7.5
HIGH
CVSS 3.1
CVE-2026-32280
Unexpected work during chain building in crypto/x509
Overview
Description
During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.
Details
INFO
Published Date :
April 8, 2026, 2:16 a.m.
Last Modified :
July 2, 2026, 12:17 p.m.
Remotely Exploit :
Yes !
Source :
[email protected]
Scoring
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework
for assessing the severity of vulnerabilities in software and systems.
We collect and displays CVSS scores from various sources for each CVE.
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | |||||
| CVSS 3.1 | HIGH | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | ||||
| CVSS 3.1 | HIGH | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c |
Solution
Limit the amount of intermediate certificates processed during chain building to prevent denial of service.
- Limit the number of intermediate certificates processed.
- Update the relevant crypto libraries.
Public PoC/Exploit Available at Github
CVE-2026-32280 has a 2 public
PoC/Exploit available at Github.
Go to the Public Exploits tab to see the list.
References
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-32280.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-32280 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-32280
weaknesses.
CAPEC-125: Flooding Flooding
CAPEC-130: Excessive Allocation Excessive Allocation
CAPEC-147: XML Ping of the Death XML Ping of the Death
CAPEC-197: Exponential Data Expansion Exponential Data Expansion
CAPEC-229: Serialized Data Parameter Blowup Serialized Data Parameter Blowup
CAPEC-230: Serialized Data with Nested Payloads Serialized Data with Nested Payloads
CAPEC-231: Oversized Serialized Data Payloads Oversized Serialized Data Payloads
CAPEC-469: HTTP DoS HTTP DoS
CAPEC-482: TCP Flood TCP Flood
CAPEC-486: UDP Flood UDP Flood
CAPEC-487: ICMP Flood ICMP Flood
CAPEC-488: HTTP Flood HTTP Flood
CAPEC-489: SSL Flood SSL Flood
CAPEC-490: Amplification Amplification
CAPEC-491: Quadratic Data Expansion Quadratic Data Expansion
CAPEC-493: SOAP Array Blowup SOAP Array Blowup
CAPEC-494: TCP Fragmentation TCP Fragmentation
CAPEC-495: UDP Fragmentation UDP Fragmentation
CAPEC-496: ICMP Fragmentation ICMP Fragmentation
CAPEC-528: XML Flood XML Flood
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
ollama based on v0.36.0 - fixed all CVE
Updated: 3 weeks, 6 days ago
0 stars
0 fork
0 watcher
Born at : June 8, 2026, 1:06 p.m.
This repo has been linked 33 different CVEs too.
All Public RunWhen Helm Charts - Managed by terraform
Shell Dockerfile Go Template
Updated: 1 week, 3 days ago
1 stars
1 fork
1 watcher
Born at : Sept. 18, 2023, 10:09 a.m.
This repo has been linked 111 different CVEs too.
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-32280 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-32280 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Jul. 02, 2026
Action Type Old Value New Value Added Reference https://access.redhat.com/errata/RHSA-2026:28886 Added Reference https://access.redhat.com/errata/RHSA-2026:34192 Added Reference https://access.redhat.com/errata/RHSA-2026:34196 Added Reference https://access.redhat.com/errata/RHSA-2026:34197 Added Reference https://access.redhat.com/errata/RHSA-2026:34365 Changed Affected [{'cpes': ['cpe:/a:redhat:ansible_automation_platform:2.6::el10', 'cpe:/a:redhat:ansible_automation_platform_developer:2.6::el10'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2.6 for RHEL 10', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_els:7'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux Server (v. 7 ELS)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ansible_automation_platform:2.5::el8', 'cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8', 'cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2.5 for RHEL 8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.18::el8', 'cpe:/a:redhat:openshift:4.18::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.18', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:satellite:6.16::el8', 'cpe:/a:redhat:satellite_capsule:6.16::el8', 'cpe:/a:redhat:satellite_maintenance:6.16::el8', 'cpe:/a:redhat:satellite_utils:6.16::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Satellite 6.16 for RHEL 8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ansible_automation_platform:2.5::el9', 'cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9', 'cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2.5 for RHEL 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ansible_automation_platform:2.6::el9', 'cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9', 'cpe:/a:redhat:ansible_automation_platform_inside:2.6::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2.6 for RHEL 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:cryostat:4::el9'], 'vendor': 'Red Hat', 'product': 'Cryostat 4 on RHEL 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openstack:17.1', 'cpe:/a:redhat:openstack:17.1::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenStack Platform 17.1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.19::el8', 'cpe:/a:redhat:openshift:4.19::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.19', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:satellite:6.16::el9', 'cpe:/a:redhat:satellite_capsule:6.16::el9', 'cpe:/a:redhat:satellite_maintenance:6.16::el9', 'cpe:/a:redhat:satellite_utils:6.16::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Satellite 6.16 for RHEL 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux_eus:10.0'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream EUS (v. 10.0)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10.1', 'cpe:/o:redhat:enterprise_linux:10.2'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream (v. 10)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:8::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream (v. 8)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_aus:8.6::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream AUS (v.8.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_e4s:8.6::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream E4S (v.8.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_tus:8.6::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream TUS (v.8.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.4::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream EUS (v.9.4)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.6::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream EUS (v.9.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:9::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream (v. 9)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux_eus:10.0'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10.2'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.6::crb'], 'vendor': 'Red Hat', 'product': 'Red Hat CodeReady Linux Builder EUS (v.9.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:9::crb'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9'], 'vendor': 'Red Hat', 'product': 'Custom Metric Autoscaler 2.19', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:apache_camel_hawtio:4.4::el9'], 'vendor': 'Red Hat', 'product': 'HawtIO HawtIO 4.4.0', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:logging:6.0::el9'], 'vendor': 'Red Hat', 'product': 'Logging Subsystem for Red Hat OpenShift 6.0', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:logging:6.4::el9'], 'vendor': 'Red Hat', 'product': 'Logging Subsystem for Red Hat OpenShift 6.4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_globalhub:1.4::el9'], 'vendor': 'Red Hat', 'product': 'Multicluster Global Hub 1.4.5', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_globalhub:1.5::el9'], 'vendor': 'Red Hat', 'product': 'Multicluster Global Hub 1.5.4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_globalhub:1.6::el9'], 'vendor': 'Red Hat', 'product': 'Multicluster Global Hub 1.6.2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:network_observ_optr:1.11::el9'], 'vendor': 'Red Hat', 'product': 'Network Observability (NETOBSERV) 1.11.2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_api_data_protection:1.4::el9'], 'vendor': 'Red Hat', 'product': 'OpenShift API for Data Protection 1.4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_api_data_protection:1.5::el9'], 'vendor': 'Red Hat', 'product': 'OpenShift API for Data Protection 1.5', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_compliance_operator:1::el9'], 'vendor': 'Red Hat', 'product': 'OpenShift Compliance Operator 1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:acm:2.14::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Advanced Cluster Management for Kubernetes 2.14', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:advanced_cluster_security:4.10::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Advanced Cluster Security for Kubernetes 4.10', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:advanced_cluster_security:4.9::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Advanced Cluster Security for Kubernetes 4.9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ansible_automation_platform:2.6::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2.6', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhdh:1.8::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Developer Hub 1.8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhdh:1.9::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Developer Hub 1.9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Lightspeed (formerly Insights) for Runtimes 1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_ai:2.25::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift AI 2.25', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_builds:1.7::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Builds 1.7.3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_devspaces:3.28::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Dev Spaces 3.28', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:service_mesh:2.6::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Service Mesh 2.6', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:service_mesh:3.0::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Service Mesh 3.0', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:service_mesh:3.1::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Service Mesh 3.1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:service_mesh:3.2::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Service Mesh 3.2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:service_mesh:3.3::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Service Mesh 3.3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_distributed_tracing:3.9::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift distributed tracing 3.9.3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:stf:1.5::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenStack 1.5', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.10::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.10', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.14::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.14', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.15::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.15', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.16::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.16', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.17::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.17', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.9::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:trusted_artifact_signer:1.3::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Trusted Artifact Signer 1.3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:webterminal:1.11::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Web Terminal 1.11', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:webterminal:1.12::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Web Terminal 1.12', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:webterminal:1.13::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Web Terminal 1.13', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:webterminal:1.14::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Web Terminal 1.14', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:webterminal:1.15::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Web Terminal 1.15', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:mirror_registry:2.0::el8'], 'vendor': 'Red Hat', 'product': 