CVE-2026-122020
Description
A flaw was found in Nstbrowser. A remote attacker could exploit this vulnerability by sending a crafted request to the stopAll API endpoint within the Local Agent Management Service. Successful exploitation allows the attacker to terminate active browser instances, resulting in a Denial of Service (DoS).
Statement
This vulnerability is rated with Moderate severity because exploitation requires user interaction and is limited to causing a denial of service on the browser service without impacting data confidentiality or integrity. Additionally, Nstbrowser is not packaged, shipped, or supported in Red Hat products. As a result, this issue does not affect any supported Red Hat software.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Understanding the Weakness (CWE)
Access Control,Other
Technical Impact: Gain Privileges or Assume Identity; Varies by Context
Exposing critical functionality essentially provides an attacker with the privilege level of that functionality. The consequences will depend on the associated functionality, but they can range from reading or modifying sensitive data, accessing administrative or other privileged functionality, or possibly even executing arbitrary code.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
