Bundesamt für Sicherheit in der Informationstechnik Gentoo · Red Hat Enterprise Linux (Flatpak): Mehrere Schwachstellen
Affects Bundesamt für Sicherheit in der Informationstechnik GentooSource GCVE Database
Mentioned vulnerabilities
Not known to be exploited : upgrade to 9.8 soon.
Data as of 9 Nov 2026, 14:49 UTC
Rated High by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
- Patch
- Available – fixed in 9.8
Exploitation evidence
Disclosed: evidence found.
CVE published 28 May 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 9 Nov 2026.
What to do
Upgrade Bundesamt für Sicherheit in der Informationstechnik Gentoo to 9.8.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Bundesamt für Sicherheit in der Informationstechnik Gentoo | Affected
| Fixed in
|
AI-suggested
Red Hat has released security updates for Flatpak on Red Hat Enterprise Linux 9 to address these vulnerabilities. Users should apply the updates as detailed in the Red Hat advisory RHSA-2026:21755 and the referenced article https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official patches.
Description
Multiple security vulnerabilities have been identified in Flatpak on Red Hat Enterprise Linux 9, including arbitrary code execution via crafted symlinks and arbitrary file deletion due to improper cache file path validation. These issues could allow an attacker to execute code or delete files on the host system. Red Hat has released security updates addressing these vulnerabilities.
References
- wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1732.json (opens in a new tab)
- wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1732 (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:21755 (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:21756 (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:21757 (opens in a new tab)
- linux.oracle.com/errata/ELSA-2026-21756.html (opens in a new tab)
- errata.build.resf.org/RLSA-2026:21756 (opens in a new tab)
- errata.build.resf.org/RLSA-2026:21757 (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:23420 (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:23419 (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:23417 (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:23418 (opens in a new tab)
- errata.build.resf.org/RLSA-2026:21755 (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:25068 (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:25381 (opens in a new tab)
- linux.oracle.com/errata/ELSA-2026-21755.html (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:30901 (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:35843 (opens in a new tab)
- linux.oracle.com/errata/ELSA-2026-21757.html (opens in a new tab)
- security.gentoo.org/glsa/202608-06 (opens in a new tab)