'mirror registry for Red Hat OpenShift 2.0', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine:2.10::el9'], 'vendor': 'Red Hat', 'product': 'multicluster engine for Kubernetes 2.10', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine:2.11::el9'], 'vendor': 'Red Hat', 'product': 'multicluster engine for Kubernetes 2.11', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine:2.17::el9'], 'vendor': 'Red Hat', 'product': 'multicluster engine for Kubernetes 2.17', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine:2.6::el8'], 'vendor': 'Red Hat', 'product': 'multicluster engine for Kubernetes 2.6', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine:2.8::el8'], 'vendor': 'Red Hat', 'product': 'multicluster engine for Kubernetes 2.8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:assisted_installer:2'], 'vendor': 'Red Hat', 'product': 'Assisted Installer for Red Hat OpenShift Container Platform 2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:cert_manager:1'], 'vendor': 'Red Hat', 'product': 'cert-manager Operator for Red Hat OpenShift', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:confidential_compute_attestation:1'], 'vendor': 'Red Hat', 'product': 'Confidential Compute Attestation', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:deployment_validator_operator'], 'vendor': 'Red Hat', 'product': 'Deployment Validation Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:external_secrets_operator:1'], 'vendor': 'Red Hat', 'product': 'External Secrets Operator for Red Hat OpenShift', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ext_dns_optr:1'], 'vendor': 'Red Hat', 'product': 'ExternalDNS Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:workload_availability_far:0'], 'vendor': 'Red Hat', 'product': 'Fence Agents Remediation Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_file_integrity_operator:1'], 'vendor': 'Red Hat', 'product': 'File Integrity Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:gatekeeper:3'], 'vendor': 'Red Hat', 'product': 'Gatekeeper 3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:logging:5'], 'vendor': 'Red Hat', 'product': 'Logging Subsystem for Red Hat OpenShift', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:lvms:4'], 'vendor': 'Red Hat', 'product': 'Logical Volume Manager Storage', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:migration_toolkit_applications:8'], 'vendor': 'Red Hat', 'product': 'Migration Toolkit for Applications 8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhmt:1'], 'vendor': 'Red Hat', 'product': 'Migration Toolkit for Containers', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:mirror_registry:1'], 'vendor': 'Red Hat', 'product': 'mirror registry for Red Hat OpenShift', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine'], 'vendor': 'Red Hat', 'product': 'Multicluster Engine for Kubernetes', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ocp_tools'], 'vendor': 'Red Hat', 'product': 'OpenShift Developer Tools and Services', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_lightspeed'], 'vendor': 'Red Hat', 'product': 'OpenShift Lightspeed', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_pipelines:1'], 'vendor': 'Red Hat', 'product': 'OpenShift Pipelines', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:serverless:1'], 'vendor': 'Red Hat', 'product': 'OpenShift Serverless', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:red_hat_3scale_amp:2'], 'vendor': 'Red Hat', 'product': 'Red Hat 3scale API Management Platform 2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:acm:2'], 'vendor': 'Red Hat', 'product': 'Red Hat Advanced Cluster Management for Kubernetes 2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:certifications:9'], 'vendor': 'Red Hat', 'product': 'Red Hat Certification Program for Red Hat Enterprise Linux 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:connectivity_link:1'], 'vendor': 'Red Hat', 'product': 'Red Hat Connectivity Link 1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:edge_manager:1'], 'vendor': 'Red Hat', 'product': 'Red Hat Edge Manager 1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 10', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:7'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 7', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:8'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:9'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux_ai:3'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AI (RHEL AI) 3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_cluster_manager_cli:1'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Cluster Manager CLI', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_data_foundation:4'], 'vendor': 'Red Hat', 'product': 'Red Hat Openshift Data Foundation 4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:devworkspace'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Dev Workspaces Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_gitops:1'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift GitOps', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_service_on_aws:1'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift on AWS', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Virtualization 4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openstack:16.2'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenStack Platform 16.2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openstack:18.0'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenStack Platform 18.0', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:satellite:6'], 'vendor': 'Red Hat', 'product': 'Red Hat Satellite 6', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_security_profiles_operator:1'], 'vendor': 'Red Hat', 'product': 'Security Profiles Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:zero_trust_workload_identity_manager:1'], 'vendor': 'Red Hat', 'product': 'Zero Trust Workload Identity Manager', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:zero_trust_workload_identity_manager:0'], 'vendor': 'Red Hat', 'product': 'Zero Trust Workload Identity Manager - Tech Preview', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:workload_availability_mdr:0'], 'vendor': 'Red Hat', 'product': 'Machine Deletion Remediation Operator', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:workload_availability_nhc:0'], 'vendor': 'Red Hat', 'product': 'Node HealthCheck Operator', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:service_mesh:2'], 'vendor': 'Red Hat', 'product': 'OpenShift Service Mesh 2', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:service_mesh:3'], 'vendor': 'Red Hat', 'product': 'OpenShift Service Mesh 3', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:openshift_power_monitoring'], 'vendor': 'Red Hat', 'product': 'Power monitoring for Red Hat OpenShift', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:ansible_automation_platform:2'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:hummingbird:1'], 'vendor': 'Red Hat', 'product': 'Red Hat Hardened Images', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:openshift_ai'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift AI (RHOAI)', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:windows_machine_config'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift for Windows Containers', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:quay:3'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:service_interconnect:1'], 'vendor': 'Red Hat', 'product': 'Red Hat Service Interconnect 1', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:service_interconnect:2'], 'vendor': 'Red Hat', 'product': 'Red Hat Service Interconnect 2', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:amq_streams:3'], 'vendor': 'Red Hat', 'product': 'streams for Apache Kafka 3', 'defaultStatus': 'unaffected'}] [{'cpes': ['cpe:/a:redhat:ansible_automation_platform:2.6::el10', 'cpe:/a:redhat:ansible_automation_platform_developer:2.6::el10'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2.6 for RHEL 10', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_els:7'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux Server (v. 7 ELS)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ansible_automation_platform:2.5::el8', 'cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8', 'cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2.5 for RHEL 8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.14::el8', 'cpe:/a:redhat:openshift:4.14::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.14', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.18::el8', 'cpe:/a:redhat:openshift:4.18::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.18', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:satellite:6.16::el8', 'cpe:/a:redhat:satellite_capsule:6.16::el8', 'cpe:/a:redhat:satellite_maintenance:6.16::el8', 'cpe:/a:redhat:satellite_utils:6.16::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Satellite 6.16 for RHEL 8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ansible_automation_platform:2.5::el9', 'cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9', 'cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2.5 for RHEL 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ansible_automation_platform:2.6::el9', 'cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9', 'cpe:/a:redhat:ansible_automation_platform_inside:2.6::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2.6 for RHEL 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:cryostat:4::el9'], 'vendor': 'Red Hat', 'product': 'Cryostat 4 on RHEL 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openstack:17.1', 'cpe:/a:redhat:openstack:17.1::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenStack Platform 17.1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.19::el8', 'cpe:/a:redhat:openshift:4.19::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.19', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:satellite:6.16::el9', 'cpe:/a:redhat:satellite_capsule:6.16::el9', 'cpe:/a:redhat:satellite_maintenance:6.16::el9', 'cpe:/a:redhat:satellite_utils:6.16::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Satellite 6.16 for RHEL 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:satellite:6.19::el9', 'cpe:/a:redhat:satellite_capsule:6.19::el9', 'cpe:/a:redhat:satellite_maintenance:6.19::el9', 'cpe:/a:redhat:satellite_utils:6.19::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Satellite 6.19 for RHEL 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux_eus:10.0'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream EUS (v. 10.0)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10.1', 'cpe:/o:redhat:enterprise_linux:10.2'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream (v. 10)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:8::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream (v. 8)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_aus:8.6::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream AUS (v.8.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_e4s:8.6::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream E4S (v.8.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_tus:8.6::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream TUS (v.8.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_e4s:9.4::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream E4S (v.9.4)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.4::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream EUS (v.9.4)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.6::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream EUS (v.9.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:9::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream (v. 9)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux_eus:10.0'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10.2'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.6::crb'], 'vendor': 'Red Hat', 'product': 'Red Hat CodeReady Linux Builder EUS (v.9.