Skip to main content

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

0
High
Published: 09/30/2026 (09/30/2026, 08:39:37 UTC)
Source: GCVE Database
Vendor/Project: Red Hat Product Security
Product: Red Hat

Description

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating multiple nodejs26 packages to address CVE-2026-102278. The advisory lists updated RPMs for various architectures and components related to nodejs26. No explicit details about the vulnerability are provided beyond the CVE identifier and a CWE reference. No affected versions are explicitly stated, and no direct patch version range is given. The advisory directs users to apply the update via the provided Red Hat channels.

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 09/30/2026, 15:58:54 UTC

Technical Analysis

This security advisory from Red Hat addresses a vulnerability identified as CVE-2026-102278 affecting the nodejs26 packages within Red Hat Hardened Images RPMs. The update includes multiple RPMs such as nodejs26, nodejs26-bin, nodejs26-devel, nodejs26-docs, nodejs26-full-i18n, nodejs26-libs, nodejs26-npm, nodejs26-npm-bin, and v8-14.6-devel for aarch64 and x86_64 architectures. The advisory does not provide technical details about the nature of the vulnerability beyond referencing CWE-770. The advisory is published and includes a security fix, but no explicit affected version range or patch version is detailed in the input data.

Potential Impact

The vulnerability is rated as high severity by Red Hat. The specific impact details are not described in the provided data, but the high severity rating indicates a significant security risk if unpatched. The vulnerability affects the nodejs26 packages in Red Hat Hardened Images, potentially impacting systems using these packages.

Mitigation Recommendations

Red Hat has released updated RPM packages to address CVE-2026-102278. Users should apply the security update by upgrading to the listed package versions (e.g., nodejs26-26.10.0-0.2.hum1 and related packages). For detailed instructions and to obtain the updates, users should refer to the Red Hat advisory at https://access.redhat.com/errata/RHSA-2026:73856 and https://images.redhat.com/. No indication is given that the vulnerability is already mitigated or requires no action, so applying the update is recommended.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Csaf Category
csaf_security_advisory
Csaf Version
2.0
Publisher
Red Hat Product Security
Advisory Id
RHSA-2026:73856
Cve Count
1
State
PUBLISHED

Threat ID: 6abd30812a4e24523d34003a

Added to database: 09/30/2026, 15:53:37 UTC

Last enriched: 09/30/2026, 15:58:54 UTC

Last updated: 09/30/2026, 16:47:50 UTC

Views: 2

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses