CVE-2026-104635
Severity: moderate
Released on: 09/10/2026
Advisory:
Bugzilla: 2548406
Bugzilla Description: protobuf: protobuf: Denial of Service via deeply nested JSON input
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-770
Affected Packages:
Package States: OpenShift Service Mesh 3,Red Hat AMQ Clients,Red Hat Ansible Automation Platform 2,Red Hat Ceph Storage 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenStack Platform 16.2,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Update Infrastructure 4 for Cloud Providers,
Full Details
CVE document

CVE-2026-107655
Severity: moderate
Released on: 09/10/2026
Advisory:
Bugzilla: 2548399
Bugzilla Description: cups: NULL pointer dereference via embedded job ticket comments allows remote denial of service
CVSS Score:
CVSSv3 Score: 4.0
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-97032
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548337
Bugzilla Description: net/http: net/http/internal/http2: golang: golang.org/x/net/http2: net/http: Denial of Service via concurrent HPACK encoder modification
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-366
Affected Packages:
Package States: OpenShift Developer Tools and Services,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift on AWS,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Service Interconnect 1,Red Hat Service Interconnect 2,streams for Apache Kafka 2,streams for Apache Kafka 3,
Full Details
CVE document

CVE-2026-78667
Severity: important
Released on: 08/10/2026
Advisory:
Bugzilla: 2548334
Bugzilla Description: net/http: golang: golang: Denial of Service via crafted HTTP Range headers
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: OpenShift Developer Tools and Services,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift on AWS,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Service Interconnect 1,Red Hat Service Interconnect 2,streams for Apache Kafka 2,streams for Apache Kafka 3,
Full Details
CVE document

CVE-2026-94439
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548335
Bugzilla Description: net/http: golang: net/http: HTTP request smuggling via improper handling of HTTP/1 CONNECT responses
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-444
Affected Packages:
Package States: OpenShift Developer Tools and Services,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift on AWS,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Service Interconnect 1,Red Hat Service Interconnect 2,streams for Apache Kafka 2,streams for Apache Kafka 3,
Full Details
CVE document

CVE-2026-78669
Severity: important
Released on: 08/10/2026
Advisory:
Bugzilla: 2548344
Bugzilla Description: net/http: net/http/internal/http2: golang: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: OpenShift Developer Tools and Services,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift on AWS,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Service Interconnect 1,Red Hat Service Interconnect 2,streams for Apache Kafka 2,streams for Apache Kafka 3,
Full Details
CVE document

CVE-2026-78663
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548345
Bugzilla Description: net/http: net/http/internal/http2: golang: golang.org/x/net/http2: golang: flow control limit bypass via double refund in HTTP/2 server
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-770
Affected Packages:
Package States: OpenShift Developer Tools and Services,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift on AWS,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Service Interconnect 1,Red Hat Service Interconnect 2,streams for Apache Kafka 2,streams for Apache Kafka 3,
Full Details
CVE document

CVE-2026-97031
Severity: important
Released on: 08/10/2026
Advisory:
Bugzilla: 2548336
Bugzilla Description: crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: OpenShift Developer Tools and Services,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift on AWS,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Service Interconnect 1,Red Hat Service Interconnect 2,streams for Apache Kafka 2,streams for Apache Kafka 3,
Full Details
CVE document

CVE-2026-56866
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548347
Bugzilla Description: net/http: golang: golang: Cross-user response poisoning via desynchronized HTTP CONNECT connections
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-444
Affected Packages:
Package States: OpenShift Developer Tools and Services,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift on AWS,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Service Interconnect 1,Red Hat Service Interconnect 2,streams for Apache Kafka 2,streams for Apache Kafka 3,
Full Details
CVE document

CVE-2026-56857
Severity: low
Released on: 08/10/2026
Advisory:
Bugzilla: 2548348
Bugzilla Description: os: golang: golang: Directory traversal via Windows junction handling
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: CWE-59
Affected Packages:
Package States: OpenShift Developer Tools and Services,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 3,Red Hat AMQ Clients,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift on AWS,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Service Interconnect 2,Red Hat Service Interconnect 2,streams for Apache Kafka 2,streams for Apache Kafka 3,
Full Details
CVE document

CVE-2026-94447
Severity: moderate
Released on: 08/10/2026
Advisory: RHSA-2026:79715,
Bugzilla: 2548342
Bugzilla Description: cmd/go: golang: cmd/go: Toolchain checksum verification bypass via crafted project configuration
CVSS Score:
CVSSv3 Score: 6.7
Vector:
CWE: CWE-354
Affected Packages: golang1-27-main-1.27.2-0.1.hum1,
Package States: Exploit Intelligence,Migration Toolkit for Applications 8,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Dev Spaces,
Full Details
CVE document

CVE-2026-94444
Severity: moderate
Released on: 08/10/2026
Advisory: RHSA-2026:79715,
Bugzilla: 2548343
Bugzilla Description: cmd/go: golang: cmd/go: arbitrary code execution via untrusted module proxy
CVSS Score:
CVSSv3 Score: 6.7
Vector:
CWE: CWE-354
Affected Packages: golang1-27-main-1.27.2-0.1.hum1,
Package States: Exploit Intelligence,Migration Toolkit for Applications 8,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Dev Spaces,
Full Details
CVE document

CVE-2026-94448
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548346
Bugzilla Description: html/template: golang: golang: cross-site scripting via consecutive expressions in JavaScript template literals
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-79
Affected Packages:
Package States: OpenShift Developer Tools and Services,OpenShift Pipelines,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ceph Storage 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift on AWS,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Service Interconnect 1,Red Hat Service Interconnect 2,
Full Details
CVE document

CVE-2026-107728
Severity: important
Released on: 08/10/2026
Advisory:
Bugzilla: 2548311
Bugzilla Description: strawberry-graphql: strawberry-graphql: Authorization bypass via improper permission evaluation
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-253
Affected Packages:
Package States: Exploit Intelligence,
Full Details
CVE document

CVE-2026-107727
Severity: low
Released on: 08/10/2026
Advisory:
Bugzilla: 2548316
Bugzilla Description: strawberry-graphql: strawberry-graphql: Denial of service via uncleared completed subscriptions
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-772
Affected Packages:
Package States: Exploit Intelligence,
Full Details
CVE document

CVE-2026-107726
Severity: important
Released on: 08/10/2026
Advisory:
Bugzilla: 2548303
Bugzilla Description: com.hazelcast/hazelcast: Hazelcast: Arbitrary member memory access by low-privileged client
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 9,Red Hat Fuse 7,
Full Details
CVE document

CVE-2026-107725
Severity: important
Released on: 08/10/2026
Advisory:
Bugzilla: 2548304
Bugzilla Description: com.hazelcast/hazelcast: Hazelcast: arbitrary code execution via missing authorization checks in IMap Predicates API
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-749
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 9,Red Hat Fuse 7,
Full Details
CVE document

CVE-2026-107715
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548277
Bugzilla Description: mechanize: mechanize: Information disclosure via cross-domain HTTP redirect
CVSS Score:
CVSSv3 Score: 6.8
Vector:
CWE: CWE-212
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,
Full Details
CVE document

CVE-2026-107714
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548285
Bugzilla Description: mechanize: mechanize: Information disclosure via improper redirect scheme and port handling
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-346
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,
Full Details
CVE document

CVE-2026-107399
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548278
Bugzilla Description: mechanize: mechanize: Information disclosure via cross-origin meta refresh
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-201
Affected Packages:
Package States: Red Hat 3scale API Management Platform 2,
Full Details
CVE document

CVE-2026-107778
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548269
Bugzilla Description: krb5: krb5: Denial of Service via crafted forwarded credentials
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Migration Toolkit for Virtualization,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenStack Platform 18.0,
Full Details
CVE document

CVE-2026-107708
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548262
Bugzilla Description: krb5: krb5: Denial of Service via malformed PAC in S4U2Proxy requests
CVSS Score:
CVSSv3 Score: 4.9
Vector:
CWE: CWE-476
Affected Packages:
Package States: Migration Toolkit for Virtualization,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenStack Platform 18.0,
Full Details
CVE document

CVE-2026-106435
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548264
Bugzilla Description: pymongo: pymongo: Denial of Service via out-of-bounds read during malformed BSON decoding
CVSS Score:
CVSSv3 Score: 5.1
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,
Full Details
CVE document

CVE-2026-107705
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548222
Bugzilla Description: poppler: poppler: Denial of Service via stack-based buffer overflow in PDF decryption
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-120
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-97147
Severity: important
Released on: 08/10/2026
Advisory:
Bugzilla: 2544709
Bugzilla Description: openstack-mistral: mistral: Cross-project resource tampering via missing ownership check in action definition and environment update paths
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-862
Affected Packages:
Package States: Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 16.2,
Full Details
CVE document

CVE-2026-93861
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2544710
Bugzilla Description: openstack-mistral: mistral: workflow membership sub-delegation allows unauthorized access grant to private workflows
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-862
Affected Packages:
Package States: Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 16.2,
Full Details
CVE document

CVE-2026-93858
Severity: important
Released on: 08/10/2026
Advisory:
Bugzilla: 2544711
Bugzilla Description: openstack-mistral: mistral: OS command injection via unvalidated proxy_command in std.ssh_proxied action
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-78
Affected Packages:
Package States: Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,
Full Details
CVE document

CVE-2026-93860
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2544712
Bugzilla Description: openstack-mistral: mistral: Unauthenticated-project user can trigger global maintenance mode causing cross-tenant denial of service
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-862
Affected Packages:
Package States: Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 16.2,
Full Details
CVE document

