7.5
HIGH
CVSS 3.1
CVE-2026-27135
nghttp2 Denial of service: Assertion failure due to the missing state validation
Overview
Description
nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2` is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available.
Details
INFO
Published Date :
March 18, 2026, 6:16 p.m.
Last Modified :
July 15, 2026, 2:19 a.m.
Remotely Exploit :
Yes !
Source :
[email protected]
Scoring
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework
for assessing the severity of vulnerabilities in software and systems.
We collect and displays CVSS scores from various sources for each CVE.
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | |||||
| CVSS 3.1 | HIGH | [email protected] | ||||
| CVSS 3.1 | HIGH | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c |
Solution
Update nghttp2 library to version 1.68.1 or later to fix assertion failures due to malformed frames.
- Update nghttp2 to version 1.68.1 or later.
- Apply relevant security patches for the library.
Public PoC/Exploit Available at Github
CVE-2026-27135 has a 8 public
PoC/Exploit available at Github.
Go to the Public Exploits tab to see the list.
References
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-27135.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-27135 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-27135
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
None
JavaScript Dockerfile
Updated: 2 months, 3 weeks ago
0 stars
0 fork
0 watcher
Born at : April 26, 2026, 11:44 a.m.
This repo has been linked 3 different CVEs too.
None
Dockerfile HTML JavaScript
Updated: 2 months ago
0 stars
0 fork
0 watcher
Born at : April 24, 2026, 6:32 p.m.
This repo has been linked 3 different CVEs too.
trivy-nginx-scan
Updated: 3 months, 1 week ago
0 stars
0 fork
0 watcher
Born at : April 14, 2026, 1:37 p.m.
This repo has been linked 106 different CVEs too.
STIG-hardened crewAI for federal/DoD deployment
Dockerfile Python JavaScript Jinja CSS Shell
Updated: 2 months, 3 weeks ago
0 stars
0 fork
0 watcher
Born at : April 9, 2026, 7:09 p.m.
This repo has been linked 2 different CVEs too.
Community patch for CVE-2026-27135 (nghttp2) on Debian-based Docker images
Dockerfile Shell
Updated: 3 months, 2 weeks ago
0 stars
0 fork
0 watcher
Born at : April 6, 2026, 5:47 a.m.
This repo has been linked 1 different CVEs too.
Zero-dependency WordPress + Elementor Docker image. FrankenPHP, PHP 8.5, SQLite, Elementor, ProElements, hello-elementor. Single container, no MySQL, no Apache.
Dockerfile Shell
Updated: 1 month ago
0 stars
0 fork
0 watcher
Born at : March 28, 2026, 2:03 p.m.
This repo has been linked 2 different CVEs too.
None
Shell Python
Updated: 5 days, 9 hours ago
0 stars
1 fork
1 watcher
Born at : March 19, 2021, 11:41 a.m.
This repo has been linked 164 different CVEs too.
None
Shell
Updated: 5 days, 9 hours ago
0 stars
0 fork
0 watcher
Born at : March 6, 2021, 2:09 p.m.
This repo has been linked 7 different CVEs too.
