Bugzilla Description: cups: cups: Denial of Service via double-free in printer class management
CVSS Score:
CVSSv3 Score: 2.3
Vector:
CWE: CWE-1341
Affected Packages: cups-main-2.4.19-4.5.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-107885
Severity: low
Released on: 09/10/2026
Advisory: RHSA-2026:81410,
Bugzilla: 2548357
Bugzilla Description: cups: cups: Denial of Service via improper job submission timeout handling
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: CWE-772
Affected Packages: cups-main-2.4.19-4.5.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-98375
Severity: moderate
Released on: 09/10/2026
Advisory:
Bugzilla: 2548385
Bugzilla Description: kernel: xen/netfront: drop RX packets with a short Ethernet header
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98377
Severity: moderate
Released on: 09/10/2026
Advisory:
Bugzilla: 2548389
Bugzilla Description: kernel: vlan: require the MAC header to be present in __vlan_insert_inner_tag()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98379
Severity: moderate
Released on: 09/10/2026
Advisory:
Bugzilla: 2548390
Bugzilla Description: kernel: netfilter: ip6t_rpfilter: reject routes without inet6_dev
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98380
Severity: moderate
Released on: 09/10/2026
Advisory:
Bugzilla: 2548391
Bugzilla Description: kernel: net/sched: reject IDR error pointers when deleting actions
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-253
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98381
Severity: moderate
Released on: 09/10/2026
Advisory:
Bugzilla: 2548393
Bugzilla Description: kernel: veth: manage XDP program pointers during channel resize
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98384
Severity: moderate
Released on: 09/10/2026
Advisory:
Bugzilla: 2548394
Bugzilla Description: kernel: bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98383
Severity: moderate
Released on: 09/10/2026
Advisory:
Bugzilla: 2548395
Bugzilla Description: kernel: bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98382
Severity: moderate
Released on: 09/10/2026
Advisory:
Bugzilla: 2548396
Bugzilla Description: kernel: bpf: Reject dev-bound-only programs on other devices
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98376
Severity: moderate
Released on: 09/10/2026
Advisory:
Bugzilla: 2548397
Bugzilla Description: kernel: bpf: Use array_map_meta_equal for percpu array inner map replacement
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98378
Severity: important
Released on: 09/10/2026
Advisory:
Bugzilla: 2548398
Bugzilla Description: kernel: bpf: Skip unsettled links in link iterator
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-97032
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548337
Bugzilla Description: net/http: net/http/internal/http2: golang: golang.org/x/net/http2: net/http: Denial of Service via concurrent HPACK encoder modification
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-366
Affected Packages:
Package States: OpenShift Developer Tools and Services,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift on AWS,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Service Interconnect 1,Red Hat Service Interconnect 2,streams for Apache Kafka 2,streams for Apache Kafka 3,
Full Details
CVE document

CVE-2026-78667
Severity: important
Released on: 08/10/2026
Advisory:
Bugzilla: 2548334
Bugzilla Description: net/http: golang: golang: Denial of Service via crafted HTTP Range headers
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: OpenShift Developer Tools and Services,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift on AWS,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Service Interconnect 1,Red Hat Service Interconnect 2,streams for Apache Kafka 2,streams for Apache Kafka 3,
Full Details
CVE document

CVE-2026-94439
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548335
Bugzilla Description: net/http: golang: net/http: HTTP request smuggling via improper handling of HTTP/1 CONNECT responses
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-444
Affected Packages:
Package States: OpenShift Developer Tools and Services,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift on AWS,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Service Interconnect 1,Red Hat Service Interconnect 2,streams for Apache Kafka 2,streams for Apache Kafka 3,
Full Details
CVE document

CVE-2026-78669
Severity: important
Released on: 08/10/2026
Advisory:
Bugzilla: 2548344
Bugzilla Description: net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Builds for Red Hat OpenShift,Builds for Red Hat OpenShift,OpenShift Developer Tools and Services,OpenShift Pipelines,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Developer Hub,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Workspaces Operator,Red Hat OpenShift on AWS,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Service Interconnect 1,Red Hat Service Interconnect 2,Red Hat Trusted Artifact Signer,streams for Apache Kafka 2,streams for Apache Kafka 3,
Full Details
CVE document

CVE-2026-78663
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548345
Bugzilla Description: net/http: net/http/internal/http2: golang: golang.org/x/net/http2: golang: flow control limit bypass via double refund in HTTP/2 server
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-770
Affected Packages:
Package States: OpenShift Developer Tools and Services,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift on AWS,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Service Interconnect 1,Red Hat Service Interconnect 2,streams for Apache Kafka 2,streams for Apache Kafka 3,
Full Details
CVE document

CVE-2026-97031
Severity: important
Released on: 08/10/2026
Advisory:
Bugzilla: 2548336
Bugzilla Description: crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: OpenShift Developer Tools and Services,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift on AWS,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Service Interconnect 1,Red Hat Service Interconnect 2,streams for Apache Kafka 2,streams for Apache Kafka 3,
Full Details
CVE document

CVE-2026-56866
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548347
Bugzilla Description: net/http: golang: golang: Cross-user response poisoning via desynchronized HTTP CONNECT connections
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-444
Affected Packages:
Package States: OpenShift Developer Tools and Services,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift on AWS,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Service Interconnect 1,Red Hat Service Interconnect 2,streams for Apache Kafka 2,streams for Apache Kafka 3,
Full Details
CVE document

CVE-2026-56857
Severity: low
Released on: 08/10/2026
Advisory:
Bugzilla: 2548348
Bugzilla Description: os: golang: golang: Directory traversal via Windows junction handling
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: CWE-59
Affected Packages:
Package States: OpenShift Developer Tools and Services,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 3,Red Hat AMQ Clients,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift on AWS,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Service Interconnect 2,Red Hat Service Interconnect 2,streams for Apache Kafka 2,streams for Apache Kafka 3,
Full Details
CVE document

CVE-2026-94447
Severity: moderate
Released on: 08/10/2026
Advisory: RHSA-2026:79720, RHSA-2026:79715,
Bugzilla: 2548342
Bugzilla Description: cmd/go: golang: cmd/go: Toolchain checksum verification bypass via crafted project configuration
CVSS Score:
CVSSv3 Score: 6.7
Vector:
CWE: CWE-354
Affected Packages: golang1-27-main-1.27.2-0.1.hum1,golang1-26-main-1.26.9-0.1.hum1,
Package States: Exploit Intelligence,Migration Toolkit for Applications 8,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Dev Spaces,
Full Details
CVE document

CVE-2026-94444
Severity: moderate
Released on: 08/10/2026
Advisory: RHSA-2026:79720, RHSA-2026:79715,
Bugzilla: 2548343
Bugzilla Description: cmd/go: golang: cmd/go: arbitrary code execution via untrusted module proxy
CVSS Score:
CVSSv3 Score: 6.7
Vector:
CWE: CWE-354
Affected Packages: golang1-27-main-1.27.2-0.1.hum1,golang1-26-main-1.26.9-0.1.hum1,
Package States: Exploit Intelligence,Migration Toolkit for Applications 8,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Dev Spaces,
Full Details
CVE document

CVE-2026-94448
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548346
Bugzilla Description: html/template: golang: golang: cross-site scripting via consecutive expressions in JavaScript template literals
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-79
Affected Packages:
Package States: OpenShift Developer Tools and Services,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ceph Storage 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift on AWS,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Service Interconnect 1,Red Hat Service Interconnect 2,
Full Details
CVE document

CVE-2026-107728
Severity: important
Released on: 08/10/2026
Advisory:
Bugzilla: 2548311
Bugzilla Description: strawberry-graphql: strawberry-graphql: Authorization bypass via improper permission evaluation
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-253
Affected Packages:
Package States: Exploit Intelligence,
Full Details
CVE document