CVE-2026-106436
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548217
Bugzilla Description: php-pecl-mongodb: php-pecl-mongodb: Denial of Service via oversized BSON encoding
CVSS Score:
CVSSv3 Score: 4.8
Vector:
CWE: CWE-252
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106432
Severity: low
Released on: 08/10/2026
Advisory:
Bugzilla: 2548221
Bugzilla Description: php-pecl-mongodb: php-pecl-mongodb: Denial of Service via heap buffer overflow in BSON encoder
CVSS Score:
CVSSv3 Score: 3.6
Vector:
CWE: CWE-787
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-107697
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548121
Bugzilla Description: ffmpeg: ffmpeg: Security restriction bypass via crafted HLS master playlist
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-641
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-107698
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548122
Bugzilla Description: ffmpeg: ffmpeg: Server-Side Request Forgery via unvalidated RTSP redirects
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-918
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-107696
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548115
Bugzilla Description: ffmpeg: ffmpeg: Denial of Service via unlimited RTSP redirects
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-107695
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548114
Bugzilla Description: ffmpeg: ffmpeg: Denial of Service via crafted HLS playlist
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-107295
Severity: important
Released on: 08/10/2026
Advisory:
Bugzilla: 2548063
Bugzilla Description: pydantic-ai-slim: pydantic-ai-slim: Unauthorized tool execution via missing Content-Type validation
CVSS Score:
CVSSv3 Score: 7.6
Vector:
CWE: CWE-346
Affected Packages:
Package States: Lightspeed Core,
Full Details
CVE document

CVE-2026-107294
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548064
Bugzilla Description: pydantic-ai: pydantic-ai: Denial of Service via unbounded HTTP response buffering
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Lightspeed Core,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,
Full Details
CVE document

CVE-2026-107293
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548060
Bugzilla Description: pydantic-ai: pydantic-ai: Information disclosure via OpenTelemetry retry prompt logging
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-201
Affected Packages:
Package States: Lightspeed Core,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,
Full Details
CVE document

CVE-2026-107292
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548049
Bugzilla Description: pydantic-ai: pydantic-ai: Unauthorized tool execution via DNS rebinding
CVSS Score:
CVSSv3 Score: 6.4
Vector:
CWE: CWE-346
Affected Packages:
Package States: Lightspeed Core,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,
Full Details
CVE document

CVE-2026-107291
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548051
Bugzilla Description: pydantic-ai: pydantic-ai-slim: Pydantic AI: Information disclosure via incomplete telemetry content redaction
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-212
Affected Packages:
Package States: Lightspeed Core,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,
Full Details
CVE document

CVE-2026-61801
Severity: moderate
Released on: 08/10/2026
Advisory: RHSA-2026:76430, RHSA-2026:76677, RHSA-2026:76448,
Bugzilla: 2548048
Bugzilla Description: github.com/moby/sys/user: moby/sys/user: Denial of Service via crafted user or group database files
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-770
Affected Packages: grafana12-4-main-12.4.12-0.4.hum1,grafana13-2-main-13.2.3-0.1.hum1,grafana13-1-main-13.1.7-0.1.hum1,
Package States: Assisted Installer for Red Hat OpenShift Container Platform 2,Assisted Installer for Red Hat OpenShift Container Platform 2,Assisted Installer for Red Hat OpenShift Container Platform 2,Assisted Installer for Red Hat OpenShift Container Platform 2,Compliance Operator,Confidential Compute Attestation,Confidential Compute Attestation,Confidential Compute Attestation,Confidential Compute Attestation,Confidential Compute Attestation,Confidential Compute Attestation,Confidential Compute Attestation,Cryostat 4,Custom Metric Autoscaler operator for Red Hat Openshift,DPU kit for NVIDIA,Exploit Intelligence,Exploit Intelligence,Kernel Module Management Operator for Red Hat Openshift,Kernel Module Management Operator for Red Hat Openshift,Kernel Module Management Operator for Red Hat Openshift,Kernel Module Management Operator for Red Hat Openshift,Lightspeed Core,Lightspeed Core,Logging Subsystem for Red Hat OpenShift,Logical Volume Manager Storage,Machine Deletion Remediation Operator,Machine Deletion Remediation Operator,Migration Toolkit for Containers,Migration Toolkit for Virtualization,Multiarch Tuning Operator,Multiarch Tuning Operator,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Engine for Kubernetes,Multicluster Global Hub,Multicluster Global Hub,Multicluster Global Hub,Multicluster Global Hub,Node HealthCheck Operator,OpenShift API for Data Protection,OpenShift Developer Tools and Services,OpenShift Developer Tools and Services,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Lightspeed,OpenShift Serverless,OpenShift Serverless,OpenShift Service Mesh 3,OpenShift Source-to-Image (S2I),OpenShift Source-to-Image (S2I),Pen Drive Powered by Red Hat Lightspeed,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Advanced Cluster Security 4,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Build of Kueue,Red Hat Build of Podman Desktop,Red Hat Ceph Storage 7,Red Hat Ceph Storage 8,Red Hat Ceph Storage 9,Red Hat Ceph Storage 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Certification Program for Red Hat Enterprise Linux 9,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift for Windows Containers,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenShift Virtualization 4,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Quay 3,Red Hat Quay 3,Red Hat Quay 3,Red Hat Trusted Artifact Signer,Red Hat Web Terminal,
Full Details
CVE document

CVE-2026-107290
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548054
Bugzilla Description: pydantic-ai: pydantic-ai: Denial of Service via inefficient web response parsing
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-1322
Affected Packages:
Package States: Lightspeed Core,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,
Full Details
CVE document

CVE-2026-107889
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548355
Bugzilla Description: keycloak-services: keycloak-services: Stored XSS on login page via kcSanitize bypass
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-79
Affected Packages:
Package States: Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-107678
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548033
Bugzilla Description: ffmpeg: ffmpeg: Denial of Service via stack exhaustion from crafted MP4 files
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-107677
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548036
Bugzilla Description: ffmpeg: ffmpeg: Denial of Service via empty SegmentTemplate in DASH demuxer
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-107676
Severity: low
Released on: 08/10/2026
Advisory:
Bugzilla: 2548035
Bugzilla Description: ffmpeg: ffmpeg: Information disclosure via uninitialized memory in HDR metadata processing
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-107675
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548038
Bugzilla Description: ffmpeg: ffmpeg: Information disclosure via missing SFTP host key verification
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-322
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-107660
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548040
Bugzilla Description: ffmpeg: ffmpeg: Traffic interception via improper TLS certificate validation
CVSS Score:
CVSSv3 Score: 4.8
Vector:
CWE: CWE-295
Affected Packages:
Package States: Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-19585
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548039
Bugzilla Description: github.com/hashicorp/go-getter: go-getter: arbitrary file write via path traversal in S3 and GCS directory downloads
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-22
Affected Packages:
Package States: Exploit Intelligence,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Trusted Artifact Signer,
Full Details
CVE document

CVE-2026-107289
Severity: low
Released on: 08/10/2026
Advisory:
Bugzilla: 2548032
Bugzilla Description: pydantic-ai: pydantic-ai: Information disclosure via cloud metadata blocklist bypass
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-918
Affected Packages:
Package States: Lightspeed Core,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,
Full Details
CVE document

CVE-2026-107288
Severity: low
Released on: 08/10/2026
Advisory:
Bugzilla: 2548034
Bugzilla Description: pydantic-ai: pydantic-ai: Domain blocklist bypass via unnormalized hostname comparison
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-918
Affected Packages:
Package States: Lightspeed Core,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,
Full Details
CVE document

CVE-2026-107287
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548031
Bugzilla Description: pydantic-ai: pydantic-ai: Denial of Service via resource exhaustion during HTML conversion
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Lightspeed Core,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,
Full Details
CVE document

CVE-2026-107286
Severity: important
Released on: 08/10/2026
Advisory:
Bugzilla: 2548010
Bugzilla Description: pydantic-ai: pydantic-ai: Denial of Service via unreleased concurrency slots in streaming requests
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-772
Affected Packages:
Package States: Lightspeed Core,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,
Full Details
CVE document