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-27135 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-27135 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Jul. 15, 2026
Action Type Old Value New Value Changed Affected [{'cpes': ['cpe:/a:redhat:jboss_core_services:1::el7'], 'vendor': 'Red Hat', 'product': 'Red Hat JBoss Core Services on RHEL 7 Server', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:jboss_core_services:1::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat JBoss Core Services on RHEL 8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.12::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.12', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhosemc:1.0::el8'], 'vendor': 'Red Hat', 'product': 'Middleware Containers for OpenShift', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.13::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.13', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.14::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.14', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.15::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.15', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.16::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.16', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.17::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.17', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.18::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.18', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.19::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.19', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux_eus:10.0'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream EUS (v. 10.0)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10.1'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream (v. 10)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:8::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream (v. 8)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.4::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream EUS (v.9.4)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.6::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream EUS (v.9.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:9::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream (v. 9)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux_eus:10.0'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS EUS (v. 10.0)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10.1'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS (v. 10)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:8::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS (v. 8)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_aus:8.2::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS AUS (v. 8.2)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_aus:8.4::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS AUS (v.8.4)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_eus_long_life:8.4::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_aus:8.6::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS AUS (v.8.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_e4s:8.6::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS E4S (v.8.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_tus:8.6::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS TUS (v.8.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_e4s:8.8::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS E4S (v.8.8)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_tus:8.8::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS TUS (v.8.8)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_e4s:9.0::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS E4S (v.9.0)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_e4s:9.2::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS E4S (v.9.2)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_eus:9.4::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS EUS (v.9.4)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_eus:9.6::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS EUS (v.9.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:9::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS (v. 9)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux_eus:10.0'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10.1'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:8::crb'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux CRB (v. 8)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.4::crb'], 'vendor': 'Red Hat', 'product': 'Red Hat CodeReady Linux Builder EUS (v.9.4)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.6::crb'], 'vendor': 'Red Hat', 'product': 'Red Hat CodeReady Linux Builder EUS (v.9.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:9::crb'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ai_inference_server:3.2::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat AI Inference Server 3.2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ai_inference_server:3.3::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat AI Inference Server 3.3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:discovery:2::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Discovery 2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:hummingbird:1'], 'vendor': 'Red Hat', 'product': 'Red Hat Hardened Images', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:insights_proxy:1.5::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Insights proxy 1.5', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:jboss_core_services:1'], 'vendor': 'Red Hat', 'product': 'Red Hat JBoss Core Services 2.4.62.SP4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhui:5::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Update Infrastructure 5', 'defaultStatus': 'affected'}] [{'cpes': ['cpe:/a:redhat:jboss_core_services:1::el8'], 'vendor': 'Red Hat', 'product': 'JBoss Core Services for RHEL 8', 'versions': [{'status': 'unaffected', 'version': '0:1.64.0-3.el8jbcs', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'jbcs-httpd24-nghttp2', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:jboss_core_services:1::el7'], 'vendor': 'Red Hat', 'product': 'JBoss Core Services on RHEL 7', 'versions': [{'status': 'unaffected', 'version': '0:1.64.0-3.el7jbcs', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'jbcs-httpd24-nghttp2', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10.1'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 10', 'versions': [{'status': 'unaffected', 'version': '1:22.22.2-1.el10_1', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nodejs22', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10.1'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 10', 'versions': [{'status': 'unaffected', 'version': '0:1.64.0-2.el10_1.1', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nghttp2', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10.1'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 10', 'versions': [{'status': 