CVE-2026-107727
Severity: low
Released on: 08/10/2026
Advisory:
Bugzilla: 2548316
Bugzilla Description: strawberry-graphql: strawberry-graphql: Denial of service via uncleared completed subscriptions
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-772
Affected Packages:
Package States: Exploit Intelligence,
Full Details
CVE document

CVE-2026-107726
Severity: important
Released on: 08/10/2026
Advisory:
Bugzilla: 2548303
Bugzilla Description: com.hazelcast/hazelcast: Hazelcast: Arbitrary member memory access by low-privileged client
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 9,Red Hat Fuse 7,
Full Details
CVE document

CVE-2026-107725
Severity: important
Released on: 08/10/2026
Advisory:
Bugzilla: 2548304
Bugzilla Description: com.hazelcast/hazelcast: Hazelcast: arbitrary code execution via missing authorization checks in IMap Predicates API
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-749
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 9,Red Hat Fuse 7,
Full Details
CVE document

CVE-2026-107718
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2552052
Bugzilla Description: http-server: http-server: Open redirect via unencoded route parameters
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-601
Affected Packages:
Package States: Node HealthCheck Operator,Node HealthCheck Operator,Node HealthCheck Operator,Node HealthCheck Operator,Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Apache Camel for Spring Boot 4,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-107717
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2550680
Bugzilla Description: banks: banks: Chat role injection via untrusted template input
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-501
Affected Packages:
Package States: Exploit Intelligence,Lightspeed Core,Lightspeed Core,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,Red Hat Ansible Automation Platform 2,
Full Details
CVE document

CVE-2026-107716
Severity: important
Released on: 08/10/2026
Advisory:
Bugzilla: 2548687
Bugzilla Description: banks: Banks: Information disclosure via symbolic link traversal
CVSS Score:
CVSSv3 Score: 7.3
Vector:
CWE: CWE-59
Affected Packages:
Package States: Exploit Intelligence,Lightspeed Core,Lightspeed Core,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,Red Hat Ansible Automation Platform 2,
Full Details
CVE document

CVE-2026-107715
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548277
Bugzilla Description: mechanize: mechanize: Information disclosure via cross-domain HTTP redirect
CVSS Score:
CVSSv3 Score: 6.8
Vector:
CWE: CWE-212
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,
Full Details
CVE document

CVE-2026-107714
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548285
Bugzilla Description: mechanize: mechanize: Information disclosure via improper redirect scheme and port handling
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-346
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,
Full Details
CVE document

CVE-2026-107399
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548278
Bugzilla Description: mechanize: mechanize: Information disclosure via cross-origin meta refresh
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-201
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,
Full Details
CVE document

CVE-2026-107778
Severity: moderate
Released on: 08/10/2026
Advisory: RHSA-2026:80481,
Bugzilla: 2548269
Bugzilla Description: krb5: krb5: Denial of Service via crafted forwarded credentials
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-476
Affected Packages: krb5-main-1.22.2-10.3.hum1,
Package States: Migration Toolkit for Virtualization,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenStack Platform 18.0,
Full Details
CVE document

CVE-2026-107708
Severity: moderate
Released on: 08/10/2026
Advisory: RHSA-2026:80481,
Bugzilla: 2548262
Bugzilla Description: krb5: krb5: Denial of Service via malformed PAC in S4U2Proxy requests
CVSS Score:
CVSSv3 Score: 4.9
Vector:
CWE: CWE-476
Affected Packages: krb5-main-1.22.2-10.3.hum1,
Package States: Migration Toolkit for Virtualization,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenStack Platform 18.0,
Full Details
CVE document

CVE-2026-106435
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548264
Bugzilla Description: pymongo: pymongo: Denial of Service via out-of-bounds read during malformed BSON decoding
CVSS Score:
CVSSv3 Score: 5.1
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,
Full Details
CVE document