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:9::crb'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9'], 'vendor': 'Red Hat', 'product': 'Custom Metric Autoscaler 2.19', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:apache_camel_hawtio:4.4::el9'], 'vendor': 'Red Hat', 'product': 'HawtIO HawtIO 4.4.0', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:logging:6.0::el9'], 'vendor': 'Red Hat', 'product': 'Logging Subsystem for Red Hat OpenShift 6.0', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:logging:6.4::el9'], 'vendor': 'Red Hat', 'product': 'Logging Subsystem for Red Hat OpenShift 6.4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_globalhub:1.4::el9'], 'vendor': 'Red Hat', 'product': 'Multicluster Global Hub 1.4.5', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_globalhub:1.5::el9'], 'vendor': 'Red Hat', 'product': 'Multicluster Global Hub 1.5.4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_globalhub:1.6::el9'], 'vendor': 'Red Hat', 'product': 'Multicluster Global Hub 1.6.2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:network_observ_optr:1.11::el9'], 'vendor': 'Red Hat', 'product': 'Network Observability (NETOBSERV) 1.11.2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_api_data_protection:1.4::el9'], 'vendor': 'Red Hat', 'product': 'OpenShift API for Data Protection 1.4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_api_data_protection:1.5::el9'], 'vendor': 'Red Hat', 'product': 'OpenShift API for Data Protection 1.5', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_compliance_operator:1::el9'], 'vendor': 'Red Hat', 'product': 'OpenShift Compliance Operator 1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:acm:2.14::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Advanced Cluster Management for Kubernetes 2.14', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:advanced_cluster_security:4.10::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Advanced Cluster Security for Kubernetes 4.10', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:advanced_cluster_security:4.9::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Advanced Cluster Security for Kubernetes 4.9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ansible_automation_platform:2.6::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2.6', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhdh:1.8::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Developer Hub 1.8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhdh:1.9::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Developer Hub 1.9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Lightspeed (formerly Insights) for Runtimes 1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_ai:2.25::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift AI 2.25', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_builds:1.7::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Builds 1.7.3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_devspaces:3.28::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Dev Spaces 3.28', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:service_mesh:2.6::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Service Mesh 2.6', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:service_mesh:3.0::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Service Mesh 3.0', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:service_mesh:3.1::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Service Mesh 3.1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:service_mesh:3.2::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Service Mesh 3.2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:service_mesh:3.3::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Service Mesh 3.3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_distributed_tracing:3.9::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift distributed tracing 3.9.3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:stf:1.5::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenStack 1.5', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.10::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.10', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.14::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.14', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.15::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.15', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.16::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.16', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.17::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.17', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.9::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:trusted_artifact_signer:1.3::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Trusted Artifact Signer 1.3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:webterminal:1.11::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Web Terminal 1.11', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:webterminal:1.12::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Web Terminal 1.12', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:webterminal:1.13::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Web Terminal 1.13', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:webterminal:1.14::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Web Terminal 1.14', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:webterminal:1.15::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Web Terminal 1.15', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:mirror_registry:2.0::el8'], 'vendor': 'Red Hat', 'product': 'mirror registry for Red Hat OpenShift 2.0', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine:2.10::el9'], 'vendor': 'Red Hat', 'product': 'multicluster engine for Kubernetes 2.10', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine:2.11::el9'], 'vendor': 'Red Hat', 'product': 'multicluster engine for Kubernetes 2.11', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine:2.17::el9'], 'vendor': 'Red Hat', 'product': 'multicluster engine for Kubernetes 2.17', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine:2.6::el8'], 'vendor': 'Red Hat', 'product': 'multicluster engine for Kubernetes 2.6', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine:2.8::el8'], 'vendor': 'Red Hat', 'product': 'multicluster engine for Kubernetes 2.8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:assisted_installer:2'], 'vendor': 'Red Hat', 'product': 'Assisted Installer for Red Hat OpenShift Container Platform 2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:cert_manager:1'], 'vendor': 'Red Hat', 'product': 'cert-manager Operator for Red Hat OpenShift', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:confidential_compute_attestation:1'], 'vendor': 'Red Hat', 'product': 'Confidential Compute Attestation', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:deployment_validator_operator'], 'vendor': 'Red Hat', 'product': 'Deployment Validation Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:external_secrets_operator:1'], 'vendor': 'Red Hat', 'product': 'External Secrets Operator for Red Hat OpenShift', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ext_dns_optr:1'], 'vendor': 'Red Hat', 'product': 'ExternalDNS Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:workload_availability_far:0'], 'vendor': 'Red Hat', 'product': 'Fence Agents Remediation Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_file_integrity_operator:1'], 'vendor': 'Red Hat', 'product': 'File Integrity Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:gatekeeper:3'], 'vendor': 'Red Hat', 'product': 'Gatekeeper 3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:logging:5'], 'vendor': 'Red Hat', 'product': 'Logging Subsystem for Red Hat OpenShift', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:lvms:4'], 'vendor': 'Red Hat', 'product': 'Logical Volume Manager Storage', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhmt:1'], 'vendor': 'Red Hat', 'product': 'Migration Toolkit for Containers', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:mirror_registry:1'], 'vendor': 'Red Hat', 'product': 'mirror registry for Red Hat OpenShift', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine'], 'vendor': 'Red Hat', 'product': 'Multicluster Engine for Kubernetes', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ocp_tools'], 'vendor': 'Red Hat', 'product': 'OpenShift Developer Tools and Services', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_lightspeed'], 'vendor': 'Red Hat', 'product': 'OpenShift Lightspeed', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_pipelines:1'], 'vendor': 'Red Hat', 'product': 'OpenShift Pipelines', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:serverless:1'], 'vendor': 'Red Hat', 'product': 'OpenShift Serverless', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:red_hat_3scale_amp:2'], 'vendor': 'Red Hat', 'product': 'Red Hat 3scale API Management Platform 2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:acm:2'], 'vendor': 'Red Hat', 'product': 'Red Hat Advanced Cluster Management for Kubernetes 2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:certifications:9'], 'vendor': 'Red Hat', 'product': 'Red Hat Certification Program for Red Hat Enterprise Linux 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:connectivity_link:1'], 'vendor': 'Red Hat', 'product': 'Red Hat Connectivity Link 1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:edge_manager:1'], 'vendor': 'Red Hat', 'product': 'Red Hat Edge Manager 1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 10', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:7'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 7', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:8'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:9'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux_ai:3'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AI (RHEL AI) 3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_cluster_manager_cli:1'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Cluster Manager CLI', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_data_foundation:4'], 'vendor': 'Red Hat', 'product': 'Red Hat Openshift Data Foundation 4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:devworkspace'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Dev Workspaces Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_gitops:1'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift GitOps', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_service_on_aws:1'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift on AWS', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Virtualization 4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openstack:16.2'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenStack Platform 16.2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openstack:18.0'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenStack Platform 18.0', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:satellite:6'], 'vendor': 'Red Hat', 'product': 'Red Hat Satellite 6', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_security_profiles_operator:1'], 'vendor': 'Red Hat', 'product': 'Security Profiles Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:zero_trust_workload_identity_manager:1'], 'vendor': 'Red Hat', 'product': 'Zero Trust Workload Identity Manager', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:zero_trust_workload_identity_manager:0'], 'vendor': 'Red Hat', 'product': 'Zero Trust Workload Identity Manager - Tech Preview', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:workload_availability_mdr:0'], 'vendor': 'Red Hat', 'product': 'Machine Deletion Remediation Operator', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:migration_toolkit_applications:8'], 'vendor': 'Red Hat', 'product': 'Migration Toolkit for Applications 8', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:workload_availability_nhc:0'], 'vendor': 'Red Hat', 'product': 'Node HealthCheck Operator', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:service_mesh:2'], 'vendor': 'Red Hat', 'product': 'OpenShift Service Mesh 2', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:service_mesh:3'], 'vendor': 'Red Hat', 'product': 'OpenShift Service Mesh 3', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:openshift_power_monitoring'], 'vendor': 'Red Hat', 'product': 'Power monitoring for Red Hat OpenShift', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:ansible_automation_platform:2'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:hummingbird:1'], 'vendor': 'Red Hat', 'product': 'Red Hat Hardened Images', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:openshift_ai'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift AI (RHOAI)', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:windows_machine_config'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift for Windows Containers', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:quay:3'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:service_interconnect:1'], 'vendor': 'Red Hat', 'product': 'Red Hat Service Interconnect 1', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:service_interconnect:2'], 'vendor': 'Red Hat', 'product': 'Red Hat Service Interconnect 2', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:amq_streams:3'], 'vendor': 'Red Hat', 'product': 'streams for Apache Kafka 3', 'defaultStatus': 'unaffected'}] -
