Skip to main content
CVE-2026-6377VulnerabilityPublished Updated

Red Hat Security Advisory: Red Hat Edge Manager Version 1.2.1 Security Update

Affects Red HatSource GCVE Database

0
Authoritative record:CVE-2026-6377· High

Not known to be exploited · public detection template (Nuclei).

Data as of 26 Oct 2026, 18:42 UTC

Severity
High

Rated by Threat Radar · CVSS not yet scored by NVD

EPSS
1.7% chance of exploitation in 30 days – higher than 77% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 16 Sep 2026

  2. Detectable: evidence found.

    nuclei template: Next4Biz CSM - Arbitrary File Read via DownloadFileHandler

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Affected software

ProductAffectedFixed in
Red Hat Product Security Red HatAffected
  • Red Hat
  • Red Hat Edge Manager
  • Red Hat Edge Manager 1.2
  • amd64
  • registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:ce8cc823b039dfde3ed0f12d929a781318dca8081e0b3ad1dfc395ce4b283073_amd64
Fixed in–

Description

Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused management of edge devices and applications. It supports image-mode RHEL and container workloads that run on Podman/Docker or Kubernetes. RHEM is now available as a standalone feature, providing greater flexibility for edge deployments. In addition to the standalone version, RHEM continues to be offered as a plugin for the following platforms: * Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge devices. * Red Hat Ansible Automation Platform (AAP): Integrates edge management with Ansible automation. This integration enables organizations to optimize the management and orchestration of their fleets of edge devices; whether its thousands of dispersed retail point-of-sale systems or industrial machinery on remote factory floors. Value for customers and partners: * This solution not only helps customers manage thousands of devices but helps scale operations. * To manage large-scale deployments, customers need to be able to integrate with their existing management systems, support remote configuration and over-the-air updates, and collect telemetry data for advanced analytics. * Red Hat Edge Manager offers a simple and security-focused lifecycle management, from onboarding to decommissioning of edge devices. This complete end-to-end solution empowers organizations to gain the most value from the fleets of devices that generate data, all from a centralized location.

References

Community reviews

Loading reviews…