Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 02:05 UTC

Critical in the last 24 hours

1603 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

144-76% vs 7-day avg of 597

2 critical, 38 high, 59 medium, 25 low

Expand	Severity	Score	Advisory	Title	Source	Published
	Medium	6.2	CVE-2026-104046	A flaw was found in SSSD (System Security Services Daemon) Red Hat, FedoraprojectRed Hat Enterprise Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat OpenShift Container Platform 4, Fedoraproject Sssd, Red Hat Openshift Container Platform	NVD	Oct 6 21:17 UTC
CVE-2026-104046A flaw was found in SSSD (System Security Services Daemon) From the advisory A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is enabled, pre-authentication requests retain state in memory without being cleared or timed out. A local attacker can repeatedly initiate authentication flows without completing them, causing unbounded memory consumption. This memory exhaustion can lead to a Denial of Service (DoS) by degrading or terminating SSSD authentication services. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affects Red Hat Fedoraproject Red Hat Enterprise Linux Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 Red Hat OpenShift Container Platform 4 Fedoraproject Sssd Red Hat Openshift Container Platform NIST National Vulnerability DatabasePublished Oct 6, 2026 21:17 UTC Read the advisory
	Medium	4.7	CVE-2026-104045	A flaw was found in SSSD Red Hat, FedoraprojectRed Hat Enterprise Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat OpenShift Container Platform 4, Fedoraproject Sssd, Red Hat Openshift Container Platform	NVD	Oct 6 21:17 UTC
CVE-2026-104045A flaw was found in SSSD From the advisory A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. By repeatedly sending concurrent map enumeration and invalidation requests, an attacker can cause memory to leak, leading to excessive memory consumption that can disrupt or crash the autofs service. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity High Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H Affects Red Hat Fedoraproject Red Hat Enterprise Linux Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 Red Hat OpenShift Container Platform 4 Fedoraproject Sssd Red Hat Openshift Container Platform NIST National Vulnerability DatabasePublished Oct 6, 2026 21:17 UTC Read the advisory
	High	8.1	CVE-2026-104048	A flaw was found in SSSD Red Hat, FedoraprojectRed Hat Enterprise Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat OpenShift Container Platform 4, Fedoraproject Sssd, Red Hat Openshift Container Platform	NVD	Oct 6 20:17 UTC
CVE-2026-104048A flaw was found in SSSD From the advisory A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control (HBAC) rules by stripping domain qualifiers and comparing only short usernames. An authenticated user in a trusted domain who shares the same username as an authorized local account can bypass access policies and gain unauthorized access to protected services or hosts. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affects Red Hat Fedoraproject Red Hat Enterprise Linux Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 Red Hat OpenShift Container Platform 4 Fedoraproject Sssd Red Hat Openshift Container Platform NIST National Vulnerability DatabasePublished Oct 6, 2026 20:17 UTC Read the advisory
	Medium	5.3	CVE-2026-104047	A flaw was found in SSSD Red Hat, FedoraprojectRed Hat Enterprise Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat OpenShift Container Platform 4, Fedoraproject Sssd, Red Hat Openshift Container Platform	NVD	Oct 6 20:17 UTC
CVE-2026-104047A flaw was found in SSSD From the advisory A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted lookup request, manipulating the query logic to cause unauthorized information disclosure from the directory. Impact if exploited ConfidentialityLow IntegrityLow AvailabilityLow How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affects Red Hat Fedoraproject Red Hat Enterprise Linux Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 Red Hat OpenShift Container Platform 4 Fedoraproject Sssd Red Hat Openshift Container Platform NIST National Vulnerability DatabasePublished Oct 6, 2026 20:17 UTC Read the advisory
	Medium	5.5	CVE-2026-88252	A flaw was found in sssd Red Hat, FedoraprojectRed Hat Enterprise Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat OpenShift Container Platform 4, Fedoraproject Sssd, Red Hat Openshift Container Platform	NVD	Oct 6 18:16 UTC