CVE-2026-105827
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2547969
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via uncontrolled recursion in CALS decoder
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-105825
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2547974
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via crafted XMP profile
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-617
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-105826
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2547995
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via MAT decoder policy bypass
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-409
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-105823
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2547976
Bugzilla Description: ImageMagick: ImageMagick: Security policy bypass via CUT encoder
CVSS Score:
CVSSv3 Score: 4.0
Vector:
CWE: CWE-749
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-105824
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2547987
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via crafted SVG file in RSVG decoder
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-105404
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2547982
Bugzilla Description: ImageMagick: ImageMagick: Code injection via PostScript coders
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-94
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-105405
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2547988
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via crafted MVG image
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-763
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-105403
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2547973
Bugzilla Description: ImageMagick: ImageMagick: Security policy bypass via crafted image
CVSS Score:
CVSSv3 Score: 6.2
Vector:
CWE: CWE-184
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-105402
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2547977
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via crafted XMP profile
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-369
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-105400
Severity: low
Released on: 08/10/2026
Advisory:
Bugzilla: 2547983
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via crafted magick script
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-105401
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2547994
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via heap buffer overflow in distributed pixel cache server
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-105399
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2547981
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via missing limit check in MVG decoder
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-606
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-105398
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2547971
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via heap buffer overflow in GetVirtualPixels
CVSS Score:
CVSSv3 Score: 5.1
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-93017
Severity: important
Released on: 08/10/2026
Advisory:
Bugzilla: 2515741
Bugzilla Description: insights-operator: gather ServiceAccount has cluster-wide Secret read plus nodes/proxy and cluster-reader
CVSS Score:
CVSSv3 Score: 7.7
Vector:
CWE: CWE-269
Affected Packages:
Package States: Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-44038
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2547943
Bugzilla Description: dcmtk: dcmtk: Denial of Service via out-of-bounds read in JPEG decoder
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-125
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-44037
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2547949
Bugzilla Description: dcmtk: dcmtk: Denial of Service via deeply nested DICOM JSON document
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-770
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-44036
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2547947
Bugzilla Description: dcmtk: dcmtk: Denial of Service via uncontrolled recursion during XML parsing
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-770
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-44035
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2547948
Bugzilla Description: dcmtk: dcmtk: Denial of Service via uncontrolled recursion in DICOMDIR processing
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-770
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-44034
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2547950
Bugzilla Description: dcmtk: dcmtk: Information disclosure via crafted RLE DICOM file
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-125
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-44033
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2547945
Bugzilla Description: dcmtk: dcmtk: Denial of Service via deeply nested XML elements
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-770
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-107570
Severity: low
Released on: 08/10/2026
Advisory:
Bugzilla: 2547911
Bugzilla Description: mutt: mutt: Memory corruption via crafted Content-Type header in email template
CVSS Score:
CVSSv3 Score: 2.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-107565
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2547930
Bugzilla Description: luksmeta: Incomplete gap-boundary and overlap checks in LUKS1 metadata allocator allow data corruption
CVSS Score:
CVSSv3 Score: 5.1
Vector:
CWE: CWE-1284
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-107444
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2547765
Bugzilla Description: rubygem-katello: katello: katello: Katello Docker Tags repositories API cross-organization authorization bypass
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-639
Affected Packages:
Package States: Red Hat Hardened Images,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-107445
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2547766
Bugzilla Description: rubygem-katello: katello: katello: Katello Flatpak Remote Repositories API cross-organization authorization bypass
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-639
Affected Packages:
Package States: Red Hat Hardened Images,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-107651
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2547986
Bugzilla Description: eog: eog: arbitrary code execution via heap buffer overflow in PNG metadata reader
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-122
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-88647
Severity: important
Released on: 08/10/2026
Advisory:
Bugzilla: 2548057
Bugzilla Description: gnutls: gnutls: Information disclosure via hostname verification bypass
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-295
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-67693
Severity: moderate
Released on: 08/10/2026
Advisory:
Bugzilla: 2548190
Bugzilla Description: gnutls: gnutls: Information disclosure via contradictory Key Usage and Extended Key Usage extensions
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-295
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-88648
Severity: important
Released on: 08/10/2026
Advisory:
Bugzilla: 2548200
Bugzilla Description: gnutls: gnutls: Cross-domain certificate restriction bypass via incomplete X.509 validation
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-295
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-107315
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547744
Bugzilla Description: org.postgresql/postgresql: PostgreSQL JDBC Driver: Information disclosure via residual send buffer padding
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat AMQ Broker 7,Red Hat build of Apicurio Registry 3,Red Hat build of Debezium 3,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat build of Quarkus,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Fuse 7,Red Hat Hardened Images,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenStack Platform 13 (Queens),Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-107314
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547743
Bugzilla Description: org.postgresql/postgresql: PostgreSQL JDBC Driver: Information disclosure via requireAuth restriction bypass
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-319
Affected Packages:
Package States: Red Hat AMQ Broker 7,Red Hat build of Apicurio Registry 3,Red Hat build of Debezium 3,Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat build of Quarkus,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Fuse 7,Red Hat Hardened Images,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenShift Dev Spaces,Red Hat OpenStack Platform 13 (Queens),Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-105816
Severity: important
Released on: 07/10/2026
Advisory:
Bugzilla: 2547734
Bugzilla Description: github.com/hashicorp/vault: Vault: Arbitrary code execution via plugin catalog entries in restored snapshots
CVSS Score:
CVSSv3 Score: 8.0
Vector:
CWE: CWE-22
Affected Packages:
Package States: Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,Red Hat Openshift Data Foundation 4,
Full Details
CVE document

CVE-2026-107279
Severity: important
Released on: 07/10/2026
Advisory:
Bugzilla: 2547726
Bugzilla Description: org.asynchttpclient/async-http-client: AsyncHttpClient: Mutual authentication bypass via Digest auth-int negotiation
CVSS Score:
CVSSv3 Score: 8.2
Vector:
CWE: CWE-303
Affected Packages:
Package States: Red Hat Fuse 7,
Full Details
CVE document

CVE-2026-107232
Severity: important
Released on: 07/10/2026
Advisory:
Bugzilla: 2547723
Bugzilla Description: org.asynchttpclient/async-http-client: async-http-client: Information disclosure via transmission of credentials after failed proxy CONNECT
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-319
Affected Packages:
Package States: Red Hat Fuse 7,
Full Details
CVE document

CVE-2026-107231
Severity: important
Released on: 07/10/2026
Advisory:
Bugzilla: 2547724
Bugzilla Description: org.asynchttpclient/async-http-client: async-http-client: Credential exposure via authentication downgrade
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-303
Affected Packages:
Package States: Red Hat Fuse 7,
Full Details
CVE document

CVE-2026-107230
Severity: important
Released on: 07/10/2026
Advisory:
Bugzilla: 2547727
Bugzilla Description: org.asynchttpclient/async-http-client: async-http-client: Information disclosure via improper connection pool partitioning
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-488
Affected Packages:
Package States: Red Hat Fuse 7,
Full Details
CVE document

CVE-2026-107227
Severity: important
Released on: 07/10/2026
Advisory:
Bugzilla: 2547716
Bugzilla Description: org.asynchttpclient/async-http-client: AsyncHttpClient: Denial of Service via unbounded WebSocket decompression
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-409
Affected Packages:
Package States: Red Hat Fuse 7,
Full Details
CVE document

CVE-2026-107161
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2460420
Bugzilla Description: cyrus-sasl: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-122
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-92543
Severity: important
Released on: 07/10/2026
Advisory:
Bugzilla: 2547596
Bugzilla Description: github.com/moby/moby: Docker Engine: Certificate verification bypass via flawed registry DNS check
CVSS Score:
CVSSv3 Score: 7.4
Vector:
CWE: CWE-295
Affected Packages:
Package States: Multicluster Engine for Kubernetes,Multicluster Global Hub,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Ceph Storage 5,Red Hat Ceph Storage 7,Red Hat Ceph Storage 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-92542
Severity: important
Released on: 07/10/2026
Advisory:
Bugzilla: 2547588
Bugzilla Description: github.com/moby/moby: Moby: Unauthorized traffic injection via forged VXLAN datagrams
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-346
Affected Packages:
Package States: Multicluster Engine for Kubernetes,Multicluster Global Hub,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat Ceph Storage 5,Red Hat Ceph Storage 7,Red Hat Ceph Storage 9,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-107210
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547568
Bugzilla Description: ImageMagick: ImageMagick: Resource exhaustion via crafted MAT image
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-409
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-107209
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547559
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via crafted RSVG image
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-107208
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547558
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via crafted XMP profile
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-248
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-106580
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547556
Bugzilla Description: ImageMagick: ImageMagick: Information disclosure via missing security policy check in CUT encoder
CVSS Score:
CVSSv3 Score: 4.0
Vector:
CWE: CWE-213
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-106579
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547573
Bugzilla Description: ImageMagick: ImageMagick: Information disclosure via security policy bypass
CVSS Score:
CVSSv3 Score: 6.2
Vector:
CWE: CWE-552
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-106578
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547552
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via invalid memory free in MVG decoder
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-763
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-106577
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547534
Bugzilla Description: ImageMagick: ImageMagick: Code injection via unescaped values in PostScript coders
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-94
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-106576
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547533
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via crafted XMP profile
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-606
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-106575
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547553
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via unclosed file pointers in Magick scripts
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-106574
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547554
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via heap buffer overwrite in distributed pixel cache server
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-106573
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547538
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via missing limit check in MVG decoder
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-606
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-106572
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547544
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via crafted CALS image
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-106571
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547537
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via heap buffer overflow in GetVirtualPixels
CVSS Score:
CVSSv3 Score: 5.1
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-106570
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547542
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via connection exhaustion in distributed pixel cache
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-106569
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547549
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via crafted ASE image
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-106568
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547539
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via crafted XMP profile
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-106567
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547546
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via crafted PSD file
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-106566
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547555
Bugzilla Description: ImageMagick: ImageMagick: File overwrite via improper delegate symlink cleanup
CVSS Score:
CVSSv3 Score: 4.0
Vector:
CWE: CWE-59
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-106565
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547519
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via missing end-of-file check in bzip2 images
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-106564
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547517
Bugzilla Description: ImageMagick: ImageMagick: Denial of Service via crafted EXR image
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,
Full Details
CVE document

CVE-2026-106562
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547513
Bugzilla Description: plugin-search-backend: plugin-search-backend-module-elasticsearch: Backstage: Information disclosure via search permission filter bypass
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-201
Affected Packages:
Package States: Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-107604
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547941
Bugzilla Description: keycloak-services: keycloak-services: view-clients role allows retrieval of active client secrets via installation provider endpoints
CVSS Score:
CVSSv3 Score: 4.9
Vector:
CWE: CWE-200
Affected Packages:
Package States: Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-106561
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547515
Bugzilla Description: plugin-kubernetes-backend: Backstage plugin-kubernetes-backend: Information disclosure in Kubernetes resource queries
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-212
Affected Packages:
Package States: Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106556
Severity: important
Released on: 07/10/2026
Advisory:
Bugzilla: 2547504
Bugzilla Description: plugin-techdocs-node: plugin-techdocs-node: arbitrary command execution via configuration sanitization bypass
CVSS Score:
CVSSv3 Score: 7.7
Vector:
CWE: CWE-78
Affected Packages:
Package States: Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106510
Severity: important
Released on: 07/10/2026
Advisory:
Bugzilla: 2547473
Bugzilla Description: plugin-techdocs-node: plugin-techdocs-node: Arbitrary code execution via crafted mkdocs configuration
CVSS Score:
CVSSv3 Score: 7.7
Vector:
CWE: CWE-78
Affected Packages:
Package States: Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-77214
Severity: important
Released on: 07/10/2026
Advisory: RHSA-2026:77959,
Bugzilla: 2547476
Bugzilla Description: expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer
CVSS Score:
CVSSv3 Score: 8.2
Vector:
CWE: CWE-125
Affected Packages: expat-main-2.8.5-1.2.hum1,
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-107183
Severity: important
Released on: 07/10/2026
Advisory:
Bugzilla: 2547441
Bugzilla Description: llama.cpp: llama.cpp: Arbitrary code execution via crafted completion request
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-107174
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547419
Bugzilla Description: source-to-image: source-to-image: Security boundary bypass via absolute symbolic link extraction
CVSS Score:
CVSSv3 Score: 6.4
Vector:
CWE: CWE-61
Affected Packages:
Package States: OpenShift Serverless,OpenShift Serverless,OpenShift Serverless,OpenShift Source-to-Image (S2I),OpenShift Source-to-Image (S2I),Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat Web Terminal,
Full Details
CVE document