'unaffected', 'version': '1:24.14.1-2.el10_1', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nodejs24', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux_eus:10.0'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 10.0 Extended Update Support', 'versions': [{'status': 'unaffected', 'version': '1:22.22.2-2.el10_0', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nodejs22', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux_eus:10.0'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 10.0 Extended Update Support', 'versions': [{'status': 'unaffected', 'version': '0:1.64.0-2.el10_0.1', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nghttp2', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:8'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 8', 'versions': [{'status': 'unaffected', 'version': '8100020260331102257.6d880403', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nodejs:22', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:8'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 8', 'versions': [{'status': 'unaffected', 'version': '8100020260408131901.6d880403', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nodejs:24', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:8'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 8', 'versions': [{'status': 'unaffected', 'version': '8100020260414073138.489197e6', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nodejs:20', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:8'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 8', 'versions': [{'status': 'unaffected', 'version': '0:1.33.0-6.el8_10.2', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nghttp2', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_aus:8.2'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 8.2 Advanced Update Support', 'versions': [{'status': 'unaffected', 'version': '0:1.33.0-3.el8_2.4', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nghttp2', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_aus:8.4'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support', 'versions': [{'status': 'unaffected', 'version': '0:1.33.0-4.el8_4.3', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nghttp2', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_eus_long_life:8.4'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On', 'versions': [{'status': 'unaffected', 'version': '0:1.33.0-4.el8_4.3', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nghttp2', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_aus:8.6'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support', 'versions': [{'status': 'unaffected', 'version': '0:1.33.0-4.el8_6.3', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nghttp2', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_tus:8.6'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 8.6 Telecommunications Update Service', 'versions': [{'status': 'unaffected', 'version': '0:1.33.0-4.el8_6.3', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nghttp2', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_e4s:8.6'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions', 'versions': [{'status': 'unaffected', 'version': '0:1.33.0-4.el8_6.3', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nghttp2', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_tus:8.8'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 8.8 Telecommunications Update Service', 'versions': [{'status': 'unaffected', 'version': '0:1.33.0-5.el8_8.2', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nghttp2', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_e4s:8.8'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions', 'versions': [{'status': 'unaffected', 'version': '0:1.33.0-5.el8_8.2', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nghttp2', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:9'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 9', 'versions': [{'status': 'unaffected', 'version': '9070020260401095228.rhel9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nodejs:22', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:9'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 9', 'versions': [{'status': 'unaffected', 'version': '9070020260402152654.rhel9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nodejs:24', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:9'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 9', 'versions': [{'status': 'unaffected', 'version': '9070020260409073121.rhel9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nodejs:20', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:9'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 9', 'versions': [{'status': 'unaffected', 'version': '0:1.43.0-6.el9_7.1', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nghttp2', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_e4s:9.0'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions', 'versions': [{'status': 'unaffected', 'version': '0:1.43.0-5.el9_0.4', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nghttp2', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_e4s:9.2'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions', 'versions': [{'status': 'unaffected', 'version': '0:1.43.0-5.el9_2.4', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nghttp2', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.4'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 9.4 Extended Update Support', 'versions': [{'status': 'unaffected', 'version': '9040020260421133644.rhel9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nodejs:20', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_eus:9.4'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 9.4 Extended Update Support', 'versions': [{'status': 'unaffected', 'version': '0:1.43.0-5.el9_4.4', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nghttp2', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.6'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 9.6 Extended Update Support', 'versions': [{'status': 'unaffected', 'version': '9060020260409121057.rhel9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nodejs:22', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.6'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 9.6 Extended Update Support', 'versions': [{'status': 'unaffected', 'version': '9060020260422064119.rhel9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nodejs:20', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_eus:9.6'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 9.6 Extended Update Support', 'versions': [{'status': 'unaffected', 'version': '0:1.43.0-6.el9_6.1', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nghttp2', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:jboss_core_services:1'], 'vendor': 'Red Hat', 'product': 'Red Hat JBoss Core Services 2.4.62.SP4', 'packageName': 'nghttp2', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:openshift:4.12::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.12', 'versions': [{'status': 'unaffected', 