Skip to main content
CVE-2026-6322VulnerabilityPublished Updated

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Affects Red HatSource GCVE Database

0
Compare

Not known to be exploited.

Data as of 29 Oct 2026, 07:15 UTC

Severity
High

Rated by Threat Radar · CVSS not yet scored by NVD

EPSS
0.5% chance of exploitation in 30 days – higher than 43% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 29 Aug 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 29 Oct 2026.

What to do

AI-suggested

A security update is available for Red Hat Hardened Images RPMs including grafana13.1-13.1.3-0.3.hum1. Users should apply this update to mitigate the vulnerabilities. No additional mitigations or workarounds are specified in the advisory. Red Hat provides detailed update instructions at https://images.redhat.com/.

Description

A security update for Red Hat Hardened Images RPMs addresses multiple vulnerabilities including CVE-2026-6322. The primary issue involves the fast-uri library incorrectly decoding percent-encoded authority delimiters in URIs, which can lead to bypassing security controls such as host allowlist checks and redirect validation. This update includes fixes for several CVEs affecting the grafana13.1 package. No specific affected versions are listed in the advisory.

References

Community reviews

Loading reviews…