CVE-2026-41958
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547430
Bugzilla Description: visidata: visidata: Arbitrary file write via path traversal in RemoteZipFile extraction
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-22
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-42532
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547426
Bugzilla Description: visidata: visidata: Arbitrary file write via path traversal in EmailSheet
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-22
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-103435
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547427
Bugzilla Description: claude-code: claude-code: Arbitrary file write via TOCTOU race condition
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat OpenShift Dev Spaces,
Full Details
CVE document

CVE-2026-107623
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547957
Bugzilla Description: keycloak-services: keycloak-services: OIDC DCR read-modify-write silently disables offline token revocation
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-862
Affected Packages:
Package States: Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-107151
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547357
Bugzilla Description: rubygem-smart_proxy_dynflow: task update and done callbacks accept unauthenticated requests
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-306
Affected Packages:
Package States: Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-93521
Severity: important
Released on: 07/10/2026
Advisory:
Bugzilla: 2545164
Bugzilla Description: xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-88812
Severity: important
Released on: 07/10/2026
Advisory:
Bugzilla: 2545174
Bugzilla Description: xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-1341
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-93523
Severity: important
Released on: 07/10/2026
Advisory:
Bugzilla: 2545177
Bugzilla Description: xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-93522
Severity: important
Released on: 07/10/2026
Advisory:
Bugzilla: 2545178
Bugzilla Description: glamor: size tmp_bits buffer for source coordinate range in upload_boxes
CVSS Score:
Vector:
CWE:
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-93517
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2545246
Bugzilla Description: xorg-x11-server: GLX sanitization flaw
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-120
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-93518
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2545860
Bugzilla Description: xorg-x11-server: XKB ResizeKeyType Numeric Truncation
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-93519
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2545887
Bugzilla Description: xorg-x11-server: XFixes Pointer Barrier Event List Buffer Overflow
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-93520
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2545908
Bugzilla Description: xorg-x11-server: XKB ChangeKeycodeRange Heap Out-of-Bounds Write
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-93515
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2545922
Bugzilla Description: xorg-x11-server: Present Extension Cross-Window Notify Use-After-Free
CVSS Score:
CVSSv3 Score: 6.1
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-93524
Severity: low
Released on: 07/10/2026
Advisory:
Bugzilla: 2545945
Bugzilla Description: xorg-x11-server: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-93536
Severity: low
Released on: 07/10/2026
Advisory:
Bugzilla: 2545949
Bugzilla Description: xorg-x11-server: GestureBuildSprite Use-After-Free
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-107167
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547408
Bugzilla Description: m17n-lib: Heap use-after-free write in re_init_ic()
CVSS Score:
CVSSv3 Score: 6.2
Vector:
CWE: CWE-416
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-107168
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547409
Bugzilla Description: m17n-lib: Parser infinite loop on malformed UTF-8 in count_utf_8_chars()
CVSS Score:
CVSSv3 Score: 6.2
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-107169
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547410
Bugzilla Description: m17n-lib: NULL-pointer write in read_mtext_element() on malformed UTF-8
CVSS Score:
CVSSv3 Score: 6.2
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-107170
Severity: low
Released on: 07/10/2026
Advisory:
Bugzilla: 2547411
Bugzilla Description: m17n-lib: NULL dereference in minput_open_im() after failed m17n_init()
CVSS Score:
CVSSv3 Score: 2.9
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-103868
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2544601
Bugzilla Description: pulp-container: Registry credentials are reused across remotes in a worker
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-488
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Update Infrastructure 4 for Cloud Providers,Red Hat Update Infrastructure 4 for Cloud Providers,Red Hat Update Infrastructure 5,Red Hat Update Infrastructure 5,Red Hat Update Infrastructure 5,
Full Details
CVE document

CVE-2026-103869
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2544603
Bugzilla Description: pulp-ansible: Bearer tokens are reused across remotes in a worker
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-488
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Satellite 6,Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-103870
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2544606
Bugzilla Description: pulp-rpm: Distribution tree publish creates directories from .treeinfo ids
CVSS Score:
CVSSv3 Score: 5.0
Vector:
CWE: CWE-22
Affected Packages:
Package States: Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Update Infrastructure 4 for Cloud Providers,Red Hat Update Infrastructure 4 for Cloud Providers,Red Hat Update Infrastructure 5,Red Hat Update Infrastructure 5,Red Hat Update Infrastructure 5,
Full Details
CVE document

CVE-2026-103871
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2544611
Bugzilla Description: pulp_python: Simple index renders project names without HTML escaping
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-79
Affected Packages:
Package States: Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-106471
Severity: important
Released on: 07/10/2026
Advisory:
Bugzilla: 2547044
Bugzilla Description: candlepin: candlepin: broken object-level authorization via VerifyAuthorizationFilter multi-@Verify hasAccess latching
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-863
Affected Packages:
Package States: Red Hat Satellite 6,
Full Details
CVE document

CVE-2026-107176
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2523035
Bugzilla Description: cluster-samples-operator: Role reads ALL secrets in openshift-config, not just pull-secret
CVSS Score:
CVSSv3 Score: 6.8
Vector:
CWE: CWE-250
Affected Packages:
Package States: Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98373
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547432
Bugzilla Description: kernel: mm/hugetlb: preserve mremap address delta when skipping page tables
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-823
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98374
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547433
Bugzilla Description: kernel: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-106064
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547446
Bugzilla Description: GIMP: GIMP: heap buffer overflow in GIF export on oversized image dimensions
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-119
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-106065
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547456
Bugzilla Description: GIMP: GIMP: heap buffer overflow in PCX export on oversized image dimensions
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-119
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-106066
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547459
Bugzilla Description: GIMP: GIMP: heap buffer overflow in raw data export on oversized image dimensions
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-119
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-106067
Severity: moderate
Released on: 07/10/2026
Advisory:
Bugzilla: 2547461
Bugzilla Description: GIMP: GIMP: heap buffer overflow in Hot color filter on oversized image
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-119
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-106509
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2547235
Bugzilla Description: plugin-techdocs-node: Backstage plugin-techdocs-node: Arbitrary code execution via improper MkDocs configuration validation
CVSS Score:
CVSSv3 Score: 7.7
Vector:
CWE: CWE-94
Affected Packages:
Package States: Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106506
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547221
Bugzilla Description: plugin-scaffolder-backend: plugin-scaffolder-backend: Information disclosure via improper task list ordering
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-205
Affected Packages:
Package States: Red Hat Developer Hub,Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106505
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547230
Bugzilla Description: plugin-techdocs-node: @backstage/plugin-techdocs-node: Backstage plugin-techdocs-node: Arbitrary code execution via MkDocs configuration sanitizer bypass
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-94
Affected Packages:
Package States: Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106504
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547225
Bugzilla Description: plugin-scaffolder-backend: plugin-scaffolder-backend: Sensitive information disclosure via task logs
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-538
Affected Packages:
Package States: Red Hat Developer Hub,Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106503
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2547234
Bugzilla Description: plugin-scaffolder-backend: plugin-scaffolder-backend: Authorization bypass via scaffolder action inputs
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-807
Affected Packages:
Package States: Red Hat Developer Hub,Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106502
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547223
Bugzilla Description: plugin-scaffolder-backend: plugin-scaffolder-backend: Information disclosure via task failure events
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-209
Affected Packages:
Package States: Red Hat Developer Hub,Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106501
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2547222
Bugzilla Description: @backstage/plugin-scaffolder-backend: Backstage: Sensitive information exposure in Scaffolder
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-201
Affected Packages:
Package States: Red Hat Developer Hub,Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106500
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2547216
Bugzilla Description: @backstage/plugin-scaffolder-backend: @backstage/plugin-scaffolder-backend: Unauthorized file manipulation via improper task state validation
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-367
Affected Packages:
Package States: Red Hat Developer Hub,Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106499
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547214
Bugzilla Description: plugin-scaffolder-backend: Backstage: Information disclosure via secret leakage in Scaffolder task logs
CVSS Score:
CVSSv3 Score: 4.9
Vector:
CWE: CWE-538
Affected Packages:
Package States: Red Hat Developer Hub,Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106498
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547215
Bugzilla Description: @backstage/plugin-catalog-backend: @backstage/plugin-catalog-backend: Information disclosure via improper URL validation in entity placeholders
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-918
Affected Packages:
Package States: Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106497
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547210
Bugzilla Description: plugin-catalog-backend: plugin-catalog-backend: Information disclosure via inconsistent permission evaluation
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-201
Affected Packages:
Package States: Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106496
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2547211
Bugzilla Description: plugin-catalog-backend: plugin-catalog-backend: Unintended file access via inconsistent location type enforcement
CVSS Score:
CVSSv3 Score: 3.1
Vector:
CWE: CWE-552
Affected Packages:
Package States: Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106586
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2547584
Bugzilla Description: openssh: OpenSSH: Security restriction bypass via unenforced restrict directive in tunnel forwarding
CVSS Score:
CVSSv3 Score: 2.5
Vector:
CWE: CWE-267
Affected Packages:
Package States: Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-106494
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547198
Bugzilla Description: @backstage/backend-defaults: @backstage/backend-defaults: Content injection via crafted cloud storage object names
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-73
Affected Packages:
Package States: Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106493
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2547202
Bugzilla Description: backstage: Backstage: Information disclosure via improper object path validation in cloud storage catalog providers
CVSS Score:
CVSSv3 Score: 2.2
Vector:
CWE: CWE-22
Affected Packages:
Package States: Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106492
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2547199
Bugzilla Description: @backstage/backend-defaults: @backstage/backend-defaults: Access control bypass via improper service credential delegation
CVSS Score:
CVSSv3 Score: 7.6
Vector:
CWE: CWE-281
Affected Packages:
Package States: Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106491
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547196
Bugzilla Description: plugin-proxy-backend: plugin-proxy-backend: Request forwarding outside configured base path via crafted URL
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-22
Affected Packages:
Package States: Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106489
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547195
Bugzilla Description: @backstage/plugin-techdocs-backend: Backstage: Information disclosure via improper authorization in TechDocs backend
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-639
Affected Packages:
Package States: Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106488
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2547194
Bugzilla Description: plugin-auth-backend-module-oidc-provider: plugin-auth-backend-module-oidc-provider: Privilege escalation via unverified email addresses
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-290
Affected Packages:
Package States: Red Hat Developer Hub,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106487
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2547193
Bugzilla Description: plugin-kubernetes-backend: plugin-kubernetes-backend: Information disclosure via catalog cluster authentication handling
CVSS Score:
CVSSv3 Score: 3.5
Vector:
CWE: CWE-478
Affected Packages:
Package States: Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106486
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2547185
Bugzilla Description: plugin-scaffolder-backend-module-bitbucket-cloud: plugin-scaffolder-backend-module-bitbucket-server: Backstage: Unauthorized file manipulation via Bitbucket pull-request Scaffolder actions
CVSS Score:
CVSSv3 Score: 8.5
Vector:
CWE: CWE-22
Affected Packages:
Package States: Red Hat Developer Hub,
Full Details
CVE document