'version': '412.86.202605271418-0', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhcos', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.13::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.13', 'versions': [{'status': 'unaffected', 'version': '413.92.202605271328-0', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhcos', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.14::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.14', 'versions': [{'status': 'unaffected', 'version': '414.92.202605060243-0', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhcos', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.15::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.15', 'versions': [{'status': 'unaffected', 'version': '415.92.202605060220-0', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhcos', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.16::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.16', 'versions': [{'status': 'unaffected', 'version': '416.94.202605200242-0', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhcos', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.17::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.17', 'versions': [{'status': 'unaffected', 'version': '417.94.202605112123-0', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhcos', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.18::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.18', 'versions': [{'status': 'unaffected', 'version': '418.94.202605260517-0', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhcos', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.19::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.19', 'versions': [{'status': 'unaffected', 'version': '4.19.9.6.202605201155-0', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhcos', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhosemc:1.0::el8'], 'vendor': 'Red Hat', 'product': 'RHEL-8 based Middleware Containers', 'versions': [{'status': 'unaffected', 'version': '7.13.5-4.1777325677', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhpam-7/rhpam-businesscentral-monitoring-rhel8', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhosemc:1.0::el8'], 'vendor': 'Red Hat', 'product': 'RHEL-8 based Middleware Containers', 'versions': [{'status': 'unaffected', 'version': '7.13.5-4.1777325711', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhpam-7/rhpam-businesscentral-rhel8', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhosemc:1.0::el8'], 'vendor': 'Red Hat', 'product': 'RHEL-8 based Middleware Containers', 'versions': [{'status': 'unaffected', 'version': '7.13.5-4.1777325710', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhpam-7/rhpam-controller-rhel8', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhosemc:1.0::el8'], 'vendor': 'Red Hat', 'product': 'RHEL-8 based Middleware Containers', 'versions': [{'status': 'unaffected', 'version': '7.13.5-3.1777325680', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhpam-7/rhpam-dashbuilder-rhel8', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhosemc:1.0::el8'], 'vendor': 'Red Hat', 'product': 'RHEL-8 based Middleware Containers', 'versions': [{'status': 'unaffected', 'version': '7.13.5-4.1777325709', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhpam-7/rhpam-kieserver-rhel8', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhosemc:1.0::el8'], 'vendor': 'Red Hat', 'product': 'RHEL-8 based Middleware Containers', 'versions': [{'status': 'unaffected', 'version': '7.13.5-4.1777325680', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhpam-7/rhpam-process-migration-rhel8', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhosemc:1.0::el8'], 'vendor': 'Red Hat', 'product': 'RHEL-8 based Middleware Containers', 'versions': [{'status': 'unaffected', 'version': '7.13.5-4.1777325708', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhpam-7/rhpam-smartrouter-rhel8', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ai_inference_server:3.2::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat AI Inference Server 3.2', 'versions': [{'status': 'unaffected', 'version': '1779223654', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhaiis/vllm-cuda-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ai_inference_server:3.2::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat AI Inference Server 3.2', 'versions': [{'status': 'unaffected', 'version': '1779223651', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhaiis/vllm-rocm-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ai_inference_server:3.2::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat AI Inference Server 3.2', 'versions': [{'status': 'unaffected', 'version': '1780681984', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhaiis/model-opt-cuda-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ai_inference_server:3.3::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat AI Inference Server 3.3', 'versions': [{'status': 'unaffected', 'version': '1778244559', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhaiis/model-opt-cuda-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ai_inference_server:3.3::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat AI Inference Server 3.3', 'versions': [{'status': 'unaffected', 'version': '1778244531', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhaiis/vllm-rocm-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ai_inference_server:3.3::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat AI Inference Server 3.3', 'versions': [{'status': 'unaffected', 'version': '1778274666', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhaiis/vllm-cuda-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ai_inference_server:3.3::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat AI Inference Server 3.3', 'versions': [{'status': 'unaffected', 'version': '1778244546', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhaiis/vllm-spyre-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:discovery:2::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Discovery 2', 'versions': [{'status': 'unaffected', 'version': '1778101579', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'discovery/discovery-server-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:discovery:2::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Discovery 2', 'versions': [{'status': 'unaffected', 'version': '1778156756', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'discovery/discovery-ui-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:hummingbird:1'], 'vendor': 'Red Hat', 'product': 'Red Hat Hardened Images', 'versions': [{'status': 'unaffected', 'version': '1.68.1-1.hum1', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'nghttp2-main', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:insights_proxy:1.5::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Insights proxy 1.5', 'versions': [{'status': 'unaffected', 'version': '1776868961', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'insights-proxy/insights-proxy-container-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhui:5::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Update Infrastructure 5', 'versions': [{'status': 'unaffected', 'version': '1776868774', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhui5/cds-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhui:5::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Update Infrastructure 5', 'versions': [{'status': 'unaffected', 'version': '1776868744', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhui5/haproxy-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhui:5::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Update Infrastructure 5', 'versions': [{'status': 'unaffected', 'version': '1776868772', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhui5/installer-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhui:5::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Update Infrastructure 5', 'versions': [{'status': 'unaffected', 'version': '1776868842', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhui5/rhua-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhui:5::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Update Infrastructure 5', 'versions': [{'status': 'unaffected', 'version': '1777459441', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhui5/cds-kubernetes-tp-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhui:5::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Update Infrastructure 5', 'versions': [{'status': 'unaffected', 'version': '1777454300', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhui5/installer-tp-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhui:5::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Update Infrastructure 5', 'versions': [{'status': 'unaffected', 'version': '1777459504', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhui5/rhua-tp-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}] -
CVE Modified by 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
Jul. 14, 2026
Action Type Old Value New Value Added Affected [{'vendor': 'Siemens', 'product': 'SIMATIC S7-1500 CPU 1518-4 PN/DP MFP', 'versions': [{'status': 'affected', 'version': 'V3.1.6', 'lessThan': '*', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'vendor': 'Siemens', 'product': 'SIMATIC S7-1500 CPU 1518-4 PN/DP MFP', 'versions': [{'status': 'affected', 'version': 'V3.1.6', 'lessThan': '*', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'vendor': 'Siemens', 'product': 'SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP', 'versions': [{'status': 'affected', 'version': 'V3.1.6', 'lessThan': '*', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'vendor': 'Siemens', 'product': 'SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP', 'versions': [{'status': 'affected', 'version': 'V3.1.6', 'lessThan': '*', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'vendor': 'Siemens', 'product': 'SIPLUS S7-1500 CPU 1518-4 PN/DP MFP', 'versions': [{'status': 'affected', 'version': 'V3.1.6', 'lessThan': '*', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}] Added Reference https://cert-portal.siemens.com/productcert/html/ssa-019113.html -
CVE Modified by 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Jun. 30, 2026
Action Type Old Value New Value Added Affected [{'cpes': ['cpe:/a:redhat:jboss_core_services:1::el7'], 'vendor': 'Red Hat', 'product': 'Red Hat JBoss Core Services on RHEL 7 Server', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:jboss_core_services:1::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat JBoss Core Services on RHEL 8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.12::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.12', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhosemc:1.0::el8'], 'vendor': 'Red Hat', 'product': 'Middleware Containers for OpenShift', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.13::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.13', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.14::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.14', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.15::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.15', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.16::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.16', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.17::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.17', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.18::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.18', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.19::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.19', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux_eus:10.0'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream EUS (v. 10.0)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10.1'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream (v. 10)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:8::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream (v. 8)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.4::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream EUS (v.9.4)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.6::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream EUS (v.9.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:9::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream (v. 9)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux_eus:10.0'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS EUS (v. 10.0)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10.1'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS (v. 10)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:8::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS (v. 8)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_aus:8.2::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS AUS (v. 8.2)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_aus:8.4::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS AUS (v.8.4)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_eus_long_life:8.4::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_aus:8.6::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS AUS (v.8.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_e4s:8.6::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS E4S (v.8.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_tus:8.6::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS TUS (v.8.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_e4s:8.8::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS E4S (v.8.8)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_tus:8.8::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS TUS (v.8.8)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_e4s:9.0::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS E4S (v.9.0)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_e4s:9.2::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS E4S (v.9.2)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_eus:9.4::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS EUS (v.9.4)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_eus:9.6::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS EUS (v.9.