Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…
EPSS 1.3%top 32%

Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage

0
High
Published: 02/02/2026 (02/02/2026, 17:31:06 UTC)
Source: GCVE Database
Vendor/Project: Red Hat Product Security
Product: Red Hat

Description

Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their operating systems, and relevant configuration data stored within them. Discovery also identifies and reports more detailed facts for some versions of key Red Hat packages and products that it finds in the network.

Affected software

Affected versions
Red HatRed Hat Hardened Imagesaarch64curl-main@aarch64Red Hat DiscoveryRed Hat Discovery 2amd64registry.redhat.io/discovery/discovery-server-rhel9@sha256:d4d6cd6b1a84587ee851c4f76b47c1e6bf9f597f4a476c34e4a257cd1a860448_amd64

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 07/26/2026, 00:03:03 UTC

Technical Analysis

Red Hat Discovery is an inspection and reporting tool used to find and report environment data and Red Hat product usage across networks. The advisory (RHSA-2026:1736) lists multiple CVEs affecting this tool, including CVE-2025-9086, but does not provide detailed technical descriptions or exploitation scenarios. The vulnerabilities are collectively categorized as high severity. No patches or updates are currently provided in the advisory, and the affected versions are not explicitly detailed beyond general references to Red Hat Discovery and related container images.

Potential Impact

The impact is classified as high severity by the source, indicating significant security concerns. However, no specific impact details such as privilege escalation, data disclosure, or denial of service are described in the provided data. There are no known exploits in the wild reported. The vulnerabilities could potentially affect the integrity or confidentiality of environment data reported by Red Hat Discovery, but exact impact scenarios are not detailed.

Mitigation Recommendations

No official fixes or patches are currently available for the vulnerabilities listed in this advisory. Users should monitor Red Hat's official security advisories for updates and apply any future patches promptly. The containers required to run Discovery can be installed via the discovery-installer RPM as per official documentation, but this does not constitute a fix for the vulnerabilities. No vendor advisory states that no action is required or that issues are already mitigated.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Csaf Category
csaf_security_advisory
Csaf Version
2.0
Publisher
Red Hat Product Security
Advisory Id
RHSA-2026:1736
Cve Count
21
Additional Cves
["CVE-2025-11187","CVE-2025-12084","CVE-2025-12818","CVE-2025-13601","CVE-2025-13836","CVE-2025-15467","CVE-2025-15468","CVE-2025-15469","CVE-2025-66199","CVE-2025-66418","CVE-2025-66471","CVE-2025-68160","CVE-2025-68973","CVE-2025-69418","CVE-2025-69419","CVE-2025-69420","CVE-2025-69421","CVE-2026-21441","CVE-2026-22795","CVE-2026-22796"]
Cvss Version
null

Threat ID: 6a16096be29bf47b50632356

Added to database: 05/26/2026, 20:58:19 UTC

Last enriched: 07/26/2026, 00:03:03 UTC

Last updated: 07/31/2026, 21:57:32 UTC

Views: 100

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

External Links

NVD DatabaseMITRE CVEhttps://access.redhat.com/errata/RHSA-2026:6893https://images.redhat.com/https://access.redhat.com/security/cve/CVE-2025-9086https://access.redhat.com/security/updates/classification/https://access.redhat.com/security/cve/CVE-2025-10148https://access.redhat.com/security/cve/CVE-2025-10966https://access.redhat.com/security/cve/CVE-2025-15224https://access.redhat.com/security/cve/CVE-2025-15079https://access.redhat.com/security/cve/CVE-2025-14819https://access.redhat.com/security/cve/CVE-2025-14524https://access.redhat.com/security/cve/CVE-2025-13034https://access.redhat.com/security/cve/CVE-2026-3805https://access.redhat.com/security/cve/CVE-2026-3783https://access.redhat.com/security/cve/CVE-2026-3784https://access.redhat.com/security/cve/CVE-2026-1965https://access.redhat.com/security/cve/CVE-2025-14017Canonical URLhttps://access.redhat.com/errata/RHSA-2026:1736https://access.redhat.com/security/cve/CVE-2025-11187https://access.redhat.com/security/cve/CVE-2025-12084https://access.redhat.com/security/cve/CVE-2025-12818https://access.redhat.com/security/cve/CVE-2025-13601https://access.redhat.com/security/cve/CVE-2025-13836https://access.redhat.com/security/cve/CVE-2025-15467https://access.redhat.com/security/cve/CVE-2025-15468https://access.redhat.com/security/cve/CVE-2025-15469https://access.redhat.com/security/cve/CVE-2025-66199https://access.redhat.com/security/cve/CVE-2025-66418https://access.redhat.com/security/cve/CVE-2025-66471https://access.redhat.com/security/cve/CVE-2025-68160https://access.redhat.com/security/cve/CVE-2025-68973https://access.redhat.com/security/cve/CVE-2025-69418https://access.redhat.com/security/cve/CVE-2025-69419https://access.redhat.com/security/cve/CVE-2025-69420https://access.redhat.com/security/cve/CVE-2025-69421https://access.redhat.com/security/cve/CVE-2026-21441Search on Google

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses