This Red Hat security advisory (RHSA-2026:30172) announces an update to Red Hat Hardened Images RPMs, specifically nodejs26 packages and related components, to address three vulnerabilities identified by CVE-2026-48615, CVE-2026-48618, and CVE-2026-48933. The advisory lists updated RPM versions but does not specify which previous versions are affected or provide detailed technical descriptions of the vulnerabilities. The update is characterized as a bug fix and enhancement. No known exploits in the wild are reported. The advisory references Red Hat's official update channels for applying the update.

The vulnerabilities addressed are considered high severity, implying potential significant security risks if unpatched. However, the exact impact details are not provided in the advisory. The vulnerabilities relate to Red Hat Hardened Images RPMs, particularly nodejs26 packages, which could affect systems using these components. No known active exploitation has been reported.

Red Hat has released updated RPM packages for nodejs26 and related components as part of this advisory. Users should apply these updates promptly following Red Hat's official guidance at https://images.redhat.com/. Since no explicit patch status is stated beyond the availability of updated RPMs, applying these updates is the recommended remediation. Patch status is confirmed by the vendor advisory indicating updated packages are available.