Skip to main content
CVE-2026-40895VulnerabilityPublished Updated

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Affects Red Hat grafana13.2Source GCVE Database

0
Compare

Mentioned vulnerabilities

Not known to be exploited.

Data as of 29 Oct 2026, 19:04 UTC

Severity
High

Rated by Threat Radar · CVSS not yet scored by NVD

EPSS
0.4% chance of exploitation in 30 days – higher than 41% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 23 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 29 Oct 2026.

What to do

Affected software

ProductAffectedFixed in
Red Hatredhat/grafana13.2pkg:rpm/redhat/grafana13.2Other threatsAffected
  • =13.2.4-0.3.hum1
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Red Hat has released updated RPM packages for grafana13.2 (version 13.2.4-0.3.hum1) that fix the listed vulnerabilities. Users should apply these official updates to mitigate the security issues. No additional mitigation steps are specified or required beyond applying the update. The vendor advisory is the authoritative source for remediation.

Description

This Red Hat security advisory addresses multiple vulnerabilities in the Red Hat Hardened Images RPMs, specifically in the grafana13.2 package version 13.2.4-0.3.hum1. One notable vulnerability, CVE-2026-111755, involves improper handling of sensitive credential headers during cross-origin redirects in the follow-redirects library, potentially exposing sensitive authentication data to untrusted remote servers. The advisory provides updated RPM packages to mitigate these issues.

References

Community reviews

Loading reviews…