CVE-2026-88252A flaw was found in sssd From the advisory A flaw was found in sssd. A local user can cause a Denial of Service (DoS) by exhausting the responder service's available file descriptors (system handles used for open connections). By opening and maintaining many concurrent connections to a responder socket while continuing to queue new connection attempts, an attacker can trigger an unthrottled retry loop. This condition leads to high CPU utilization and stalls the service, preventing legitimate identity and authentication requests from being processed. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affects Red Hat Fedoraproject Red Hat Enterprise Linux Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 Red Hat OpenShift Container Platform 4 Fedoraproject Sssd Red Hat Openshift Container Platform NIST National Vulnerability DatabasePublished Oct 6, 2026 18:16 UTC Read the advisory
	Medium	6.1	CVE-2026-104040	A flaw was found in SSSD Red Hat, FedoraprojectRed Hat Enterprise Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat OpenShift Container Platform 4, Fedoraproject Sssd, Red Hat Openshift Container Platform	NVD	Oct 6 02:17 UTC
CVE-2026-104040A flaw was found in SSSD From the advisory A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quotes are not properly escaped before being included in Microsoft Graph Open Data Protocol (OData) queries. A low-privileged local user can exploit this flaw by submitting a crafted search request, altering query filters to broaden user or group searches. This can lead to information disclosure by retrieving unintended directory objects, as well as a Denial of Service (DoS) through excessive processing and cache population. Impact if exploited ConfidentialityLow IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H Affects Red Hat Fedoraproject Red Hat Enterprise Linux Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 Red Hat OpenShift Container Platform 4 Fedoraproject Sssd Red Hat Openshift Container Platform NIST National Vulnerability DatabasePublished Oct 6, 2026 02:17 UTC Read the advisory
	Critical	9.8	CVE-2026-102560	A flaw was found in libsoup Red Hat, GnomeRed Hat Enterprise Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Gnome Libsoup	NVD	Sep 29 18:17 UTC
CVE-2026-102560A flaw was found in libsoup From the advisory A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray growth could wrap, causing zlib to write past the allocated buffer and resulting in a heap buffer overflow. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affects Red Hat Gnome Red Hat Enterprise Linux Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 Gnome Libsoup NIST National Vulnerability DatabasePublished Sep 29, 2026 18:17 UTC Read the advisory
	High	8.6	CVE-2026-102559	A flaw was found in libsoup Red Hat, GnomeRed Hat Enterprise Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Gnome Libsoup	NVD	Sep 29 18:17 UTC
CVE-2026-102559A flaw was found in libsoup From the advisory A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could be truncated while the masking routine still used the full length, causing a heap buffer overflow. Impact if exploited ConfidentialityLow IntegrityLow AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H Affects Red Hat Gnome Red Hat Enterprise Linux Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 Gnome Libsoup NIST National Vulnerability DatabasePublished Sep 29, 2026 18:17 UTC Read the advisory
	High	8.6	CVE-2026-102558	A flaw was found in libsoup Red Hat, GnomeRed Hat Enterprise Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Gnome Libsoup	NVD	Sep 29 18:17 UTC
CVE-2026-102558A flaw was found in libsoup From the advisory A flaw was found in libsoup. When max-incoming-payload-size is unlimited (0), SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data. Impact if exploited ConfidentialityLow IntegrityLow AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H Affects Red Hat Gnome Red Hat Enterprise Linux Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 Gnome Libsoup NIST National Vulnerability DatabasePublished Sep 29, 2026 18:17 UTC Read the advisory
	High	8.2	CVE-2026-102555	A flaw was found in libsoup Red Hat, GnomeRed Hat Enterprise Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Gnome Libsoup	NVD	Sep 29 18:17 UTC
CVE-2026-102555A flaw was found in libsoup From the advisory A flaw was found in libsoup. The soup_uri_decode_data_uri() function incorrectly treated base64 data-URI payloads as NUL-terminated strings when calling g_base64_decode_inplace(). If the percent-decoded payload contained embedded NUL bytes, the decoded length could remain uninitialized and be used as the size of the returned GBytes. This can lead to an out-of-bounds read or application crash when processing a crafted data URI. Impact if exploited ConfidentialityLow IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Affects Red Hat Gnome Red Hat Enterprise Linux Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 Gnome Libsoup NIST National Vulnerability DatabasePublished Sep 29, 2026 18:17 UTC Read the advisory
