Red Hat has issued Security Advisory RHSA-2026:19409 addressing multiple vulnerabilities in the Migration Toolkit for Virtualization (MTV) RHEL9 images. The advisory covers eight CVEs affecting various components of MTV. The update fixes several bugs and adds enhancements but does not explicitly list fixed versions or detailed patch information in the provided content. Users are advised to apply all previously released errata before applying this update. The vulnerabilities involve a range of CWEs including CWE-1287, CWE-338, CWE-347, CWE-325, CWE-681, CWE-94, CWE-1333, and CWE-915, indicating issues such as improper access control, cryptographic weaknesses, and code injection risks. No known active exploits have been reported. The advisory links to Red Hat documentation for upgrade instructions.

The vulnerabilities affect the Migration Toolkit for Virtualization RHEL9 images and could potentially allow attackers to exploit weaknesses related to cryptography, access control, and code injection as indicated by the associated CWEs. The severity is rated high by Red Hat. However, no known exploits in the wild have been reported. The impact could include unauthorized access, privilege escalation, or execution of arbitrary code depending on the specific vulnerability. The advisory does not provide explicit impact details for each CVE.

Red Hat recommends applying the update provided in Security Advisory RHSA-2026:19409 after ensuring all previously released errata relevant to your system have been applied. Users should follow the official upgrade and migration documentation linked in the advisory to properly update the Migration Toolkit for Virtualization. Since no explicit patch details or fixed versions are provided in the advisory content, users should monitor Red Hat's official errata and security update channels for the latest information. No additional mitigation steps are specified in the advisory.