Skip to main content
CVE-2026-9545VulnerabilityPublished Updated

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Affects Red HatSource GCVE Database

0
Compare

Mentioned vulnerabilities

Not known to be exploited.

Data as of 30 Oct 2026, 11:52 UTC

Severity
Medium

Rated by Threat Radar · No CVSS score from NVD or the CNA

EPSS
0.4% chance of exploitation in 30 days – higher than 35% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 17 Jul 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 24 Oct 2026.

What to do

AI-suggested

Red Hat has released updated RPM packages for curl and related libraries that include the fix for this vulnerability. Users should apply these updates to their Red Hat Hardened Images RPMs. Additionally, it is recommended to configure web application firewalls (WAFs) or load balancers to drop incoming HTTP/1.1 requests that contain both Upgrade and Content-Length headers. This mitigation blocks malformed traffic at the network edge before it reaches the vulnerable proxy without affecting legitimate users.

Description

A security update for Red Hat Hardened Images RPMs addresses a vulnerability in the nghttp2 nghttpx proxy component. The flaw (CVE-2026-58055) allows remote attackers to perform HTTP request smuggling and cross-client response-queue poisoning by forwarding ambiguous HTTP/1.1 Upgrade requests containing a Content-Length header to backend connections. Exploitation requires high attack complexity. The update includes curl and libcurl packages with the fix. Mitigation involves configuring WAF or load balancers to drop HTTP/1.1 requests containing both Upgrade and Content-Length headers.

References

Community reviews

Loading reviews…