CVE-2026-106463
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547188
Bugzilla Description: @backstage/plugin-catalog-backend-module-gitlab: Backstage plugin-catalog-backend-module-gitlab: Unauthorized access via improper GitLab user ingestion
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-842
Affected Packages:
Package States: Red Hat Developer Hub,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106462
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547184
Bugzilla Description: backstage: Backstage: Privilege escalation via improper credential boundary enforcement
CVSS Score:
CVSSv3 Score: 6.4
Vector:
CWE: CWE-250
Affected Packages:
Package States: Red Hat Developer Hub,Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106461
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547189
Bugzilla Description: plugin-scaffolder-backend: plugin-scaffolder-backend: Information disclosure via incorrect authorization in task listing
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-201
Affected Packages:
Package States: Red Hat Developer Hub,Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106460
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547186
Bugzilla Description: @backstage/plugin-auth-node: @backstage/plugin-auth-node: Privilege escalation via improper email verification
CVSS Score:
CVSSv3 Score: 6.8
Vector:
CWE: CWE-290
Affected Packages:
Package States: Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106457
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547145
Bugzilla Description: plugin-auth-backend-module-cloudflare-access-provider: Backstage: Unauthorized access via missing token audience validation
CVSS Score:
CVSSv3 Score: 6.8
Vector:
CWE: CWE-303
Affected Packages:
Package States: Red Hat Developer Hub,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106456
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547147
Bugzilla Description: plugin-proxy-backend: plugin-proxy-backend: Authentication bypass via overlapping proxy routes
CVSS Score:
CVSSv3 Score: 4.8
Vector:
CWE: CWE-305
Affected Packages:
Package States: Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106550
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2547143
Bugzilla Description: convict: convict: Denial of Service via prototype pollution in config.set()
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-915
Affected Packages:
Package States: Red Hat Build of Podman Desktop,
Full Details
CVE document

CVE-2026-80048
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2479377
Bugzilla Description: sssd: sssd-kcm: Local Denial of Service via excessive memory preallocation
CVSS Score:
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-106455
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547148
Bugzilla Description: @backstage/plugin-techdocs-node: @backstage/plugin-techdocs-node: Information disclosure via improper MkDocs configuration validation
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-918
Affected Packages:
Package States: Red Hat Developer Hub,Self-service automation portal 2,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-106454
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547133
Bugzilla Description: twisted: Twisted: Denial of Service via regular expression backtracking in IMAP search patterns
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-1333
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Hardened Images,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenStack Platform 16.2,
Full Details
CVE document

CVE-2026-106453
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547132
Bugzilla Description: org.lz4/lz4-java: lz4-java: Denial of Service via untrusted decompressed length header
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Debezium 3,Red Hat Enterprise Linux 9,Red Hat Fuse 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-106452
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547136
Bugzilla Description: org.lz4/lz4-java: lz4-java: Denial of Service via excessive memory allocation
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Debezium 3,Red Hat Enterprise Linux 9,Red Hat Fuse 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-106451
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547137
Bugzilla Description: org.lz4/lz4-java: lz4-java: Arbitrary code execution via insecure temporary file handling
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-379
Affected Packages:
Package States: Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Debezium 3,Red Hat Enterprise Linux 9,Red Hat Fuse 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-106450
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547135
Bugzilla Description: org.lz4/lz4-java: lz4-java: Denial of Service via excessive memory allocation from crafted compressed streams
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Debezium 3,Red Hat Enterprise Linux 9,Red Hat Fuse 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-106449
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2547101
Bugzilla Description: org.lz4/lz4-java: lz4-java: Denial of Service via stack exhaustion from empty blocks
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat build of Apache Camel for Spring Boot 4,Red Hat build of Debezium 3,Red Hat Enterprise Linux 9,Red Hat Fuse 7,Red Hat JBoss Enterprise Application Platform 8,Red Hat JBoss Enterprise Application Platform Expansion Pack,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-105111
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547113
Bugzilla Description: org.apache.bcel/bcel: Apache Commons BCEL: Stored Cross-Site Scripting via untrusted class files in Class2HTML
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-79
Affected Packages:
Package States: Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Fuse 7,Red Hat JBoss Web Server 6,
Full Details
CVE document

CVE-2026-94114
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547121
Bugzilla Description: org.apache.bcel/bcel: Apache Commons BCEL: Security verification bypass via unvalidated class caching
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-386
Affected Packages:
Package States: Red Hat build of Apache Camel 4 for Quarkus 3,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Fuse 7,Red Hat JBoss Web Server 6,
Full Details
CVE document

CVE-2026-103009
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2547106
Bugzilla Description: elasticsearch: Elasticsearch: Information disclosure via crafted cross-cluster search requests
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-639
Affected Packages:
Package States: Red Hat OpenShift AI (RHOAI),Red Hat Quay 3,Red Hat Quay 3,
Full Details
CVE document

CVE-2026-103008
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547117
Bugzilla Description: elasticsearch: elasticsearch: Denial of Service via uncontrolled recursion in scripted runtime fields
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat OpenShift AI (RHOAI),Red Hat Quay 3,Red Hat Quay 3,
Full Details
CVE document

CVE-2026-103006
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547125
Bugzilla Description: elasticsearch: Elasticsearch: Denial of Service via deeply nested search aggregations
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat OpenShift AI (RHOAI),Red Hat Quay 3,Red Hat Quay 3,
Full Details
CVE document

CVE-2026-103005
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547116
Bugzilla Description: elasticsearch: Elasticsearch: Denial of Service via excessive memory allocation in connector descriptions
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat OpenShift AI (RHOAI),Red Hat Quay 3,Red Hat Quay 3,
Full Details
CVE document

CVE-2026-102409
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547105
Bugzilla Description: elasticsearch: Elasticsearch: Denial of Service via uncontrolled recursion
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat OpenShift AI (RHOAI),Red Hat Quay 3,Red Hat Quay 3,
Full Details
CVE document

CVE-2026-102408
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547111
Bugzilla Description: elasticsearch: elasticsearch: Denial of Service via crafted regular expressions in ES|QL CHUNK function
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-1333
Affected Packages:
Package States: Red Hat OpenShift AI (RHOAI),Red Hat Quay 3,Red Hat Quay 3,
Full Details
CVE document

CVE-2026-102407
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547122
Bugzilla Description: elasticsearch: elasticsearch: unauthorized data modification via Modify Data Streams API
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-639
Affected Packages:
Package States: Red Hat OpenShift AI (RHOAI),Red Hat Quay 3,Red Hat Quay 3,
Full Details
CVE document

CVE-2026-102404
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547107
Bugzilla Description: elasticsearch: Elasticsearch: Denial of Service via uncontrolled memory consumption from crafted queries
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat OpenShift AI (RHOAI),Red Hat Quay 3,Red Hat Quay 3,
Full Details
CVE document

CVE-2026-106444
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547089
Bugzilla Description: handlebars: Handlebars: Cross-Site Scripting via unescaped closing script tags in precompiled templates
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-79
Affected Packages:
Package States: Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-106443
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2547123
Bugzilla Description: weasyprint: WeasyPrint: Arbitrary code execution via unsafe PostScript image processing
CVSS Score:
CVSSv3 Score: 8.1
Vector:
CWE: CWE-94
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,
Full Details
CVE document

CVE-2026-106442
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2547466
Bugzilla Description: hydra-core: hydra-core: Arbitrary code execution via target blocklist bypass in instantiate()
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-470
Affected Packages:
Package States: Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,
Full Details
CVE document

