This Red Hat Offline Knowledge Portal security advisory (RHSA-2026:28573) addresses five CVEs including CVE-2026-5795 (Jetty), CVE-2026-45292 (OpenTelemetry), and three Netty-related CVEs (CVE-2026-44249, CVE-2026-45416, CVE-2026-50010). The most detailed vulnerability, CVE-2026-44249, is an important flaw in the Netty network application framework where an incorrect masking operation in the IpSubnetFilterRule.compareTo() function allows remote attackers to bypass IPv6 subnet filtering rules. This could lead to unauthorized access or exposure of services intended to be restricted by network policies. Red Hat provides a container image update to remediate these issues. No known exploits in the wild have been reported. The advisory emphasizes that mitigation options for some issues may not meet Red Hat's criteria, and upgrading to the updated container image is recommended.

The vulnerabilities allow potential unauthorized access or exposure of services by bypassing network restrictions, particularly through IPv6 subnet filtering bypass in Netty. This could compromise confidentiality, integrity, and availability of affected systems running the Red Hat Offline Knowledge Portal. The severity is rated high by Red Hat, reflecting significant risk if exploited. No active exploitation is currently known.

Red Hat provides an updated container image for the Offline Knowledge Portal that includes fixes for the identified vulnerabilities. Users should pull the updated image from the Red Hat container registry using the 'podman pull' command as specified in the advisory. For CVE-2026-44249, no effective mitigation other than applying the fix is currently available. Red Hat recommends upgrading to the fixed version to address these issues. No additional mitigations are noted in the advisory.