Skip to main content
CVE-2026-1965VulnerabilityPublished Updated

Red Hat Security Advisory: Red Hat AI Base Images 3.0.9 (CPU)

Affects Red HatSource GCVE Database

0
Compare

Mentioned vulnerabilities

Not known to be exploited · fixed in Red Hat package updates : patch Red Hat soon.

Data as of 13 Nov 2026, 14:51 UTC

Severity
High

Rated by Threat Radar · CVSS not yet scored by NVD

Patch
Available – fixed in 8.21.0

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 11 Nov 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 13 Nov 2026.

What to do

AI-suggested

For the libcurl vulnerability (CVE-2026-11856), remediation is available by upgrading to libcurl version 8.21.0 or later. Alternatively, applications should avoid reusing libcurl easy handles across different HTTP origins with Digest authentication or explicitly clear authentication state before reuse. For the Red Hat AI Base Images 3.0.9 (CPU) product, no fixes are currently available. No other specific mitigations are provided for the other listed CVEs in the advisory.

Description

A security advisory from Red Hat addresses multiple vulnerabilities in Red Hat AI Base Images 3.0.9 (CPU), including CVE-2026-1965 and others. One detailed vulnerability (CVE-2026-11856) involves libcurl incorrectly sending Digest authentication headers to unintended HTTP origins when reusing the same connection handle, potentially exposing authentication state. This flaw affects libcurl versions 7.10.6 through 8.20.0 and is fixed in 8.21.0. No fixes are currently available for the Red Hat AI Base Images 3.0.9 (CPU) product itself. The advisory lists several CVEs but does not provide detailed descriptions or fixes for all. No known exploits are reported in the wild.

References

Community reviews

Loading reviews…