CVE-2026-106441
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2547635
Bugzilla Description: hydra-core: hydra-core: Arbitrary code execution via unsafe logging configuration
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-470
Affected Packages:
Package States: Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,
Full Details
CVE document

CVE-2026-106440
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546808
Bugzilla Description: hydra-optuna-sweeper: hydra-optuna-sweeper: Arbitrary code execution via malicious sweep configuration
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-470
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106439
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546940
Bugzilla Description: hydra-core: hydra-core: Arbitrary code execution via mutable execution policy manipulation
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-470
Affected Packages:
Package States: Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,
Full Details
CVE document

CVE-2026-106272
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546799
Bugzilla Description: chromium-browser: UI misrepresentation in Chromoting
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-451
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106345
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546823
Bugzilla Description: chromium-browser: Use of released resource in Session
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-672
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106251
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546871
Bugzilla Description: chromium-browser: UI misrepresentation in Chromoting
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-451
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106269
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546890
Bugzilla Description: chromium-browser: Use after free in CSS
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106355
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546957
Bugzilla Description: chromium-browser: Missing authorization in Media
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-862
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106236
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546824
Bugzilla Description: chromium-browser: UI misrepresentation in Chromoting
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-451
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106334
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546993
Bugzilla Description: chromium-browser: Information leak in Payments
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-200
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106256
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546877
Bugzilla Description: chromium-browser: Information leak in Passwords
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-200
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106371
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2547020
Bugzilla Description: chromium-browser: Incorrect authorization in Transactions Platform
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-863
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106350
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546881
Bugzilla Description: chromium-browser: Incorrect authorization in Browser
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-863
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106288
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546900
Bugzilla Description: chromium-browser: Missing authorization in Browser
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-862
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106270
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546934
Bugzilla Description: chromium-browser: Incorrect authorization in WebAppInstalls
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-863
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106237
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546788
Bugzilla Description: chromium-browser: Information leak in Permissions
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-200
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106249
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546821
Bugzilla Description: chromium-browser: Incorrect authorization in Autofill
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-863
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106368
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546888
Bugzilla Description: chromium-browser: UI misrepresentation in UI
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-451
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106179
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546961
Bugzilla Description: chromium-browser: UI misrepresentation in WebAppInstalls
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-451
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106221
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546794
Bugzilla Description: chromium-browser: Confused deputy in WebAPKs
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-441
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106259
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2547018
Bugzilla Description: chromium-browser: Incorrect authorization in PermissionElement
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-863
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106186
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546857
Bugzilla Description: chromium-browser: Uncontrolled search path element in CredentialProvider
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-427
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106422
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546899
Bugzilla Description: chromium-browser: Incorrect authorization in API
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-863
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106247
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546942
Bugzilla Description: chromium-browser: Buffer overflow in ANGLE
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-122
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106299
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546789
Bugzilla Description: chromium-browser: Improper input validation in WebAudio
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-20
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106250
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546812
Bugzilla Description: chromium-browser: Missing authorization in Actor
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-862
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106191
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546838
Bugzilla Description: chromium-browser: Missing authorization in Actor
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-862
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106210
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546843
Bugzilla Description: chromium-browser: Observable discrepancy in Scroll
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-203
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106384
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546854
Bugzilla Description: chromium-browser: Missing authorization in SiteIsolation
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-862
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106352
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546828
Bugzilla Description: chromium-browser: Incorrect authorization in WebProtect
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-863
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106388
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546790
Bugzilla Description: chromium-browser: Missing authorization in DataTransfer
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-862
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106304
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546829
Bugzilla Description: chromium-browser: Out of bounds read in ANGLE
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-125
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106375
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546803
Bugzilla Description: chromium-browser: Incomplete cleanup in Dawn
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-459
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106336
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546782
Bugzilla Description: chromium-browser: Observable discrepancy in Paint
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-203
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106301
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546796
Bugzilla Description: chromium-browser: Confused deputy in Contextual Tasks
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-441
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106232
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546817
Bugzilla Description: chromium-browser: UI misrepresentation in Browser
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-451
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106403
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546826
Bugzilla Description: chromium-browser: Incorrect authorization in Accessibility
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-863
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106391
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546833
Bugzilla Description: chromium-browser: Incorrect authorization in WebShare
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-863
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106405
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546810
Bugzilla Description: chromium-browser: Race condition in CustomTabs
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-367
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106356
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546830
Bugzilla Description: chromium-browser: Clickjacking in EVP
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-1021
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106392
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546787
Bugzilla Description: chromium-browser: Information leak in WebAudio
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-200
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106302
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546795
Bugzilla Description: chromium-browser: UI misrepresentation in PermissionElement
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-451
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106416
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546842
Bugzilla Description: chromium-browser: Code injection in Extensions
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-94
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106361
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546781
Bugzilla Description: chromium-browser: Incorrect provision of specified functionality in Mobile
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-684
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106279
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546786
Bugzilla Description: chromium-browser: Incorrect reference resolution in Passwords
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-706
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106354
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546793
Bugzilla Description: chromium-browser: Improper resource exposure in Extensions
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-668
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106326
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546822
Bugzilla Description: chromium-browser: Confused deputy in UI
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-441
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106290
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546827
Bugzilla Description: chromium-browser: Uninitialized resource in GPU
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-908
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106408
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546800
Bugzilla Description: chromium-browser: Protection mechanism failure in Mobile
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-693
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106414
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546804
Bugzilla Description: chromium-browser: Improper input validation in Mobile
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-20
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106244
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546780
Bugzilla Description: chromium-browser: Incorrect authorization in Permissions
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-863
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106225
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546792
Bugzilla Description: chromium-browser: Missing authorization in Autofill
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-862
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106266
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546802
Bugzilla Description: chromium-browser: Confused deputy in Contextual Tasks
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-441
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106242
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546819
Bugzilla Description: chromium-browser: Information leak in Omnibox
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-200
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106411
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546852
Bugzilla Description: chromium-browser: Use after free in Parser
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106346
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546941
Bugzilla Description: chromium-browser: Improper state validation in DevTools
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-754
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106318
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546797
Bugzilla Description: chromium-browser: Use after free in Media
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106235
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546806
Bugzilla Description: chromium-browser: Use after free in WebAudio
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106393
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546839
Bugzilla Description: chromium-browser: Use after free in Storage
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106298
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546813
Bugzilla Description: chromium-browser: Use after free in Chrome Tabs
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106203
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546844
Bugzilla Description: chromium-browser: Incomplete cleanup in Autofill
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-459
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106193
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546894
Bugzilla Description: chromium-browser: Use after free in Parser
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106332
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546951
Bugzilla Description: chromium-browser: Integer overflow in Compositing
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-190
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106273
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546975
Bugzilla Description: chromium-browser: Uninitialized resource in Video
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-908
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106281
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546987
Bugzilla Description: chromium-browser: Use after free in Tint
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106239
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546801
Bugzilla Description: chromium-browser: Integer overflow in WebGL
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-190
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106396
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546815
Bugzilla Description: chromium-browser: Improper input validation in Omnibox
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-20
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106426
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546818
Bugzilla Description: chromium-browser: Race condition in Fonts
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-362
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106419
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546841
Bugzilla Description: chromium-browser: Use after free in ANGLE
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106231
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546855
Bugzilla Description: chromium-browser: Uninitialized resource in Dawn
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-908
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106323
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2547014
Bugzilla Description: chromium-browser: Missing authorization in Chrome for iOS
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-862
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106202
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2547031
Bugzilla Description: chromium-browser: Uninitialized resource in ANGLE
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-908
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106243
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546779
Bugzilla Description: chromium-browser: Incomplete cleanup in Proxy Auth
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-459
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106214
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546784
Bugzilla Description: chromium-browser: Information leak in Proxy
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-200
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106412
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546791
Bugzilla Description: chromium-browser: Race condition in Core
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-367
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106377
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546883
Bugzilla Description: chromium-browser: Race condition in Fonts
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-362
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106364
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546907
Bugzilla Description: chromium-browser: Incorrect authorization in Omnibox
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-863
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106293
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546956
Bugzilla Description: chromium-browser: Type confusion in ANGLE
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-843
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106369
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546816
Bugzilla Description: chromium-browser: Missing authorization in Translate
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-862
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106215
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546846
Bugzilla Description: chromium-browser: Uninitialized resource in ANGLE
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-908
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106308
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546847
Bugzilla Description: chromium-browser: Incorrect reference resolution in Autofill
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-706
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106258
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546929
Bugzilla Description: chromium-browser: Uninitialized resource in ANGLE
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-908
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106366
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546998
Bugzilla Description: chromium-browser: Incomplete cleanup in CustomTabs
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-459
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106376
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2547028
Bugzilla Description: chromium-browser: Uninitialized resource in ANGLE
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-908
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106327
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546814
Bugzilla Description: chromium-browser: Incorrect authorization in Core
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-863
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-102322
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546874
Bugzilla Description: chromium-browser: Incorrect Authorization in SiteIsolation
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-863
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106245
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546958
Bugzilla Description: chromium-browser: Uninitialized resource in ANGLE
CVSS Score:
CVSSv3 Score: 8.8
Vector:
CWE: CWE-908
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106347
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546996
Bugzilla Description: chromium-browser: Use after free in Track
CVSS Score:
CVSSv3 Score: 9.6
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106382
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546783
Bugzilla Description: chromium-browser: Use after free in Chromecast
CVSS Score:
CVSSv3 Score: 9.6
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106358
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546950
Bugzilla Description: chromium-browser: Use after free in Navigation
CVSS Score:
CVSSv3 Score: 9.6
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-106197
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546963
Bugzilla Description: chromium-browser: Use after free in Browser
CVSS Score:
CVSSv3 Score: 9.6
Vector:
CWE: CWE-416
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-104045
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2478663
Bugzilla Description: sssd: sssd: Denial of Service via race condition in autofs responder
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-88252
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2479240
Bugzilla Description: sssd: sssd: Denial of Service via responder connection retry loop during file descriptor exhaustion
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-835
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-107121
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2547296
Bugzilla Description: keycloak-services: keycloak-services: SMTP STARTTLS plaintext credential and message downgrade
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-319
Affected Packages:
Package States: Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-104850
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546663
Bugzilla Description: @modelcontextprotocol/sdk: @modelcontextprotocol/client: MCP TypeScript SDK: Information disclosure via unbound OAuth credentials
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-941
Affected Packages:
Package States: Migration Toolkit for Applications 8,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 9,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat Hardened Images,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift Dev Spaces,
Full Details
CVE document