CVE Modified by 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Jul. 01, 2026
Action Type Old Value New Value Added Reference https://access.redhat.com/errata/RHSA-2026:33722 Changed Affected [{'cpes': ['cpe:/a:redhat:ansible_automation_platform:2.6::el10', 'cpe:/a:redhat:ansible_automation_platform_developer:2.6::el10'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2.6 for RHEL 10', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_els:7'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux Server (v. 7 ELS)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ansible_automation_platform:2.5::el8', 'cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8', 'cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2.5 for RHEL 8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.18::el8', 'cpe:/a:redhat:openshift:4.18::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.18', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:satellite:6.16::el8', 'cpe:/a:redhat:satellite_capsule:6.16::el8', 'cpe:/a:redhat:satellite_maintenance:6.16::el8', 'cpe:/a:redhat:satellite_utils:6.16::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Satellite 6.16 for RHEL 8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ansible_automation_platform:2.5::el9', 'cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9', 'cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2.5 for RHEL 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ansible_automation_platform:2.6::el9', 'cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9', 'cpe:/a:redhat:ansible_automation_platform_inside:2.6::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2.6 for RHEL 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:cryostat:4::el9'], 'vendor': 'Red Hat', 'product': 'Cryostat 4 on RHEL 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openstack:17.1', 'cpe:/a:redhat:openstack:17.1::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenStack Platform 17.1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.19::el8', 'cpe:/a:redhat:openshift:4.19::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.19', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:satellite:6.16::el9', 'cpe:/a:redhat:satellite_capsule:6.16::el9', 'cpe:/a:redhat:satellite_maintenance:6.16::el9', 'cpe:/a:redhat:satellite_utils:6.16::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Satellite 6.16 for RHEL 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux_eus:10.0'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream EUS (v. 10.0)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10.1', 'cpe:/o:redhat:enterprise_linux:10.2'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream (v. 10)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:8::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream (v. 8)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_aus:8.6::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream AUS (v.8.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_e4s:8.6::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream E4S (v.8.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_tus:8.6::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream TUS (v.8.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.4::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream EUS (v.9.4)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.6::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream EUS (v.9.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:9::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream (v. 9)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux_eus:10.0'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10.2'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.6::crb'], 'vendor': 'Red Hat', 'product': 'Red Hat CodeReady Linux Builder EUS (v.9.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:9::crb'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9'], 'vendor': 'Red Hat', 'product': 'Custom Metric Autoscaler 2.19', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:apache_camel_hawtio:4.4::el9'], 'vendor': 'Red Hat', 'product': 'HawtIO HawtIO 4.4.0', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:logging:6.0::el9'], 'vendor': 'Red Hat', 'product': 'Logging Subsystem for Red Hat OpenShift 6.0', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:logging:6.4::el9'], 'vendor': 'Red Hat', 'product': 'Logging Subsystem for Red Hat OpenShift 6.4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_globalhub:1.4::el9'], 'vendor': 'Red Hat', 'product': 'Multicluster Global Hub 1.4.5', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_globalhub:1.5::el9'], 'vendor': 'Red Hat', 'product': 'Multicluster Global Hub 1.5.4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_globalhub:1.6::el9'], 'vendor': 'Red Hat', 'product': 'Multicluster Global Hub 1.6.2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:network_observ_optr:1.11::el9'], 'vendor': 'Red Hat', 'product': 'Network Observability (NETOBSERV) 1.11.2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_api_data_protection:1.4::el9'], 'vendor': 'Red Hat', 'product': 'OpenShift API for Data Protection 1.4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_api_data_protection:1.5::el9'], 'vendor': 'Red Hat', 'product': 'OpenShift API for Data Protection 1.5', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_compliance_operator:1::el9'], 'vendor': 'Red Hat', 'product': 'OpenShift Compliance Operator 1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:acm:2.14::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Advanced Cluster Management for Kubernetes 2.14', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:advanced_cluster_security:4.10::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Advanced Cluster Security for Kubernetes 4.10', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:advanced_cluster_security:4.9::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Advanced Cluster Security for Kubernetes 4.9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ansible_automation_platform:2.6::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2.6', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhdh:1.8::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Developer Hub 1.8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhdh:1.9::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Developer Hub 1.9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Lightspeed (formerly Insights) for Runtimes 1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_ai:2.25::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift AI 2.25', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_builds:1.7::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Builds 1.7.3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_devspaces:3.28::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Dev Spaces 3.28', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:service_mesh:2.6::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Service Mesh 2.6', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:service_mesh:3.0::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Service Mesh 3.0', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:service_mesh:3.1::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Service Mesh 3.1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:service_mesh:3.2::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Service Mesh 3.2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:service_mesh:3.3::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Service Mesh 3.3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_distributed_tracing:3.9::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift distributed tracing 3.9.3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:stf:1.5::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenStack 1.5', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.14::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.14', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.15::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.15', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.16::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.16', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.17::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.17', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.10::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.9::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:trusted_artifact_signer:1.3::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Trusted Artifact Signer 1.3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:webterminal:1.11::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Web Terminal 1.11', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:webterminal:1.12::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Web Terminal 1.12', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:webterminal:1.13::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Web Terminal 1.13', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:webterminal:1.14::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Web Terminal 1.14', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:webterminal:1.15::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Web Terminal 1.15', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:mirror_registry:2.0::el8'], 'vendor': 'Red Hat', 'product': 'mirror registry for Red Hat OpenShift 2.0', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine:2.10::el9'], 'vendor': 'Red Hat', 'product': 'multicluster engine for Kubernetes 2.10', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine:2.11::el9'], 'vendor': 'Red Hat', 'product': 'multicluster engine for Kubernetes 2.11', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine:2.17::el9'], 'vendor': 'Red Hat', 'product': 'multicluster engine for Kubernetes 2.17', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine:2.6::el8'], 'vendor': 'Red Hat', 'product': 'multicluster engine for Kubernetes 2.6', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine:2.8::el8'], 'vendor': 'Red Hat', 'product': 'multicluster engine for Kubernetes 2.8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:assisted_installer:2'], 'vendor': 'Red Hat', 'product': 'Assisted Installer for Red Hat OpenShift Container Platform 2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:cert_manager:1'], 'vendor': 'Red Hat', 'product': 'cert-manager Operator for Red Hat OpenShift', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:confidential_compute_attestation:1'], 'vendor': 'Red Hat', 'product': 'Confidential Compute Attestation', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:deployment_validator_operator'], 'vendor': 'Red Hat', 'product': 'Deployment Validation Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:external_secrets_operator:1'], 'vendor': 'Red Hat', 'product': 'External Secrets Operator for Red Hat OpenShift', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ext_dns_optr:1'], 'vendor': 'Red Hat', 'product': 'ExternalDNS Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:workload_availability_far:0'], 'vendor': 'Red Hat', 'product': 'Fence Agents Remediation Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_file_integrity_operator:1'], 'vendor': 'Red Hat', 'product': 'File Integrity Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:gatekeeper:3'], 'vendor': 'Red Hat', 'product': 'Gatekeeper 3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:logging:5'], 'vendor': 'Red Hat', 'product': 'Logging Subsystem for Red Hat OpenShift', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:lvms:4'], 'vendor': 'Red Hat', 'product': 'Logical Volume Manager Storage', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:migration_toolkit_applications:8'], 'vendor': 'Red Hat', 'product': 'Migration Toolkit for Applications 8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhmt:1'], 'vendor': 'Red Hat', 'product': 'Migration Toolkit for Containers', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:mirror_registry:1'], 