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:9::baseos'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux BaseOS (v. 9)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux_eus:10.0'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10.1'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:8::crb'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux CRB (v. 8)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.4::crb'], 'vendor': 'Red Hat', 'product': 'Red Hat CodeReady Linux Builder EUS (v.9.4)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.6::crb'], 'vendor': 'Red Hat', 'product': 'Red Hat CodeReady Linux Builder EUS (v.9.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:9::crb'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ai_inference_server:3.2::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat AI Inference Server 3.2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ai_inference_server:3.3::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat AI Inference Server 3.3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:discovery:2::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Discovery 2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:hummingbird:1'], 'vendor': 'Red Hat', 'product': 'Red Hat Hardened Images', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:insights_proxy:1.5::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Insights proxy 1.5', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:jboss_core_services:1'], 'vendor': 'Red Hat', 'product': 'Red Hat JBoss Core Services 2.4.62.SP4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhui:5::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Update Infrastructure 5', 'defaultStatus': 'affected'}] Added CVSS V3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Added CWE CWE-617 Added Reference https://access.redhat.com/errata/RHSA-2026:10065 Added Reference https://access.redhat.com/errata/RHSA-2026:11768 Added Reference https://access.redhat.com/errata/RHSA-2026:13812 Added Reference https://access.redhat.com/errata/RHSA-2026:14773 Added Reference https://access.redhat.com/errata/RHSA-2026:14937 Added Reference https://access.redhat.com/errata/RHSA-2026:15087 Added Reference https://access.redhat.com/errata/RHSA-2026:16008 Added Reference https://access.redhat.com/errata/RHSA-2026:16009 Added Reference https://access.redhat.com/errata/RHSA-2026:16030 Added Reference https://access.redhat.com/errata/RHSA-2026:16174 Added Reference https://access.redhat.com/errata/RHSA-2026:17596 Added Reference https://access.redhat.com/errata/RHSA-2026:19724 Added Reference https://access.redhat.com/errata/RHSA-2026:19725 Added Reference https://access.redhat.com/errata/RHSA-2026:20040 Added Reference https://access.redhat.com/errata/RHSA-2026:20087 Added Reference https://access.redhat.com/errata/RHSA-2026:21656 Added Reference https://access.redhat.com/errata/RHSA-2026:21690 Added Reference https://access.redhat.com/errata/RHSA-2026:21695 Added Reference https://access.redhat.com/errata/RHSA-2026:25096 Added Reference https://access.redhat.com/errata/RHSA-2026:27200 Added Reference https://access.redhat.com/errata/RHSA-2026:27201 Added Reference https://access.redhat.com/errata/RHSA-2026:6190 Added Reference https://access.redhat.com/errata/RHSA-2026:7080 Added Reference https://access.redhat.com/errata/RHSA-2026:7123 Added Reference https://access.redhat.com/errata/RHSA-2026:7302 Added Reference https://access.redhat.com/errata/RHSA-2026:7310 Added Reference https://access.redhat.com/errata/RHSA-2026:7350 Added Reference https://access.redhat.com/errata/RHSA-2026:7666 Added Reference https://access.redhat.com/errata/RHSA-2026:7667 Added Reference https://access.redhat.com/errata/RHSA-2026:7668 Added Reference https://access.redhat.com/errata/RHSA-2026:7670 Added Reference https://access.redhat.com/errata/RHSA-2026:7675 Added Reference https://access.redhat.com/errata/RHSA-2026:7896 Added Reference https://access.redhat.com/errata/RHSA-2026:7983 Added Reference https://access.redhat.com/errata/RHSA-2026:8339 Added Reference https://access.redhat.com/errata/RHSA-2026:8538 Added Reference https://access.redhat.com/errata/RHSA-2026:8539 Added Reference https://access.redhat.com/errata/RHSA-2026:8540 Added Reference https://access.redhat.com/errata/RHSA-2026:8541 Added Reference https://access.redhat.com/errata/RHSA-2026:8545 Added Reference https://access.redhat.com/errata/RHSA-2026:8546 Added Reference https://access.redhat.com/errata/RHSA-2026:8547 Added Reference https://access.redhat.com/errata/RHSA-2026:8548 Added Reference https://access.redhat.com/errata/RHSA-2026:8868 Added Reference https://access.redhat.com/errata/RHSA-2026:9711 Added Reference https://access.redhat.com/errata/RHSA-2026:9832 Added Reference https://access.redhat.com/errata/RHSA-2026:9874 Added Reference https://access.redhat.com/security/cve/CVE-2026-27135 Added Reference https://bugzilla.redhat.com/show_bug.cgi?id=2448754 Added Reference https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27135.json -
CVE Modified by [email protected]
Jun. 17, 2026
Action Type Old Value New Value Added Affected [{'vendor': 'nghttp2', 'product': 'nghttp2', 'versions': [{'status': 'affected', 'version': '< 1.68.1'}]}] -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Jun. 17, 2026
Action Type Old Value New Value Added SSVC {'id': 'CVE-2026-27135', 'role': 'CISA Coordinator', 'options': [{'exploitation': 'none'}, {'automatable': 'yes'}, {'technicalImpact': 'partial'}], 'version': '2.0.3', 'timestamp': '2026-03-18T18:36:41.841104Z'} -
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
May. 13, 2026
Action Type Old Value New Value Added Reference https://lists.debian.org/debian-lts-announce/2026/05/msg00025.html -
Initial Analysis by [email protected]
Mar. 23, 2026
Action Type Old Value New Value Added CPE Configuration OR *cpe:2.3:a:nghttp2:nghttp2:*:*:*:*:*:*:*:* versions up to (excluding) 1.68.1 Added Reference Type GitHub, Inc.: https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1 Types: Patch Added Reference Type GitHub, Inc.: https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6 Types: Patch, Vendor Advisory Added Reference Type CVE: http://www.openwall.com/lists/oss-security/2026/03/20/3 Types: Mailing List, Third Party Advisory -
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Mar. 20, 2026
Action Type Old Value New Value Added Reference http://www.openwall.com/lists/oss-security/2026/03/20/3 -
New CVE Received by [email protected]
Mar. 18, 2026
Action Type Old Value New Value Added Description nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2` is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available. Added CVSS V3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Added CWE CWE-617 Added Reference https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1 Added Reference https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6
EPSS is a daily estimate of the probability of exploitation activity
being observed over the next 30 days. Following chart shows the EPSS
score history of the vulnerability.