Red Hat Security Advisory: pcs security update
Affects Red Hat pcsSource GCVE Database
Not known to be exploited : upgrade Red Hat pcs to 10.1.3 or 9.7.3 soon.
Data as of 29 Oct 2026, 19:04 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
- EPSS
- 2.8% chance of exploitation in 30 days – higher than 86% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 10.1.3, 9.7.3
Exploitation evidence
Disclosed: evidence found.
CVE published 29 Apr 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: evidence found.
Public exploit code: GitHub proofs of concept
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), GitHub proofs of concept, the Metasploit, Exploit-DB and nuclei-templates index as of 29 Oct 2026.
What to do
Upgrade Red Hat pcs to 10.1.3 or 9.7.3.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Red Hat Product Security Red Hat | Affected
| Fixed in
|
AI-suggested
Red Hat has released official patches for this vulnerability in updated pcs packages for Red Hat Enterprise Linux versions 9 and 10, including High Availability and Resilient Storage variants. Users should apply these updates promptly following Red Hat's guidance at https://access.redhat.com/articles/11258. Since this is an official fix, applying the vendor-provided updates fully mitigates the vulnerability.
Description
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * lodash: lodash: Arbitrary code execution via untrusted input in template imports (CVE-2026-4800) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- access.redhat.com/errata/RHSA-2026:10710 (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=2453496 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10710.json (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:10713 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10713.json (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:11469 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_11469.json (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:11470 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_11470.json (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:11471 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_11471.json (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:11516 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_11516.json (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:19008 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19008.json (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:19167 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19167.json (opens in a new tab)
- access.redhat.com/errata/RHBA-2026:21387 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2026/rhba-2026_21387.json (opens in a new tab)
- suse.com/support/security/rating/ (opens in a new tab)
- ftp.suse.com/pub/projects/security/csaf/rhsa-2026_11471.json (opens in a new tab)
- lists.suse.com/pipermail/suse-liberty-linux-updates/2026-July/006985.html (opens in a new tab)
- suse.com/security/cve/CVE-2026-4800/ (opens in a new tab)