'vendor': 'Red Hat', 'product': 'mirror registry for Red Hat OpenShift', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine'], 'vendor': 'Red Hat', 'product': 'Multicluster Engine for Kubernetes', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:workload_availability_nhc:0'], 'vendor': 'Red Hat', 'product': 'Node HealthCheck Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ocp_tools'], 'vendor': 'Red Hat', 'product': 'OpenShift Developer Tools and Services', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_lightspeed'], 'vendor': 'Red Hat', 'product': 'OpenShift Lightspeed', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_pipelines:1'], 'vendor': 'Red Hat', 'product': 'OpenShift Pipelines', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:serverless:1'], 'vendor': 'Red Hat', 'product': 'OpenShift Serverless', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:red_hat_3scale_amp:2'], 'vendor': 'Red Hat', 'product': 'Red Hat 3scale API Management Platform 2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:acm:2'], 'vendor': 'Red Hat', 'product': 'Red Hat Advanced Cluster Management for Kubernetes 2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:certifications:9'], 'vendor': 'Red Hat', 'product': 'Red Hat Certification Program for Red Hat Enterprise Linux 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:connectivity_link:1'], 'vendor': 'Red Hat', 'product': 'Red Hat Connectivity Link 1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:edge_manager:1'], 'vendor': 'Red Hat', 'product': 'Red Hat Edge Manager 1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 10', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:7'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 7', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:8'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:9'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux_ai:3'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AI (RHEL AI) 3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_cluster_manager_cli:1'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Cluster Manager CLI', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_data_foundation:4'], 'vendor': 'Red Hat', 'product': 'Red Hat Openshift Data Foundation 4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:devworkspace'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Dev Workspaces Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_gitops:1'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift GitOps', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_service_on_aws:1'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift on AWS', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Virtualization 4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openstack:16.2'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenStack Platform 16.2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openstack:18.0'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenStack Platform 18.0', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:satellite:6'], 'vendor': 'Red Hat', 'product': 'Red Hat Satellite 6', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_security_profiles_operator:1'], 'vendor': 'Red Hat', 'product': 'Security Profiles Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:zero_trust_workload_identity_manager:1'], 'vendor': 'Red Hat', 'product': 'Zero Trust Workload Identity Manager', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:zero_trust_workload_identity_manager:0'], 'vendor': 'Red Hat', 'product': 'Zero Trust Workload Identity Manager - Tech Preview', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:workload_availability_mdr:0'], 'vendor': 'Red Hat', 'product': 'Machine Deletion Remediation Operator', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:service_mesh:2'], 'vendor': 'Red Hat', 'product': 'OpenShift Service Mesh 2', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:service_mesh:3'], 'vendor': 'Red Hat', 'product': 'OpenShift Service Mesh 3', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:openshift_power_monitoring'], 'vendor': 'Red Hat', 'product': 'Power monitoring for Red Hat OpenShift', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:ansible_automation_platform:2'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:hummingbird:1'], 'vendor': 'Red Hat', 'product': 'Red Hat Hardened Images', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:openshift_ai'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift AI (RHOAI)', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:windows_machine_config'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift for Windows Containers', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:quay:3'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:service_interconnect:1'], 'vendor': 'Red Hat', 'product': 'Red Hat Service Interconnect 1', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:service_interconnect:2'], 'vendor': 'Red Hat', 'product': 'Red Hat Service Interconnect 2', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:amq_streams:3'], 'vendor': 'Red Hat', 'product': 'streams for Apache Kafka 3', 'defaultStatus': 'unaffected'}] [{'cpes': ['cpe:/a:redhat:ansible_automation_platform:2.6::el10', 'cpe:/a:redhat:ansible_automation_platform_developer:2.6::el10'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2.6 for RHEL 10', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_els:7'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux Server (v. 7 ELS)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ansible_automation_platform:2.5::el8', 'cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8', 'cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2.5 for RHEL 8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.18::el8', 'cpe:/a:redhat:openshift:4.18::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.18', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:satellite:6.16::el8', 'cpe:/a:redhat:satellite_capsule:6.16::el8', 'cpe:/a:redhat:satellite_maintenance:6.16::el8', 'cpe:/a:redhat:satellite_utils:6.16::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Satellite 6.16 for RHEL 8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ansible_automation_platform:2.5::el9', 'cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9', 'cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2.5 for RHEL 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ansible_automation_platform:2.6::el9', 'cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9', 'cpe:/a:redhat:ansible_automation_platform_inside:2.6::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2.6 for RHEL 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:cryostat:4::el9'], 'vendor': 'Red Hat', 'product': 'Cryostat 4 on RHEL 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openstack:17.1', 'cpe:/a:redhat:openstack:17.1::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenStack Platform 17.1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.19::el8', 'cpe:/a:redhat:openshift:4.19::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.19', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:satellite:6.16::el9', 'cpe:/a:redhat:satellite_capsule:6.16::el9', 'cpe:/a:redhat:satellite_maintenance:6.16::el9', 'cpe:/a:redhat:satellite_utils:6.16::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Satellite 6.16 for RHEL 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux_eus:10.0'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream EUS (v. 10.0)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10.1', 'cpe:/o:redhat:enterprise_linux:10.2'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream (v. 10)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:8::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream (v. 8)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_aus:8.6::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream AUS (v.8.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_e4s:8.6::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream E4S (v.8.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_tus:8.6::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream TUS (v.8.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.4::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream EUS (v.9.4)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.6::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream EUS (v.9.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:9::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream (v. 9)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux_eus:10.0'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10.2'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.6::crb'], 'vendor': 'Red Hat', 'product': 'Red Hat CodeReady Linux Builder EUS (v.9.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:9::crb'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9'], 'vendor': 'Red Hat', 'product': 'Custom Metric Autoscaler 2.19', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:apache_camel_hawtio:4.4::el9'], 'vendor': 'Red Hat', 'product': 'HawtIO HawtIO 4.4.0', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:logging:6.0::el9'], 'vendor': 'Red Hat', 'product': 'Logging Subsystem for Red Hat OpenShift 6.0', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:logging:6.4::el9'], 'vendor': 'Red Hat', 'product': 'Logging Subsystem for Red Hat OpenShift 6.4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_globalhub:1.4::el9'], 'vendor': 'Red Hat', 'product': 'Multicluster Global Hub 1.4.5', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_globalhub:1.5::el9'], 'vendor': 'Red Hat', 'product': 'Multicluster Global Hub 1.5.4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_globalhub:1.6::el9'], 'vendor': 'Red Hat', 'product': 'Multicluster Global Hub 1.6.2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:network_observ_optr:1.11::el9'], 'vendor': 'Red Hat', 'product': 'Network Observability (NETOBSERV) 1.11.2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_api_data_protection:1.4::el9'], 'vendor': 'Red Hat', 'product': 'OpenShift API for Data Protection 1.4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_api_data_protection:1.5::el9'], 'vendor': 'Red Hat', 'product': 'OpenShift API for Data Protection 1.5', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_compliance_operator:1::el9'], 'vendor': 'Red Hat', 'product': 'OpenShift Compliance Operator 1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:acm:2.14::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Advanced Cluster Management for Kubernetes 2.14', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:advanced_cluster_security:4.10::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Advanced Cluster Security for Kubernetes 4.10', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:advanced_cluster_security:4.9::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Advanced Cluster Security for Kubernetes 4.9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ansible_automation_platform:2.6::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2.6', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhdh:1.8::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Developer Hub 1.8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhdh:1.9::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Developer Hub 1.9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Lightspeed (formerly Insights) for Runtimes 1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_ai:2.25::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift AI 2.25', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_builds:1.7::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Builds 1.7.3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_devspaces:3.28::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Dev Spaces 3.28', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:service_mesh:2.6::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Service Mesh 2.6', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:service_mesh:3.0::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Service Mesh 3.0', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:service_mesh:3.1::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Service Mesh 3.1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:service_mesh:3.2::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Service Mesh 3.2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:service_mesh:3.3::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Service Mesh 3.3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_distributed_tracing:3.9::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift distributed tracing 3.9.3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:stf:1.5::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenStack 1.5', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.10::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.10', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.14::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.14', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.15::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.15', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.16::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.16', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.17::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.17', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.9::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:trusted_artifact_signer:1.3::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Trusted Artifact Signer 1.3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:webterminal:1.11::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Web Terminal 1.11', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:webterminal:1.12::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Web Terminal 1.12', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:webterminal:1.13::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Web Terminal 1.13', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:webterminal:1.14::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Web Terminal 1.14', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:webterminal:1.15::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Web Terminal 1.15', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:mirror_registry:2.0::el8'], 'vendor': 'Red Hat', 'product': 'mirror registry for Red Hat OpenShift 2.0', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine:2.10::el9'], 'vendor': 'Red Hat', 'product': 'multicluster engine for Kubernetes 2.10', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine:2.11::el9'], 'vendor': 'Red Hat', 'product': 'multicluster engine for Kubernetes 2.11', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine:2.17::el9'], 'vendor': 'Red Hat', 'product': 'multicluster engine for Kubernetes 2.17', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine:2.6::el8'], 'vendor': 'Red Hat', 'product': 'multicluster engine for Kubernetes 2.6', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine:2.8::el8'], 'vendor': 'Red Hat', 'product': 'multicluster engine for Kubernetes 2.8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:assisted_installer:2'], 'vendor': 'Red Hat', 'product': 'Assisted Installer for Red Hat OpenShift Container Platform 2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:cert_manager:1'], 'vendor': 'Red Hat', 'product': 'cert-manager Operator for Red Hat OpenShift', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:confidential_compute_attestation:1'], 'vendor': 'Red Hat', 'product': 'Confidential Compute Attestation', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:deployment_validator_operator'], 'vendor': 'Red Hat', 'product': 'Deployment Validation Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:external_secrets_operator:1'], 'vendor': 'Red Hat', 'product': 'External Secrets Operator for Red Hat OpenShift', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ext_dns_optr:1'], 'vendor': 'Red Hat', 'product': 'ExternalDNS Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:workload_availability_far:0'], 'vendor': 'Red Hat', 'product': 'Fence Agents Remediation Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_file_integrity_operator:1'], 'vendor': 'Red Hat', 'product': 'File Integrity Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:gatekeeper:3'], 'vendor': 'Red Hat', 'product': 'Gatekeeper 3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:logging:5'], 'vendor': 'Red Hat', 'product': 'Logging Subsystem for Red Hat OpenShift', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:lvms:4'], 'vendor': 'Red Hat', 'product': 'Logical Volume Manager Storage', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:migration_toolkit_applications:8'], 'vendor': 'Red Hat', 'product': 'Migration Toolkit for Applications 8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhmt:1'], 'vendor': 'Red Hat', 'product': 'Migration Toolkit for Containers', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:mirror_registry:1'], 'vendor': 'Red Hat', 'product': 'mirror registry for Red Hat OpenShift', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine'], 'vendor': 'Red Hat', 'product': 'Multicluster Engine for Kubernetes', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ocp_tools'], 'vendor': 'Red Hat', 'product': 'OpenShift Developer Tools and Services', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_lightspeed'], 'vendor': 'Red Hat', 'product': 'OpenShift Lightspeed', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_pipelines:1'], 'vendor': 'Red Hat', 'product': 'OpenShift Pipelines', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:serverless:1'], 'vendor': 'Red Hat', 'product': 'OpenShift Serverless', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:red_hat_3scale_amp:2'], 'vendor': 'Red Hat', 'product': 'Red Hat 3scale API Management Platform 2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:acm:2'], 'vendor': 'Red Hat', 'product': 'Red Hat Advanced Cluster Management for Kubernetes 2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:certifications:9'], 'vendor': 'Red Hat', 'product': 'Red Hat Certification Program for Red Hat Enterprise Linux 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:connectivity_link:1'], 'vendor': 'Red Hat', 'product': 'Red Hat Connectivity Link 1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:edge_manager:1'], 'vendor': 'Red Hat', 'product': 'Red Hat Edge Manager 1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 10', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:7'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 7', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:8'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:9'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux_ai:3'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AI (RHEL AI) 3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_cluster_manager_cli:1'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Cluster Manager CLI', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_data_foundation:4'], 'vendor': 'Red Hat', 'product': 'Red Hat Openshift Data Foundation 4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:devworkspace'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Dev Workspaces Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_gitops:1'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift GitOps', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_service_on_aws:1'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift on AWS', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Virtualization 4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openstack:16.2'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenStack Platform 16.2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openstack:18.0'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenStack Platform 18.0', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:satellite:6'], 'vendor': 'Red Hat', 'product': 'Red Hat Satellite 6', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_security_profiles_operator:1'], 'vendor': 'Red Hat', 'product': 'Security Profiles Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:zero_trust_workload_identity_manager:1'], 'vendor': 'Red Hat', 'product': 'Zero Trust Workload Identity Manager', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:zero_trust_workload_identity_manager:0'], 'vendor': 'Red Hat', 'product': 'Zero Trust Workload Identity Manager - Tech Preview', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:workload_availability_mdr:0'], 'vendor': 'Red Hat', 'product': 'Machine Deletion Remediation Operator', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:workload_availability_nhc:0'], 'vendor': 'Red Hat', 'product': 'Node HealthCheck Operator', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:service_mesh:2'], 'vendor': 'Red Hat', 'product': 'OpenShift Service Mesh 2', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:service_mesh:3'], 'vendor': 'Red Hat', 'product': 'OpenShift Service Mesh 3', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:openshift_power_monitoring'], 'vendor': 'Red Hat', 'product': 'Power monitoring for Red Hat OpenShift', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:ansible_automation_platform:2'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:hummingbird:1'], 'vendor': 'Red Hat', 'product': 'Red Hat Hardened Images', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:openshift_ai'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift AI (RHOAI)', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:windows_machine_config'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift for Windows Containers', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:quay:3'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:service_interconnect:1'], 'vendor': 'Red Hat', 'product': 'Red Hat Service Interconnect 1', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:service_interconnect:2'], 'vendor': 'Red Hat', 'product': 'Red Hat Service Interconnect 2', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:amq_streams:3'], 'vendor': 'Red Hat', 'product': 'streams for Apache Kafka 3', 'defaultStatus': 'unaffected'}] -
CVE Modified by 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Jun. 30, 2026
Action Type Old Value New Value Added Affected [{'cpes': ['cpe:/a:redhat:ansible_automation_platform:2.6::el10', 'cpe:/a:redhat:ansible_automation_platform_developer:2.6::el10'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2.6 for RHEL 10', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:rhel_els:7'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux Server (v. 7 ELS)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ansible_automation_platform:2.5::el8', 'cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8', 'cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2.5 for RHEL 8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.18::el8', 'cpe:/a:redhat:openshift:4.18::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.18', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:satellite:6.16::el8', 'cpe:/a:redhat:satellite_capsule:6.16::el8', 'cpe:/a:redhat:satellite_maintenance:6.16::el8', 'cpe:/a:redhat:satellite_utils:6.16::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Satellite 6.16 for RHEL 8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ansible_automation_platform:2.5::el9', 'cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9', 'cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2.5 for RHEL 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ansible_automation_platform:2.6::el9', 'cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9', 'cpe:/a:redhat:ansible_automation_platform_inside:2.6::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2.6 for RHEL 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:cryostat:4::el9'], 'vendor': 'Red Hat', 'product': 'Cryostat 4 on RHEL 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openstack:17.1', 'cpe:/a:redhat:openstack:17.1::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenStack Platform 17.1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.19::el8', 'cpe:/a:redhat:openshift:4.19::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.19', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:satellite:6.16::el9', 'cpe:/a:redhat:satellite_capsule:6.16::el9', 'cpe:/a:redhat:satellite_maintenance:6.16::el9', 'cpe:/a:redhat:satellite_utils:6.16::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Satellite 6.16 for RHEL 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux_eus:10.0'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream EUS (v. 10.0)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10.1', 'cpe:/o:redhat:enterprise_linux:10.2'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream (v. 10)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:8::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream (v. 8)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_aus:8.6::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream AUS (v.8.