	High	8.6	CVE-2026-102557	A flaw was found in libsoup Red Hat, GnomeRed Hat Enterprise Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Gnome Libsoup	NVD	Sep 29 17:17 UTC
CVE-2026-102557A flaw was found in libsoup From the advisory A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message size against the limits of the underlying buffer type. A remote peer could send fragments that caused size truncation while the implementation still used the full length, leading to heap corruption or a crash. Impact if exploited ConfidentialityLow IntegrityLow AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H Affects Red Hat Gnome Red Hat Enterprise Linux Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 Gnome Libsoup NIST National Vulnerability DatabasePublished Sep 29, 2026 17:17 UTC Read the advisory
	High	8.6	CVE-2026-102556	A flaw was found in libsoup Red Hat, GnomeRed Hat Enterprise Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Gnome Libsoup	NVD	Sep 29 17:17 UTC
CVE-2026-102556A flaw was found in libsoup From the advisory A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the documented GBytes API can trigger heap corruption or a crash upon receiving a crafted Pong. Impact if exploited ConfidentialityLow IntegrityLow AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H Affects Red Hat Gnome Red Hat Enterprise Linux Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 Gnome Libsoup NIST National Vulnerability DatabasePublished Sep 29, 2026 17:17 UTC Read the advisory
	High	7.5	RHSA-2026:89736	compat-openssl11 security update Red Hat, OpenSSLRed Hat Enterprise Linux, OpenSSL, OpenSSL compat-openssl11	Red Hat Security Advisories	Oct 26 02:04 UTC
RHSA-2026:89736CVE-2026-63072CVE-2026-84782compat-openssl11 security update Executive summary Red Hat published an Important-rated security update for the compat-openssl11 package on Red Hat Enterprise Linux 9.4 systems, including Update Services for SAP Solutions, 4 years of updates, and Extended Life Cycle channels. The update fixes two OpenSSL flaws, one a heap buffer overflow in CMS key unwrapping and one a DTLS handshake retransmission issue. Red Hat recommends applying the updated packages, and the advisory points to its update instructions. Technical summary The advisory describes CVE-2026-63072, a heap buffer overflow in CMS key unwrapping, and CVE-2026-84782, a DTLS issue where retransmitted handshake messages are taken from a stale buffer offset. The advisory does not state the attack vector, required preconditions, or CVSS scores, and points to the CVE pages for those details. The fixed package is compat-openssl11-1.1.1k-5.el9_4.4 across the listed RHEL 9.4 channels. The advisory does not state any workaround or mitigation, and it gives no detection guidance or information on exploitation in the wild. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/errata/RHSA-2026:89736 Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affects Red Hat OpenSSL Red Hat Enterprise Linux OpenSSL OpenSSL compat-openssl11 Red Hat Product SecurityPublished Oct 26, 2026 02:04 UTC Read the advisory
	High	7.5	RHSA-2026:89737	compat-openssl11 security update Red Hat, OpenSSLRed Hat Enterprise Linux, OpenSSL	Red Hat Security Advisories	Oct 26 01:58 UTC
RHSA-2026:89737CVE-2026-63072CVE-2026-84782compat-openssl11 security update Executive summary Red Hat published an Important security update for the compat-openssl11 package on Red Hat Enterprise Linux 9.2 systems, including Update Services for SAP Solutions, Extended Life Cycle, and related channels. The advisory fixes two OpenSSL flaws, a heap buffer overflow in CMS key unwrapping and a DTLS handshake retransmission issue, and Red Hat recommends applying the updated packages. The advisory does not state a CVSS score for either flaw in the text provided. Technical summary The advisory describes CVE-2026-63072, a heap buffer overflow in CMS key unwrapping, and CVE-2026-84782, a DTLS flaw where retransmitted handshake messages are taken from a stale buffer offset. The advisory does not state the attack vector, exploitation preconditions, or whether either flaw is exploited in the wild. The fixed package version is compat-openssl11-1.1.1k-4.el9_2.3, and the vulnerable prior versions are not stated. No workaround or detection guidance is stated, and the advisory directs readers to https://access.redhat.com/articles/11258 for how to apply the update. CVSS scores are referenced to the CVE pages and are not given in the advisory text. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/errata/RHSA-2026:89737 Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affects Red Hat OpenSSL Red Hat Enterprise Linux OpenSSL Red Hat Product SecurityPublished Oct 26, 2026 01:58 UTC Read the advisory