CVE-2026-83550
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2526444
Bugzilla Description: postgres-exporter: net/http/pprof exposed on metrics listener
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-489
Affected Packages:
Package States: Multicluster Global Hub,
Full Details
CVE document

CVE-2026-101258
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2542396
Bugzilla Description: ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-104046
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2478662
Bugzilla Description: sssd: sssd: Denial of Service via incomplete Identity Provider authentication requests
CVSS Score:
CVSSv3 Score: 6.2
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-104047
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2478616
Bugzilla Description: sssd: sssd: Information disclosure via query injection in Entra ID lookups
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-140
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-104048
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2478613
Bugzilla Description: sssd: sssd: Authorization bypass via cross-domain username collision in HBAC evaluation
CVSS Score:
CVSSv3 Score: 6.8
Vector:
CWE: CWE-1025
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-26287
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546652
Bugzilla Description: github.com/external-secrets/external-secrets: external-secrets: Sensitive information disclosure via webhook generator label enforcement bypass
CVSS Score:
CVSSv3 Score: 7.1
Vector:
CWE: CWE-639
Affected Packages:
Package States: External Secrets Operator for Red Hat OpenShift,
Full Details
CVE document

CVE-2026-105800
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546630
Bugzilla Description: i18next-http-backend: i18next-http-backend: Server-Side Request Forgery via crafted path template parameters
CVSS Score:
CVSSv3 Score: 3.7
Vector:
CWE: CWE-918
Affected Packages:
Package States: Migration Toolkit for Applications 8,Multicluster Engine for Kubernetes,Network Observability Operator,Network Observability Operator,Network Observability Operator,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Service Mesh 3,OpenShift Service Mesh 3,Red Hat Advanced Cluster Management for Kubernetes 2,Red Hat AMQ Broker 7,Red Hat AMQ Broker 7,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Data Grid 8,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat Edge Manager 1,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-105922
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546627
Bugzilla Description: vllm: vLLM: Denial of Service via crafted input to penalty handler
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-248
Affected Packages:
Package States: Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-77050
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2544146
Bugzilla Description: django: Denial of service via unbounded caching of long language codes in get_supported_language_variant()
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Discovery 2,Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Update Infrastructure 4 for Cloud Providers,Red Hat Update Infrastructure 5,Red Hat Update Infrastructure 5,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-84429
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2544147
Bugzilla Description: django: Denial of service via quadratic parsing complexity in parse_header_parameters()
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-400
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Discovery 2,Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Update Infrastructure 4 for Cloud Providers,Red Hat Update Infrastructure 5,Red Hat Update Infrastructure 5,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-87890
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2544149
Bugzilla Description: django: Server-side request forgery via unvalidated bytes in spatial lookups
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-918
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Discovery 2,Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Update Infrastructure 4 for Cloud Providers,Red Hat Update Infrastructure 5,Red Hat Update Infrastructure 5,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-87975
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2544152
Bugzilla Description: django: Privilege abuse in model formsets with editable primary keys
CVSS Score:
CVSSv3 Score: 6.5
Vector:
CWE: CWE-639
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Discovery 2,Red Hat OpenStack Platform 13 (Queens),Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 16.2,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 17.1,Red Hat OpenStack Platform 18.0,Red Hat OpenStack Platform 18.0,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Satellite 6,Red Hat Update Infrastructure 4 for Cloud Providers,Red Hat Update Infrastructure 5,Red Hat Update Infrastructure 5,Self-service automation portal 2,
Full Details
CVE document

CVE-2026-105842
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546599
Bugzilla Description: lrzsz: lrzsz: Denial of Service via heap-based buffer overflow from oversized filenames
CVSS Score:
CVSSv3 Score: 6.4
Vector:
CWE: CWE-120
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-105840
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546590
Bugzilla Description: lrzsz: lrzsz: Arbitrary file overwrite via absolute path traversal in restricted mode
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-22
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-105841
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546595
Bugzilla Description: lrzsz: lrzsz: Arbitrary command execution via crafted file names in pipe mode
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-78
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-75820
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546565
Bugzilla Description: aspell: aspell: Denial of Service via integer truncation in wordlist processing
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: CWE-681
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-75819
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546564
Bugzilla Description: aspell: aspell: Denial of Service via crafted dictionary file
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-75818
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546566
Bugzilla Description: aspell: aspell: Denial of Service via crafted compressed file in prezip-bin
CVSS Score:
CVSSv3 Score: 3.3
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-105305
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2545801
Bugzilla Description: keycloak-services: keycloak-services: Device Authorization Grant bypasses per-client minimum.acr.value enforcement
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-287
Affected Packages:
Package States: Red Hat Build of Keycloak,Red Hat Build of Keycloak,Red Hat Single Sign-On 7,
Full Details
CVE document

