Red Hat has issued security advisories for several products including Red Hat Data Grid 8.6.1 and OpenShift Container Platform 4.21.24. The advisories address multiple vulnerabilities such as CVE-2026-4800 (lodash arbitrary code execution via untrusted input in template imports), CVE-2026-33870 and CVE-2026-33871 (Netty request smuggling and denial of service), several Axios prototype pollution and denial of service issues, DOMPurify cross-site scripting (CVE-2026-41240), Apache Log4j denial of service and log injection vulnerabilities, and a Spring Boot weak pseudo-random number generation issue leading to information disclosure. The advisories provide updated container images and packages to remediate these vulnerabilities. The updates have been rated with an important security impact by Red Hat Product Security.

The vulnerabilities collectively allow for arbitrary code execution, denial of service attacks, request smuggling, authentication bypass, cross-site scripting, and potential information disclosure. These issues can affect system availability, confidentiality, and integrity if exploited. The impact severity is rated as important/high by Red Hat, indicating significant security risks that could be leveraged by attackers if unpatched.

Red Hat has released official security updates and patches for the affected products and versions. Users should apply all relevant errata and updates as described in the vendor advisories (RHSA-2026:22619 for Red Hat Data Grid 8.6.1 and RHSA-2026:37186 for OpenShift Container Platform 4.21.24). Detailed upgrade instructions are available in the Red Hat documentation. No additional mitigation steps beyond applying these official fixes are indicated by the vendor.