	High	7.5	RHSA-2026:89734	jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update Red Hat, FasterXMLRed Hat Enterprise Linux, FasterXML jackson-core, Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6, FasterXML jackson-databind, FasterXML jackson-jaxrs-providers, FasterXML jackson-modules-base	Red Hat Security Advisories	Oct 26 01:46 UTC
RHSA-2026:89734CVE-2026-68497CVE-2026-91777jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update Executive summary Red Hat advisory RHSA-2026:89734 fixes two denial-of-service flaws in the Jackson Java JSON libraries, shipped in Red Hat Enterprise Linux 9.6 Extended Update Support and related RHEL 9.6 subscriptions. Red Hat rates the update Important. Red Hat recommends applying the updated jackson packages listed in the advisory. Technical summary The advisory covers two denial-of-service flaws in jackson-databind: CVE-2026-68497, a CPU denial of service via unbounded numeric parsing, and CVE-2026-91777, a denial of service via quadratic forward-reference completion. The advisory does not state the attack vector, required privileges, or user interaction. Fixed package versions are listed as jackson-core-2.21.6-1.el9_6, jackson-databind-2.21.6-1.el9_6.1, jackson-jaxrs-providers-2.21.6-1.el9_6, and jackson-modules-base-2.21.6-1.el9_6, along with pki-jackson packages. No CVSS score is given in the text, and it refers to the CVE pages for details. No workarounds or detection guidance are stated. Administrators should apply the update using the article referenced in the advisory. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/errata/RHSA-2026:89734 Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affects Red Hat FasterXML Red Hat Enterprise Linux FasterXML jackson-core Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 FasterXML jackson-databind FasterXML jackson-jaxrs-providers FasterXML jackson-modules-base Red Hat Product SecurityPublished Oct 26, 2026 01:46 UTC Read the advisory
	High	7.5	RHSA-2026:89730	libX11 security update Red HatRed Hat Enterprise Linux, Red Hat Enterprise Linux for x86_64 8, Red Hat Enterprise Linux for IBM z Systems 8, Red Hat Enterprise Linux for Power, little endian 8, Red Hat Enterprise Linux for ARM 64 8, Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10, Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10, Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10, Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10	Red Hat Security Advisories	Oct 26 01:43 UTC
RHSA-2026:89730CVE-2026-88806libX11 security update Executive summary A security update for libX11, the core X11 client library, is available for Red Hat Enterprise Linux 8 systems. Red Hat rates the issue as Important and says it is a heap-based buffer overflow that can be triggered through a malicious X server. Red Hat recommends applying the updated libX11 packages, version 1.6.8-10.el8_10, as described in its update instructions. Technical summary The flaw is tracked as CVE-2026-88806 and is classified as a heap-based buffer overflow in libX11 triggered via a malicious X server. The advisory does not state the attack preconditions beyond a malicious X server, and it does not give a CVSS score in the text provided, referring instead to the CVE page. The fixed package version is libX11-1.6.8-10.el8_10 across the listed Red Hat Enterprise Linux 8 and Extended Life Cycle 8.10 architectures. The advisory does not state any workaround or mitigation, nor any detection guidance, and it does not state whether the issue is being exploited in the wild. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Dropped extracted product not named in the source: X.Org libX11 Summarized from access.redhat.com/errata/RHSA-2026:89730 Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affects Red Hat Red Hat Enterprise Linux Red Hat Enterprise Linux for x86_64 8 Red Hat Enterprise Linux for IBM z Systems 8 Red Hat Enterprise Linux for Power, little endian 8 Red Hat Enterprise Linux for ARM 64 8 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 Red Hat Product SecurityPublished Oct 26, 2026 01:43 UTC Read the advisory
	Medium	6.8	RHSA-2026:88779	ca-certificates security update Red Hat, MozillaRed Hat Enterprise Linux, Red Hat Enterprise Linux Server - Extended Life Cycle Support 7, Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7, Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7, Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7, Mozilla ca-certificates	Red Hat Security Advisories	Oct 23 19:53 UTC