CVE-2026-107705
Severity: moderate
Released on: 08/10/2026
Advisory: RHSA-2026:80579, RHSA-2026:80172,
Bugzilla: 2548222
Bugzilla Description: poppler: poppler: Denial of Service via stack-based buffer overflow in PDF decryption
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-120
Affected Packages: poppler-main-26.08.0-1.3.hum1,poppler-main-26.08.0-1.4.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-97147
Severity: important
Released on: 08/10/2026
Advisory:
Bugzilla: 2544709
Bugzilla Description: openstack-mistral: mistral: Cross-project resource tampering via missing ownership check in action definition and environment update paths
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-862
Affected Packages:
Package States: Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 16.2,
Full Details
CVE document

CVE-2026-93861
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2544710
Bugzilla Description: openstack-mistral: mistral: workflow membership sub-delegation allows unauthorized access grant to private workflows
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-862
Affected Packages:
Package States: Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 16.2,
Full Details
CVE document

CVE-2026-93858
Severity: important
Released on: 08/10/2026
Advisory:
Bugzilla: 2544711
Bugzilla Description: openstack-mistral: mistral: OS command injection via unvalidated proxy_command in std.ssh_proxied action
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-78
Affected Packages:
Package States: Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,
Full Details
CVE document

CVE-2026-93860
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2544712
Bugzilla Description: openstack-mistral: mistral: Unauthenticated-project user can trigger global maintenance mode causing cross-tenant denial of service
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-862
Affected Packages:
Package States: Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 16.2,
Full Details
CVE document

CVE-2026-106436
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548217
Bugzilla Description: php-pecl-mongodb: php-pecl-mongodb: Denial of Service via oversized BSON encoding
CVSS Score:
CVSSv3 Score: 4.8
Vector:
CWE: CWE-252
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106432
Severity: low
Released on: 08/10/2026
Advisory:
Bugzilla: 2548221
Bugzilla Description: php-pecl-mongodb: php-pecl-mongodb: Denial of Service via heap buffer overflow in BSON encoder
CVSS Score:
CVSSv3 Score: 3.6
Vector:
CWE: CWE-787
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-107386
Severity: moderate
Released on: 08/10/2026
Advisory: RHSA-2026:80217,
Bugzilla: 2548205
Bugzilla Description: github.com/rabbitmq/amqp091-go: amqp091-go: Denial of Service via excessive memory allocation during frame parsing
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-770
Affected Packages: opentelemetry-collector-contrib-main-0.162.0-0.2.hum1,
Package States: Cryostat 4,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Custom Metric Autoscaler operator for Red Hat Openshift,Multicluster Global Hub,OpenShift Serverless,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat OpenStack Platform 18.0,Red Hat Quay 3,Red Hat Quay 3,
Full Details
CVE document

CVE-2026-107697
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548121
Bugzilla Description: ffmpeg: ffmpeg: Security restriction bypass via crafted HLS master playlist
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-641
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-107698
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548122
Bugzilla Description: ffmpeg: ffmpeg: Server-Side Request Forgery via unvalidated RTSP redirects
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-918
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-107696
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548115
Bugzilla Description: ffmpeg: ffmpeg: Denial of Service via unlimited RTSP redirects
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-107695
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548114
Bugzilla Description: ffmpeg: ffmpeg: Denial of Service via crafted HLS playlist
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-107295
Severity: important
Released on: 08/10/2026
Advisory:
Bugzilla: 2548063
Bugzilla Description: pydantic-ai-slim: pydantic-ai-slim: Unauthorized tool execution via missing Content-Type validation
CVSS Score:
CVSSv3 Score: 7.6
Vector:
CWE: CWE-346
Affected Packages:
Package States: Lightspeed Core,
Full Details
CVE document

CVE-2026-107294
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548064
Bugzilla Description: pydantic-ai: pydantic-ai: Denial of Service via unbounded HTTP response buffering
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Lightspeed Core,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,
Full Details
CVE document

CVE-2026-107293
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548060
Bugzilla Description: pydantic-ai: pydantic-ai: Information disclosure via OpenTelemetry retry prompt logging
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-201
Affected Packages:
Package States: Lightspeed Core,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,
Full Details
CVE document

CVE-2026-107292
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548049
Bugzilla Description: pydantic-ai: pydantic-ai: Unauthorized tool execution via DNS rebinding
CVSS Score:
CVSSv3 Score: 6.4
Vector:
CWE: CWE-346
Affected Packages:
Package States: Lightspeed Core,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,
Full Details
CVE document

CVE-2026-107291
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548051
Bugzilla Description: pydantic-ai: pydantic-ai-slim: Pydantic AI: Information disclosure via incomplete telemetry content redaction
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-212
Affected Packages:
Package States: Lightspeed Core,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,
Full Details
CVE document

CVE-2026-61801
Severity: moderate
Released on: 08/10/2026
Advisory: RHSA-2026:76430, RHSA-2026:76677, RHSA-2026:76448,
Bugzilla: 2548048
Bugzilla Description: github.com/moby/sys/user: moby/sys/user: Denial of Service via crafted user or group database files
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-770
Affected Packages: grafana12-4-main-12.4.12-0.4.hum1,grafana13-2-main-13.2.3-0.1.hum1,grafana13-1-main-13.1.7-0.1.hum1,
Package States: Assisted Installer for Red Hat OpenShift Container Platform 2,Assisted Installer for Red Hat OpenShift Container Platform 2,Assisted Installer for Red Hat OpenShift Container Platform 2,Assisted Installer for Red Hat OpenShift Container Platform 2,Compliance Operator,Confidential Compute Attestation,Confidential Compute Attestation,Confidential Compute Attestation,Confidential Compute Attestation,Confidential Compute Attestation,Confidential Compute Attestation,Confidential Compute Attestation,Cryostat 4,Custom Metric Autoscaler operator for Red Hat Openshift,DPU kit for NVIDIA,Exploit Intelligence,Exploit Intelligence,Kernel Module Management Operator for Red Hat Openshift,Kernel Module Management Operator for Red Hat Openshift,Kernel Module Management Operator for Red Hat Openshift,Kernel Module Management Operator for Red Hat Openshift,Lightspeed Core,Lightspeed Core,Logging Subsystem for Red Hat OpenShift,Logical Volume Manager Storage,Machine Deletion Remediation Operator,Machine Deletion Remediation Operator,Migration Toolkit for Containers,Migration Toolkit for Virtualization,Multiarch Tuning Operator,Multiarch Tuning Operator,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Global Hub,Multicluster Global Hub,Multicluster Global Hub,Multicluster Global Hub,Node HealthCheck Operator,OpenShift API for Data Protection,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 3,OpenShift Source-to-Image (S2I),OpenShift Source-to-Image (S2I),Pen Drive Powered by Red Hat Lightspeed,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Build of Kueue,Red Hat Build of Podman Desktop,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift for Windows Containers,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Quay 3,Red Hat Quay 3,Red Hat Quay 3,Red Hat Trusted Artifact Signer,Red Hat Web Terminal,
Full Details
CVE document

CVE-2026-107290
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548054
Bugzilla Description: pydantic-ai: pydantic-ai: Denial of Service via inefficient web response parsing
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-1322
Affected Packages:
Package States: Lightspeed Core,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,
Full Details
CVE document

CVE-2026-107889
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548355
Bugzilla Description: keycloak-services: keycloak-services: Stored XSS on login page via kcSanitize bypass
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-79
Affected Packages:
Package States: Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-107678
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548033
Bugzilla Description: ffmpeg: ffmpeg: Denial of Service via stack exhaustion from crafted MP4 files
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document