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_e4s:8.6::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream E4S (v.8.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_tus:8.6::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream TUS (v.8.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.4::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream EUS (v.9.4)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.6::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream EUS (v.9.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:9::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AppStream (v. 9)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux_eus:10.0'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10.2'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.6::crb'], 'vendor': 'Red Hat', 'product': 'Red Hat CodeReady Linux Builder EUS (v.9.6)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:9::crb'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9'], 'vendor': 'Red Hat', 'product': 'Custom Metric Autoscaler 2.19', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:apache_camel_hawtio:4.4::el9'], 'vendor': 'Red Hat', 'product': 'HawtIO HawtIO 4.4.0', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:logging:6.0::el9'], 'vendor': 'Red Hat', 'product': 'Logging Subsystem for Red Hat OpenShift 6.0', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:logging:6.4::el9'], 'vendor': 'Red Hat', 'product': 'Logging Subsystem for Red Hat OpenShift 6.4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_globalhub:1.4::el9'], 'vendor': 'Red Hat', 'product': 'Multicluster Global Hub 1.4.5', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_globalhub:1.5::el9'], 'vendor': 'Red Hat', 'product': 'Multicluster Global Hub 1.5.4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_globalhub:1.6::el9'], 'vendor': 'Red Hat', 'product': 'Multicluster Global Hub 1.6.2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:network_observ_optr:1.11::el9'], 'vendor': 'Red Hat', 'product': 'Network Observability (NETOBSERV) 1.11.2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_api_data_protection:1.4::el9'], 'vendor': 'Red Hat', 'product': 'OpenShift API for Data Protection 1.4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_api_data_protection:1.5::el9'], 'vendor': 'Red Hat', 'product': 'OpenShift API for Data Protection 1.5', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_compliance_operator:1::el9'], 'vendor': 'Red Hat', 'product': 'OpenShift Compliance Operator 1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:acm:2.14::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Advanced Cluster Management for Kubernetes 2.14', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:advanced_cluster_security:4.10::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Advanced Cluster Security for Kubernetes 4.10', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:advanced_cluster_security:4.9::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Advanced Cluster Security for Kubernetes 4.9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ansible_automation_platform:2.6::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2.6', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhdh:1.8::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Developer Hub 1.8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhdh:1.9::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Developer Hub 1.9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Lightspeed (formerly Insights) for Runtimes 1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_ai:2.25::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift AI 2.25', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_builds:1.7::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Builds 1.7.3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_devspaces:3.28::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Dev Spaces 3.28', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:service_mesh:2.6::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Service Mesh 2.6', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:service_mesh:3.0::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Service Mesh 3.0', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:service_mesh:3.1::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Service Mesh 3.1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:service_mesh:3.2::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Service Mesh 3.2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:service_mesh:3.3::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Service Mesh 3.3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_distributed_tracing:3.9::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift distributed tracing 3.9.3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:stf:1.5::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenStack 1.5', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.14::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.14', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.15::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.15', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.16::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.16', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.17::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.17', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.10::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3.9::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3.9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:trusted_artifact_signer:1.3::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Trusted Artifact Signer 1.3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:webterminal:1.11::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Web Terminal 1.11', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:webterminal:1.12::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Web Terminal 1.12', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:webterminal:1.13::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Web Terminal 1.13', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:webterminal:1.14::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Web Terminal 1.14', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:webterminal:1.15::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Web Terminal 1.15', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:mirror_registry:2.0::el8'], 'vendor': 'Red Hat', 'product': 'mirror registry for Red Hat OpenShift 2.0', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine:2.10::el9'], 'vendor': 'Red Hat', 'product': 'multicluster engine for Kubernetes 2.10', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine:2.11::el9'], 'vendor': 'Red Hat', 'product': 'multicluster engine for Kubernetes 2.11', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine:2.17::el9'], 'vendor': 'Red Hat', 'product': 'multicluster engine for Kubernetes 2.17', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine:2.6::el8'], 'vendor': 'Red Hat', 'product': 'multicluster engine for Kubernetes 2.6', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine:2.8::el8'], 'vendor': 'Red Hat', 'product': 'multicluster engine for Kubernetes 2.8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:assisted_installer:2'], 'vendor': 'Red Hat', 'product': 'Assisted Installer for Red Hat OpenShift Container Platform 2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:cert_manager:1'], 'vendor': 'Red Hat', 'product': 'cert-manager Operator for Red Hat OpenShift', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:confidential_compute_attestation:1'], 'vendor': 'Red Hat', 'product': 'Confidential Compute Attestation', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:deployment_validator_operator'], 'vendor': 'Red Hat', 'product': 'Deployment Validation Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:external_secrets_operator:1'], 'vendor': 'Red Hat', 'product': 'External Secrets Operator for Red Hat OpenShift', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ext_dns_optr:1'], 'vendor': 'Red Hat', 'product': 'ExternalDNS Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:workload_availability_far:0'], 'vendor': 'Red Hat', 'product': 'Fence Agents Remediation Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_file_integrity_operator:1'], 'vendor': 'Red Hat', 'product': 'File Integrity Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:gatekeeper:3'], 'vendor': 'Red Hat', 'product': 'Gatekeeper 3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:logging:5'], 'vendor': 'Red Hat', 'product': 'Logging Subsystem for Red Hat OpenShift', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:lvms:4'], 'vendor': 'Red Hat', 'product': 'Logical Volume Manager Storage', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:migration_toolkit_applications:8'], 'vendor': 'Red Hat', 'product': 'Migration Toolkit for Applications 8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhmt:1'], 'vendor': 'Red Hat', 'product': 'Migration Toolkit for Containers', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:mirror_registry:1'], 'vendor': 'Red Hat', 'product': 'mirror registry for Red Hat OpenShift', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:multicluster_engine'], 'vendor': 'Red Hat', 'product': 'Multicluster Engine for Kubernetes', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:workload_availability_nhc:0'], 'vendor': 'Red Hat', 'product': 'Node HealthCheck Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ocp_tools'], 'vendor': 'Red Hat', 'product': 'OpenShift Developer Tools and Services', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_lightspeed'], 'vendor': 'Red Hat', 'product': 'OpenShift Lightspeed', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_pipelines:1'], 'vendor': 'Red Hat', 'product': 'OpenShift Pipelines', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:serverless:1'], 'vendor': 'Red Hat', 'product': 'OpenShift Serverless', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:red_hat_3scale_amp:2'], 'vendor': 'Red Hat', 'product': 'Red Hat 3scale API Management Platform 2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:acm:2'], 'vendor': 'Red Hat', 'product': 'Red Hat Advanced Cluster Management for Kubernetes 2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:certifications:9'], 'vendor': 'Red Hat', 'product': 'Red Hat Certification Program for Red Hat Enterprise Linux 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:connectivity_link:1'], 'vendor': 'Red Hat', 'product': 'Red Hat Connectivity Link 1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:edge_manager:1'], 'vendor': 'Red Hat', 'product': 'Red Hat Edge Manager 1', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 10', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:7'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 7', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:8'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 8', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:9'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 9', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux_ai:3'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux AI (RHEL AI) 3', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_cluster_manager_cli:1'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Cluster Manager CLI', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_data_foundation:4'], 'vendor': 'Red Hat', 'product': 'Red Hat Openshift Data Foundation 4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:devworkspace'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Dev Workspaces Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_gitops:1'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift GitOps', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_service_on_aws:1'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift on AWS', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:container_native_virtualization:4'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Virtualization 4', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openstack:16.2'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenStack Platform 16.2', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openstack:18.0'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenStack Platform 18.0', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:satellite:6'], 'vendor': 'Red Hat', 'product': 'Red Hat Satellite 6', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_security_profiles_operator:1'], 'vendor': 'Red Hat', 'product': 'Security Profiles Operator', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:zero_trust_workload_identity_manager:1'], 'vendor': 'Red Hat', 'product': 'Zero Trust Workload Identity Manager', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:zero_trust_workload_identity_manager:0'], 'vendor': 'Red Hat', 'product': 'Zero Trust Workload Identity Manager - Tech Preview', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:workload_availability_mdr:0'], 'vendor': 'Red Hat', 'product': 'Machine Deletion Remediation Operator', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:service_mesh:2'], 'vendor': 'Red Hat', 'product': 'OpenShift Service Mesh 2', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:service_mesh:3'], 'vendor': 'Red Hat', 'product': 'OpenShift Service Mesh 3', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:openshift_power_monitoring'], 'vendor': 'Red Hat', 'product': 'Power monitoring for Red Hat OpenShift', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:ansible_automation_platform:2'], 'vendor': 'Red Hat', 'product': 'Red Hat Ansible Automation Platform 2', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:hummingbird:1'], 'vendor': 'Red Hat', 'product': 'Red Hat Hardened Images', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:openshift_ai'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift AI (RHOAI)', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:windows_machine_config'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift for Windows Containers', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:quay:3'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:service_interconnect:1'], 'vendor': 'Red Hat', 'product': 'Red Hat Service Interconnect 1', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:service_interconnect:2'], 'vendor': 'Red Hat', 'product': 'Red Hat Service Interconnect 2', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:amq_streams:3'], 'vendor': 'Red Hat', 'product': 'streams for Apache Kafka 3', 'defaultStatus': 'unaffected'}] Added CVSS V3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Added CWE CWE-770 Added Reference https://access.redhat.com/errata/RHSA-2026:10217 Added Reference https://access.redhat.com/errata/RHSA-2026:10219 Added Reference https://access.redhat.com/errata/RHSA-2026:10704 Added Reference https://access.redhat.com/errata/RHSA-2026:11507 Added Reference https://access.redhat.com/errata/RHSA-2026:11514 Added Reference https://access.redhat.com/errata/RHSA-2026:11688 Added Reference https://access.redhat.com/errata/RHSA-2026:13545 Added Reference https://access.redhat.com/errata/RHSA-2026:13791 Added Reference https://access.redhat.com/errata/RHSA-2026:13826 Added Reference https://access.redhat.com/errata/RHSA-2026:13829 Added Reference https://access.redhat.com/errata/RHSA-2026:14020 Added Reference https://access.redhat.com/errata/RHSA-2026:14162 Added Reference https://access.redhat.com/errata/RHSA-2026:14200 Added Reference https://access.redhat.com/errata/RHSA-2026:14391 Added Reference https://access.redhat.com/errata/RHSA-2026:15980 Added Reference https://access.redhat.com/errata/RHSA-2026:16021 Added Reference https://access.redhat.com/errata/RHSA-2026:16024 Added Reference https://access.redhat.com/errata/RHSA-2026:16101 Added Reference https://access.redhat.com/errata/RHSA-2026:16476 Added Reference https://access.redhat.com/errata/RHSA-2026:16477 Added Reference https://access.redhat.com/errata/RHSA-2026:16505 Added Reference https://access.redhat.com/errata/RHSA-2026:16508 Added Reference https://access.redhat.com/errata/RHSA-2026:16532 Added Reference https://access.redhat.com/errata/RHSA-2026:16534 Added Reference https://access.redhat.com/errata/RHSA-2026:16535 Added Reference https://access.redhat.com/errata/RHSA-2026:16537 Added Reference https://access.redhat.com/errata/RHSA-2026:16542 Added Reference https://access.redhat.com/errata/RHSA-2026:16874 Added Reference https://access.redhat.com/errata/RHSA-2026:16875 Added Reference https://access.redhat.com/errata/RHSA-2026:17084 Added Reference https://access.redhat.com/errata/RHSA-2026:17287 Added Reference https://access.redhat.com/errata/RHSA-2026:18027 Added Reference https://access.redhat.com/errata/RHSA-2026:18032 Added Reference https://access.redhat.com/errata/RHSA-2026:19133 Added Reference https://access.redhat.com/errata/RHSA-2026:19135 Added Reference https://access.redhat.com/errata/RHSA-2026:19144 Added Reference https://access.redhat.com/errata/RHSA-2026:19350 Added Reference https://access.redhat.com/errata/RHSA-2026:19353 Added Reference https://access.redhat.com/errata/RHSA-2026:19375 Added Reference https://access.redhat.com/errata/RHSA-2026:19450 Added Reference https://access.redhat.com/errata/RHSA-2026:19550 Added Reference https://access.redhat.com/errata/RHSA-2026:19634 Added Reference https://access.redhat.com/errata/RHSA-2026:19714 Added Reference https://access.redhat.com/errata/RHSA-2026:19715 Added Reference https://access.redhat.com/errata/RHSA-2026:19719 Added Reference https://access.redhat.com/errata/RHSA-2026:19720 Added Reference https://access.redhat.com/errata/RHSA-2026:19721 Added Reference https://access.redhat.com/errata/RHSA-2026:19722 Added Reference https://access.redhat.com/errata/RHSA-2026:19750 Added Reference https://access.redhat.com/errata/RHSA-2026:19839 Added Reference https://access.redhat.com/errata/RHSA-2026:20556 Added Reference https://access.redhat.com/errata/RHSA-2026:20569 Added Reference https://access.redhat.com/errata/RHSA-2026:20570 Added Reference https://access.redhat.com/errata/RHSA-2026:20571 Added Reference https://access.redhat.com/errata/RHSA-2026:20607 Added Reference https://access.redhat.com/errata/RHSA-2026:20608 Added Reference https://access.redhat.com/errata/RHSA-2026:20609 Added Reference https://access.redhat.com/errata/RHSA-2026:20889 Added Reference https://access.redhat.com/errata/RHSA-2026:21017 Added Reference https://access.redhat.com/errata/RHSA-2026:21338 Added Reference https://access.redhat.com/errata/RHSA-2026:21655 Added Reference https://access.redhat.com/errata/RHSA-2026:21769 Added Reference https://access.redhat.com/errata/RHSA-2026:21772 Added Reference https://access.redhat.com/errata/RHSA-2026:22130 Added Reference https://access.redhat.com/errata/RHSA-2026:22141 Added Reference https://access.redhat.com/errata/RHSA-2026:22258 Added Reference https://access.redhat.com/errata/RHSA-2026:22260 Added Reference https://access.redhat.com/errata/RHSA-2026:22268 Added Reference https://access.redhat.com/errata/RHSA-2026:22309 Added Reference https://access.redhat.com/errata/RHSA-2026:22347 Added Reference https://access.redhat.com/errata/RHSA-2026:22415 Added Reference https://access.redhat.com/errata/RHSA-2026:22422 Added Reference https://access.redhat.com/errata/RHSA-2026:22465 Added Reference https://access.redhat.com/errata/RHSA-2026:22485 Added Reference https://access.redhat.com/errata/RHSA-2026:22709 Added Reference https://access.redhat.com/errata/RHSA-2026:22713 Added Reference https://access.redhat.com/errata/RHSA-2026:22840 Added Reference https://access.redhat.com/errata/RHSA-2026:22862 Added Reference https://access.redhat.com/errata/RHSA-2026:22958 Added Reference https://access.redhat.com/errata/RHSA-2026:22959 Added Reference https://access.redhat.com/errata/RHSA-2026:22960 Added Reference https://access.redhat.com/errata/RHSA-2026:22961 Added Reference https://access.redhat.com/errata/RHSA-2026:22962 Added Reference https://access.redhat.com/errata/RHSA-2026:23102 Added Reference https://access.redhat.com/errata/RHSA-2026:23103 Added Reference https://access.redhat.com/errata/RHSA-2026:23244 Added Reference https://access.redhat.com/errata/RHSA-2026:23345 Added Reference https://access.redhat.com/errata/RHSA-2026:23361 Added Reference https://access.redhat.com/errata/RHSA-2026:24337 Added Reference https://access.redhat.com/errata/RHSA-2026:24359 Added Reference https://access.redhat.com/errata/RHSA-2026:24470 Added Reference https://access.redhat.com/errata/RHSA-2026:24478 Added Reference https://access.redhat.com/errata/RHSA-2026:24716 Added Reference https://access.redhat.com/errata/RHSA-2026:24761 Added Reference https://access.redhat.com/errata/RHSA-2026:24762 Added Reference https://access.redhat.com/errata/RHSA-2026:24853 Added Reference https://access.redhat.com/errata/RHSA-2026:24977 Added Reference https://access.redhat.com/errata/RHSA-2026:25089 Added Reference https://access.redhat.com/errata/RHSA-2026:25127 Added Reference https://access.redhat.com/errata/RHSA-2026:25180 Added Reference https://access.redhat.com/errata/RHSA-2026:26447 Added Reference https://access.redhat.com/errata/RHSA-2026:26568 Added Reference https://access.redhat.com/errata/RHSA-2026:26571 Added Reference https://access.redhat.com/errata/RHSA-2026:26585 Added Reference https://access.redhat.com/errata/RHSA-2026:26636 Added Reference https://access.redhat.com/errata/RHSA-2026:27076 Added Reference https://access.redhat.com/errata/RHSA-2026:28038 Added Reference https://access.redhat.com/errata/RHSA-2026:28047 Added Reference https://access.redhat.com/errata/RHSA-2026:28074 Added Reference https://access.redhat.com/errata/RHSA-2026:28196 Added Reference https://access.redhat.com/errata/RHSA-2026:28198 Added Reference https://access.redhat.com/errata/RHSA-2026:28441 Added Reference https://access.redhat.com/errata/RHSA-2026:29035 Added Reference https://access.redhat.com/errata/RHSA-2026:29195 Added Reference https://access.redhat.com/errata/RHSA-2026:29455 Added Reference https://access.redhat.com/errata/RHSA-2026:29702 Added Reference https://access.redhat.com/errata/RHSA-2026:29703 Added Reference https://access.redhat.com/errata/RHSA-2026:29854 Added Reference https://access.redhat.com/errata/RHSA-2026:9385 Added Reference https://access.redhat.com/security/cve/CVE-2026-32280 Added Reference https://bugzilla.redhat.com/show_bug.cgi?id=2456339 Added Reference https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32280.json -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Jun. 17, 2026
Action Type Old Value New Value Added SSVC {'id': 'CVE-2026-32280', 'role': 'CISA Coordinator', 'options': [{'exploitation': 'none'}, {'automatable': 'yes'}, {'technicalImpact': 'partial'}], 'version': '2.0.3', 'timestamp': '2026-04-08T17:46:14.569488Z'} -
CVE Modified by [email protected]
Jun. 17, 2026
Action Type Old Value New Value Added Affected [{'vendor': 'Go standard library', 'product': 'crypto/x509', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '1.25.9', 'versionType': 'semver'}, {'status': 'affected', 'version': '1.26.0-0', 'lessThan': '1.26.2', 'versionType': 'semver'}], 'packageName': 'crypto/x509', 'collectionURL': 'https://pkg.go.dev', 'defaultStatus': 'unaffected', 'programRoutines': [{'name': 'Certificate.buildChains'}, {'name': 'Certificate.Verify'}]}] -
Initial Analysis by [email protected]
Apr. 16, 2026
Action Type Old Value New Value Added CPE Configuration OR *cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* versions up to (excluding) 1.25.9 *cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* versions from (including) 1.26.0 up to (excluding) 1.26.2 Added Reference Type Go Project: https://go.dev/cl/758320 Types: Patch Added Reference Type Go Project: https://go.dev/issue/78282 Types: Issue Tracking Added Reference Type Go Project: https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU Types: Mailing List, Release Notes Added Reference Type Go Project: https://pkg.go.dev/vuln/GO-2026-4947 Types: Vendor Advisory -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Apr. 08, 2026
Action Type Old Value New Value Added CVSS V3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Added CWE CWE-770 -
New CVE Received by [email protected]
Apr. 08, 2026
Action Type Old Value New Value Added Description During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls. Added Reference https://go.dev/cl/758320 Added Reference https://go.dev/issue/78282 Added Reference https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU Added Reference https://pkg.go.dev/vuln/GO-2026-4947
EPSS is a daily estimate of the probability of exploitation activity
being observed over the next 30 days. Following chart shows the EPSS
score history of the vulnerability.