RHSA-2026:88779CVE-2026-114406ca-certificates security update Executive summary This Red Hat advisory covers a security update for the ca-certificates package on Red Hat Enterprise Linux 7 Extended Lifecycle Support systems across x86_64, IBM z Systems, and IBM Power platforms. Red Hat rates the update as Critical and says it distrusts eMudhra intermediate CA certificates due to security concerns. Red Hat recommends applying the updated ca-certificates package. Technical summary The flaw is tracked as CVE-2026-114406 and is fixed by distrusting eMudhra intermediate CA certificates in the ca-certificates package, which contains Mozilla-selected CA certificates used for Internet PKI. The advisory does not describe the specific vulnerability class, attack vector, or preconditions for exploitation. The fixed package version is ca-certificates-2026.2.92_v9.0.319-70.3.el7_9, and the advisory lists no workarounds. No CVSS score is given in the text itself, and it is not stated whether the issue is exploited in the wild. The advisory provides no detection guidance beyond the package update and a link to the Red Hat article on applying updates. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/errata/RHSA-2026:88779 Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affects Red Hat Mozilla Red Hat Enterprise Linux Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 Mozilla ca-certificates Red Hat Product SecurityPublished Oct 23, 2026 19:53 UTC Read the advisory
	Medium	6.8	RHSA-2026:88562	ca-certificates security update Red Hat, MozillaRed Hat Enterprise Linux, Mozilla ca-certificates	Red Hat Security Advisories	Oct 23 19:43 UTC
RHSA-2026:88562CVE-2026-114406ca-certificates security update Executive summary This Red Hat advisory covers a critical update to the ca-certificates package on Red Hat Enterprise Linux 9.2 systems, including several Update Services and Extended Life Cycle variants. The update distrusts eMudhra intermediate Certificate Authority certificates because of security concerns, and Red Hat rates it Critical. Red Hat recommends applying the ca-certificates update described in the advisory on affected systems. Technical summary The flaw is tracked as CVE-2026-114406 and is described as a decision to distrust eMudhra intermediate CA certificates due to security concerns, so the vulnerability class is not stated beyond that. The advisory does not describe the attack vector, exploitation preconditions, or whether exploitation has occurred. The fixed package is ca-certificates-2026.2.92_v9.0.319-90.3.el9_2 for the listed RHEL 9.2 variants. The advisory does not state a CVSS score in the text provided, and it refers readers to the CVE page for it. No workaround is stated, and no detection guidance is stated beyond applying the update per the linked Red Hat article. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/errata/RHSA-2026:88562 Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affects Red Hat Mozilla Red Hat Enterprise Linux Mozilla ca-certificates Red Hat Product SecurityPublished Oct 23, 2026 19:43 UTC Read the advisory
	High	8.1	RHSA-2026:88835	php:8.2 security update Red Hat, PHPRed Hat Enterprise Linux, PHP	Red Hat Security Advisories	Oct 23 19:39 UTC
RHSA-2026:88835CVE-2026-109618CVE-2026-109619php:8.2 security update Executive summary Red Hat published advisory RHSA-2026:88835, an Important-rated security update for the php:8.2 module on Red Hat Enterprise Linux 9.4 systems covered by Update Services for SAP Solutions, Extended Life Cycle, AUS, and related subscriptions. The advisory describes two PHP flaws, one of which it says can lead to remote code execution, and the vendor recommends applying the updated packages. The advisory does not state how many systems are affected in practice or whether exploitation has been observed. Technical summary The two issues are CVE-2026-109618, a memory corruption and remote code execution flaw caused by an out-of-memory bailout during request parsing, and CVE-2026-109619, a use-after-free caused by fatal error handling that keeps stale request state. The advisory does not state the attack vector, required preconditions, or CVSS scores, and refers readers to the CVE pages for those details. The fixed package version is php-8.2.13-1.module+el9.4.0+25177+88c847cf.4 for the affected PHP packages, as listed in the advisory. Workarounds are not stated, and no detection guidance is given beyond applying the update per the linked Red Hat article. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/errata/RHSA-2026:88835 Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affects Red Hat PHP Red Hat Enterprise Linux PHP Red Hat Product SecurityPublished Oct 23, 2026 19:39 UTC Read the advisory
