The vulnerability CVE-2026-31790 involves information disclosure caused by uninitialized memory exposure when processing an invalid RSA public key in OpenSSL. Red Hat has released security updates for OpenSSL in multiple products including Red Hat Enterprise Linux 10 and Red Hat OpenShift Container Platform 4.19 to fix this issue. The advisory includes affected versions and instructions for updating. The vulnerability is rated with a high severity by Red Hat Product Security, though the official CVSS score is not provided in the input data.

Successful exploitation of this vulnerability could lead to unauthorized disclosure of sensitive information from uninitialized memory in the OpenSSL FIPS module. This could potentially compromise cryptographic operations relying on OpenSSL, affecting confidentiality. No known exploits in the wild have been reported at this time.

Red Hat has provided official patches addressing this vulnerability. Users of affected Red Hat Enterprise Linux 10 and Red Hat OpenShift Container Platform 4.19 versions should apply the security updates as soon as possible. Detailed upgrade instructions are available from Red Hat's documentation and advisories. No additional mitigations are specified beyond applying the official fixes.