CVE-2026-105775
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546286
Bugzilla Description: vllm: vLLM: Denial of Service via out-of-bounds read in completions request handler
CVSS Score:
CVSSv3 Score: 4.3
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-104044
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2478664
Bugzilla Description: sssd: sssd: Denial of Service via crafted passkey Kerberos authentication request
CVSS Score:
CVSSv3 Score: 6.2
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-104043
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2478852
Bugzilla Description: sssd: sssd: Denial of Service via undersized packet parsing in NSS responder
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-104042
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2478862
Bugzilla Description: sssd: sssd: Denial of Service via out-of-bounds read in PAM responder
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-104041
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2478864
Bugzilla Description: sssd: sssd: Denial of Service via unbounded negative cache growth
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-104040
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2478915
Bugzilla Description: sssd: sssd: Information disclosure via OData injection in Entra ID lookups
CVSS Score:
CVSSv3 Score: 4.4
Vector:
CWE: CWE-140
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-104039
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2478956
Bugzilla Description: sssd: sssd: Denial of service via stale connection state reuse in PAM GSSAPI responder
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98215
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546336
Bugzilla Description: kernel: selinux: preserve user SID across nested backing files
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-281
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98371
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546337
Bugzilla Description: kernel: xfrm: iptfs: fix runt reassembly panic from short inner tot_len
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98174
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546338
Bugzilla Description: kernel: smb: client: fix rlist race and missing initialization
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98170
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546340
Bugzilla Description: kernel: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98203
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546344
Bugzilla Description: kernel: Input: soc_button_array - check btns_desc->package.count
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98169
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546354
Bugzilla Description: kernel: smb: client: fix potential OOB read in smb3_enum_snapshots()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98193
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546356
Bugzilla Description: kernel: wifi: libipw: reject TKIP frames without a full MIC
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98211
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546357
Bugzilla Description: kernel: mmc: mmci: Fix use-after-free in busy-timeout work
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98206
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546358
Bugzilla Description: kernel: Input: cyttsp5 - clamp the HID report size before memcpy
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-120
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98182
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546359
Bugzilla Description: kernel: wifi: mac80211: refuse to make a monitor active when it has no queue
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98180
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546360
Bugzilla Description: kernel: drm/msm: RCU-free the scheduler-containing ring and VM objects
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98216
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546361
Bugzilla Description: kernel: IB/hfi1: Fix the PIO_CRED credit-return mmap
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-468
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98184
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546367
Bugzilla Description: kernel: wifi: mwifiex: prevent authentication frame length truncation
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98205
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546369
Bugzilla Description: kernel: Input: evdev - zero absinfo before partial copy in EVIOCSABS
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98188
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546373
Bugzilla Description: kernel: wifi: p54: validate curve data length in the calibration curve converters
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98363
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546378
Bugzilla Description: kernel: firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98200
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546379
Bugzilla Description: kernel: hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98185
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546388
Bugzilla Description: kernel: wifi: mwifiex: validate scan response extents
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98355
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546389
Bugzilla Description: kernel: RDMA/rtrs: guard against null kobj name
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98187
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546394
Bugzilla Description: kernel: wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98190
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546395
Bugzilla Description: kernel: wifi: wilc1000: fix out-of-bounds read in P2P public action frames
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98370
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546397
Bugzilla Description: kernel: xfrm: fix compat ALLOCSPI request use-after-free
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98204
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546398
Bugzilla Description: kernel: Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98354
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546401
Bugzilla Description: kernel: RDMA/mad: Fix receive buffer leak when PKey enforcement fails
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98207
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546402
Bugzilla Description: kernel: mmc: spi: reset bytes_xfered before retrying CRC failures
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-909
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98179
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546404
Bugzilla Description: kernel: drm/amdgpu: fix rmmio iounmap skipped on device removal
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98198
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546406
Bugzilla Description: kernel: hwmon: (pwm-fan) Stop RPM timer before freeing tach data
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98209
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546407
Bugzilla Description: kernel: mmc: sdhci-of-aspeed: Remove children before releasing SDC resources
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-459
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98358
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546408
Bugzilla Description: kernel: IB/iser: reject a remote invalidation of an unregistered direction
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98357
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546409
Bugzilla Description: kernel: IB/isert: wait for deferred control PDU completions before releasing the connection
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98369
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546410
Bugzilla Description: kernel: xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-820
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98365
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546413
Bugzilla Description: kernel: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98197
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546414
Bugzilla Description: kernel: hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98177
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546416
Bugzilla Description: kernel: drm/amdkfd: Avoid integer underflow in EOP ring size calculation
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-191
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98213
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546417
Bugzilla Description: kernel: mmc: core: Cancel SDIO IRQ work before freeing host
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98191
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546420
Bugzilla Description: kernel: wifi: wlcore: release runtime PM ref on regdomain config failure
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-911
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98166
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546426
Bugzilla Description: kernel: drm/ttm: fix swapped-out resources never leaving their bulk_move range
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98183
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546428
Bugzilla Description: kernel: wifi: mac80211: avoid out-of-bounds read for empty PREQ elements
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98212
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546430
Bugzilla Description: kernel: mmc: hsq: Fix use-after-free in retry work
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98168
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546433
Bugzilla Description: kernel: smb: client: fix reparse buffer bounds in cifs_query_reparse_point()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98195
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546435
Bugzilla Description: kernel: wifi: iwlegacy: fix broadcast stations deallocation
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-1341
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98372
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546443
Bugzilla Description: kernel: xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98189
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546444
Bugzilla Description: kernel: wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98208
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546451
Bugzilla Description: kernel: mmc: sdio_uart: fix xmit_fifo leak when the port table is full
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98199
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546453
Bugzilla Description: kernel: hwmon: (pmbus/core) increase number of phases and add new mask
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98210
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546457
Bugzilla Description: kernel: mmc: mxcmmc: cancel data work and watchdog on remove
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98366
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546460
Bugzilla Description: kernel: RDMA/rxe: validate access flags before swapping the MR's PD
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98361
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546461
Bugzilla Description: kernel: RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-281
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98353
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546463
Bugzilla Description: kernel: RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-833
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98176
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546467
Bugzilla Description: kernel: drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-191
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98359
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546470
Bugzilla Description: kernel: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-366
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98178
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546471
Bugzilla Description: kernel: drm/amdgpu: Skip KFD mapping clear before initialization
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98368
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546472
Bugzilla Description: kernel: esp: downgrade zerocopy managed frags before mutating skb frags
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-911
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98367
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546473
Bugzilla Description: kernel: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98186
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546474
Bugzilla Description: kernel: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98202
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546478
Bugzilla Description: kernel: Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98173
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546481
Bugzilla Description: kernel: smb: client: fix use-after-free of iface in cifs_try_adding_channels()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98362
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546484
Bugzilla Description: kernel: clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98181
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546485
Bugzilla Description: kernel: drm/gud: fix out-of-bounds write in gud_plane_atomic_check()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98364
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546487
Bugzilla Description: kernel: xfrm: hold net_device reference under RCU in bundle creation
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98356
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546489
Bugzilla Description: kernel: RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98194
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546498
Bugzilla Description: kernel: wifi: libertas_tf: fix UAF in lbtf_free_adapter()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98172
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546508
Bugzilla Description: kernel: smb: client: fix smbd_connection leak on cifs_get_tcp_session() error
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98192
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546510
Bugzilla Description: kernel: wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98196
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546511
Bugzilla Description: kernel: wifi: brcmsmac: fix UAF in brcms_free_timer()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98175
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546515
Bugzilla Description: kernel: smb: client: cancel reconnect work in clean_demultiplex_info()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98326
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546523
Bugzilla Description: kernel: wifi: mac80211: mesh: release the channel if start fails
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98227
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546524
Bugzilla Description: kernel: memstick: ms_block: destroy io_queue workqueue on removal
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98167
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546525
Bugzilla Description: kernel: smb: client: fix server->total_read for compound encrypted PDUs
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98219
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546526
Bugzilla Description: kernel: sched_ext: Close the pre-enable ops error claim window
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98234
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546527
Bugzilla Description: kernel: net/sched: hhf: cap hh_flows_limit at change time
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98289
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546528
Bugzilla Description: kernel: af_unix: Unify scc_index when finalising SCC in __unix_walk_scc()
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98239
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546529
Bugzilla Description: kernel: net: lan743x: fix RX checksum use-after-free
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98224
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546530
Bugzilla Description: kernel: mm/vma: correctly unaccount on mmap_prepare() failure
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98303
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546531
Bugzilla Description: kernel: ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-617
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98262
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546533
Bugzilla Description: kernel: ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-909
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98360
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546534
Bugzilla Description: kernel: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98272
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546535
Bugzilla Description: kernel: net: mvpp2: prevent buffer overflow in page_pool allocation
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98287
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546536
Bugzilla Description: kernel: pppoatm: ensure a writable skb header and linear data
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98214
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546537
Bugzilla Description: kernel: selinux: recheck intermediate backing files on mprotect()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-281
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98220
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546539
Bugzilla Description: kernel: sched_ext: Fix NULL sched deref in kfunc sub-sched error paths
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98278
Severity: low
Released on: 06/10/2026
Advisory:
Bugzilla: 2546540
Bugzilla Description: kernel: net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-617
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98253
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546541
Bugzilla Description: kernel: RDMA/ucma: Serialize join and leave on copy_to_user failure
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98201
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546542
Bugzilla Description: kernel: Input: zero ff_effect before compat copy in input_ff_effect_from_user
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-908
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-98238
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546543
Bugzilla Description: kernel: net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb()
CVSS Score:
CVSSv3 Score: 7.0
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-106033
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546603
Bugzilla Description: ansible: ansible-ui: Ansible UI DOM XSS in /redirect next parameter
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-79
Affected Packages:
Package States: Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Ansible Automation Platform 2,Red Hat Hardened Images,
Full Details
CVE document

CVE-2026-106061
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546640
Bugzilla Description: gimp: GIMP: heap buffer over-read in X cursor (XMC) thumbnail loader on crafted file
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-106062
Severity: important
Released on: 06/10/2026
Advisory:
Bugzilla: 2546654
Bugzilla Description: gimp: GIMP: heap buffer overflow in DDS loader on crafted DirectDraw Surface file
CVSS Score:
CVSSv3 Score: 7.8
Vector:
CWE: CWE-119
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-106063
Severity: moderate
Released on: 06/10/2026
Advisory:
Bugzilla: 2546668
Bugzilla Description: GIMP: GIMP: heap buffer overflow in DICOM export on oversized image dimensions
CVSS Score:
CVSSv3 Score: 6.3
Vector:
CWE: CWE-119
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,
Full Details
CVE document

CVE-2026-104038
Severity: moderate
Released on: 05/10/2026
Advisory:
Bugzilla: 2478980
Bugzilla Description: sssd: sssd: Denial of Service via missing SID extension in certificate mapping
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-476
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-104037
Severity: moderate
Released on: 05/10/2026
Advisory:
Bugzilla: 2479030
Bugzilla Description: sssd: sssd: Denial of Service via packet length underflow in autofs responder
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-125
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-92821
Severity: moderate
Released on: 05/10/2026
Advisory:
Bugzilla: 2479031
Bugzilla Description: sssd: SSSD: Access control bypass via premature LDAP access rule evaluation
CVSS Score:
CVSSv3 Score: 6.8
Vector:
CWE: CWE-393
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-104036
Severity: moderate
Released on: 05/10/2026
Advisory:
Bugzilla: 2479057
Bugzilla Description: sssd: sssd: Denial of service via out-of-bounds write in NFS idmap plugin
CVSS Score:
CVSSv3 Score: 5.8
Vector:
CWE: CWE-787
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-104035
Severity: moderate
Released on: 05/10/2026
Advisory:
Bugzilla: 2479107
Bugzilla Description: sssd: sssd: Denial of Service via memory exhaustion in KCM responder
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-772
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-104033
Severity: moderate
Released on: 05/10/2026
Advisory:
Bugzilla: 2479271
Bugzilla Description: sssd: sssd: Access control bypass via improper LDAP shadow expiration check
CVSS Score:
CVSSv3 Score: 5.4
Vector:
CWE: CWE-193
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-104034
Severity: moderate
Released on: 05/10/2026
Advisory:
Bugzilla: 2479178
Bugzilla Description: sssd: SSSD: Denial of Service via use-after-free in KCM ticket renewal
CVSS Score:
CVSSv3 Score: 4.7
Vector:
CWE: CWE-825
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-104032
Severity: moderate
Released on: 05/10/2026
Advisory:
Bugzilla: 2479381
Bugzilla Description: sssd: sssd: Denial of Service via unprivileged autofs cache invalidation
CVSS Score:
CVSSv3 Score: 5.5
Vector:
CWE: CWE-408
Affected Packages:
Package States: Red Hat Enterprise Linux 10,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Enterprise Linux 9,Red Hat OpenShift Container Platform 4,Red Hat OpenShift Container Platform 4,
Full Details
CVE document

CVE-2026-105782
Severity: important
Released on: 05/10/2026
Advisory:
Bugzilla: 2546224
Bugzilla Description: scrapy: Scrapy: Denial of Service via crafted Referrer-Policy header
CVSS Score:
CVSSv3 Score: 7.5
Vector:
CWE: CWE-470
Affected Packages:
Package States:
Full Details
CVE document

CVE-2026-105760
Severity: moderate
Released on: 05/10/2026
Advisory:
Bugzilla: 2546207
Bugzilla Description: vllm: vllm: Denial of Service via excessive resource consumption in GLMGA video backend
CVSS Score:
CVSSv3 Score: 5.3
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document

CVE-2026-105759
Severity: moderate
Released on: 05/10/2026
Advisory:
Bugzilla: 2546208
Bugzilla Description: vllm: vLLM: Denial of service via arbitrary HTTP method tokens in metrics tracking
CVSS Score:
CVSSv3 Score: 5.9
Vector:
CWE: CWE-770
Affected Packages:
Package States: Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat AI Inference Server,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat Enterprise Linux AI (RHEL AI) 3,Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),Red Hat OpenShift AI (RHOAI),
Full Details
CVE document