	High	8.1	RHSA-2026:88834	php:8.2 security update Red Hat, PHPRed Hat Enterprise Linux, PHP	Red Hat Security Advisories	Oct 23 19:29 UTC
RHSA-2026:88834CVE-2026-109618CVE-2026-109619php:8.2 security update Executive summary Red Hat advisory RHSA-2026:88834 provides a php:8.2 security update for Red Hat Enterprise Linux 9.6 Extended Update Support and related channels. Red Hat rates it as Important and fixes two PHP vulnerabilities, CVE-2026-109618 (memory corruption leading to remote code execution) and CVE-2026-109619 (use-after-free). The advisory recommends applying the updated php packages. Technical summary The two flaws are a memory corruption issue triggered by out-of-memory bailout during request parsing, which the advisory says can lead to remote code execution, and a use-after-free caused by fatal error handling that retains stale request state. The advisory does not state the attack vector or preconditions beyond these descriptions, and it does not give a CVSS score in the text provided, referring readers to the CVE pages. Fixed package versions are listed as php-8.2.28-1.module+el9.6.0+25176+d8415d54.4 and related module packages, with the update applied through the articles referenced in the Solution section. No workarounds are stated, and no detection guidance or exploitation-in-the-wild information is stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/errata/RHSA-2026:88834 Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affects Red Hat PHP Red Hat Enterprise Linux PHP Red Hat Product SecurityPublished Oct 23, 2026 19:29 UTC Read the advisory
	High	8.1	RHSA-2026:88720	php security update Red Hat, PHPRed Hat Enterprise Linux, PHP	Red Hat Security Advisories	Oct 23 15:23 UTC
RHSA-2026:88720CVE-2026-109618CVE-2026-109619php security update Executive summary Red Hat has released a security update for PHP on Red Hat Enterprise Linux 9.6 Extended Update Support and related subscriptions. The advisory rates it Important and fixes two flaws, one that the advisory says can lead to memory corruption and remote code execution. Technical summary The advisory describes CVE-2026-109618, an out-of-memory bailout during request parsing that leads to memory corruption and remote code execution, and CVE-2026-109619, where fatal error handling retains stale request state leading to use-after-free. The advisory does not state the attack vector, required preconditions, or CVSS scores, and refers readers to the CVE pages for those details. Affected PHP package versions are listed as php-8.0.30-3.el9_6.2 on RHEL 9.6 variants, and the fixed package is the same build. No workarounds are stated, and no detection guidance or evidence of exploitation in the wild is stated. Administrators are directed to the Red Hat article at https://access.redhat.com/articles/11258 for update instructions. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/errata/RHSA-2026:88720 Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affects Red Hat PHP Red Hat Enterprise Linux PHP Red Hat Product SecurityPublished Oct 23, 2026 15:23 UTC Read the advisory
	High	8.1	RHSA-2026:88725	php security update Red Hat, PHPRed Hat Enterprise Linux, PHP	Red Hat Security Advisories	Oct 23 15:23 UTC
RHSA-2026:88725CVE-2026-109618CVE-2026-109619php security update Executive summary Red Hat has released a security update for PHP on Red Hat Enterprise Linux 9.4 systems covered by several update and life cycle programs. It fixes two vulnerabilities that Red Hat rates as Important, one of which the advisory says can lead to remote code execution. The advisory says to apply the updated php packages as described in the linked Red Hat article. Technical summary The advisory describes two PHP flaws: CVE-2026-109618, an out-of-memory bailout during request parsing that leads to memory corruption and remote code execution, and CVE-2026-109619, where fatal error handling retains stale request state and causes a use-after-free. The advisory does not state the attack vector, required preconditions, or any authentication requirement in detail, and it does not give a CVSS score in the text provided. The fixed package version is php-8.0.30-1.el9_4.2, but the advisory does not state the affected (pre-fix) versions. No workarounds, mitigations, or detection guidance are stated, and exploitation in the wild is not stated. Defenders should apply the listed updated packages. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/errata/RHSA-2026:88725 Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affects Red Hat PHP Red Hat Enterprise Linux PHP Red Hat Product SecurityPublished Oct 23, 2026 15:23 UTC Read the advisory
	High	8.1	RHSA-2026:88693	php security update Red Hat, PHPRed Hat Enterprise Linux, PHP, Red Hat Enterprise Linux Server - Extended Life Cycle Support 7	Red Hat Security Advisories	Oct 23 13:54 UTC
RHSA-2026:88693CVE-2026-109619php security update Executive summary Red Hat has released a security update for the PHP scripting language on Red Hat Enterprise Linux 7 Extended Lifecycle Support systems. The advisory rates the flaw Important, a use-after-free issue in PHP's fatal error handling. Red Hat recommends applying the updated php packages. Technical summary The flaw is tracked as CVE-2026-109619 and is described as a use-after-free caused by fatal error handling that retains stale request state in PHP. The advisory does not state the attack vector, required preconditions, or whether it is exploited in the wild. Fixed package version is php-5.4.16-48.el7_9.1 for the listed RHEL 7 ELS architectures (x86_64, s390x, ppc64, ppc64le). The advisory does not state a CVSS score, workarounds, or detection guidance beyond referring to the CVE page and the update article at https://access.redhat.com/articles/11258. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/errata/RHSA-2026:88693 Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affects Red Hat PHP Red Hat Enterprise Linux PHP Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 Red Hat Product SecurityPublished Oct 23, 2026 13:54 UTC Read the advisory
	High	7.8	RHSA-2026:88687	kernel security update Red Hat, Linux kernelRed Hat Enterprise Linux, Red Hat Enterprise Linux 10.0 Extended Update Support, Linux kernel	Red Hat Security Advisories	Oct 23 13:49 UTC
RHSA-2026:88687CVE-2025-68745CVE-2026-23199CVE-2026-52972CVE-2026-638315 morekernel security update Executive summary Red Hat has released a kernel security update for Red Hat Enterprise Linux 10.0 Extended Update Support, rated Important by Red Hat. The update fixes several Linux kernel flaws, including denial of service and privilege escalation issues. The advisory points to the CVE links for CVSS scores and further detail, and the update is the vendor's recommended fix. Technical summary The advisory lists about eleven kernel vulnerabilities across subsystems, including a denial of service in the qla2xxx SCSI driver, a use-after-free in the ALSA timer that the advisory says allows privilege escalation, an out-of-bounds sense-data read in qla2xxx, and a use-after-free in strparser. Other fixes cover crypto af_alg AEAD length capping, mac802154 in-place crypto, netfs, nvmet-auth, procfs, usx2y, and SELinux TCP Fast Open checks. Attack vector, preconditions, and exploitation status are not stated in the advisory text. Affected and fixed kernel package versions are not stated here. Workarounds and detection guidance are not stated. Consult the CVE pages and the errata for the package versions. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Red Hat Linux kernel Red Hat Enterprise Linux Red Hat Enterprise Linux 10.0 Extended Update Support Linux kernel Red Hat Product SecurityPublished Oct 23, 2026 13:49 UTC Read the advisory
	Medium	6.8	RHSA-2026:88563	ca-certificates security update Red Hat, MozillaRed Hat Enterprise Linux, Mozilla ca-certificates	Red Hat Security Advisories	Oct 23 13:24 UTC
RHSA-2026:88563CVE-2026-114406ca-certificates security update Executive summary Red Hat published a critical security update for the ca-certificates package on Red Hat Enterprise Linux 9.6 Extended Update Support and related subscriptions. The update distrusts eMudhra intermediate Certificate Authority certificates because of security concerns, and Red Hat recommends applying the updated package. The advisory does not state a CVSS score or whether the issue is being exploited. Technical summary The flaw is tracked as CVE-2026-114406 and concerns the ca-certificates trust store, which the advisory says should distrust eMudhra intermediate CA certificates due to security concerns. The advisory does not describe the vulnerability class, attack vector, or preconditions beyond this. The fixed package is ca-certificates-2026.2.92_v9.0.319-90.3.el9_6, and the advisory lists it for the affected Red Hat Enterprise Linux 9.6 variants across x86_64, s390x, ppc64le, and aarch64. The advisory does not state a CVSS score, workarounds, or detection guidance, and it refers readers to https://access.redhat.com/articles/11258 for how to apply the update. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/errata/RHSA-2026:88563 Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affects Red Hat Mozilla Red Hat Enterprise Linux Mozilla ca-certificates Red Hat Product SecurityPublished Oct 23, 2026 13:24 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary