Threat database

A Server-Side Request Forgery (SSRF) vulnerability exists in the Image API (v2) of OpenStack Glance when the show_multiple_locations configuration option is enabled. An authenticated attacker can manipulate the locations attribute of an image in the queued state via a crafted HTTP PATCH request. This vulnerability has a medium severity with a CVSS score of 6.5, impacting confidentiality but not integrity or availability.

An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the src/lib/utils.ts and the getServerUrlHash function

A security advisory from Red Hat addresses a medium severity vulnerability identified as CVE-2026-84783 affecting Red Hat Hardened Images RPMs, specifically the openssl3 packages. The update includes new versions of openssl3-devel, openssl3-devel-engine, openssl3-libs, and the openssl3 source package. The advisory provides updated RPMs for aarch64 and x86_64 architectures. No explicit fix details or exploit reports are mentioned.

Multiple vulnerabilities in zstd-jni have been addressed in version v1.5.7.16. These include denial of service and information disclosure via out-of-bounds reads, as well as use-after-free issues that can cause memory corruption, silent data corruption, or JVM crashes.

Red Hat has issued an important security advisory for Red Hat AMQ Clients 2026.Q3 addressing multiple vulnerabilities in components such as Apache Qpid Proton-J, Jackson-databind, Netty, Spring Boot, and others. The vulnerabilities include denial of service, authentication bypass, arbitrary code execution, information disclosure, and HTTP request smuggling. These flaws affect message sending and receiving capabilities with AMQ Broker 7. The update also includes numerous bug fixes and enhancements. Users are advised to apply this update after ensuring all previous errata are applied.

A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/devfile/samples/` endpoints allows a remote attacker to send crafted devfile payloads. This can lead to Server-Side Request Forgery (SSRF), where the console pod makes requests to internal services and reflects partial responses to the attacker. Additionally, by sending repeated large requests without a specified content length, an attacker can cause unbounded memory growth, leading to a Denial of Service (DoS).

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating the grafana12.4 package version 12.4.10-0.6.hum1 for aarch64 and x86_64 architectures to address multiple vulnerabilities including CVE-2026-61709. The advisory highlights this CVE as a security fix. The severity of the vulnerabilities is assessed as high. The update is available as new RPM packages. No explicit patch status beyond the availability of updated RPMs is stated in the advisory.

Red Hat has released a new container image for the satellite/iop-insights-engine-rhel9 component used in Red Hat Satellite 6.19. This component, Red Hat Lightspeed in Satellite, analyzes system health and configuration locally by applying predefined rules to limited local data. The advisory references CVE-2026-69243 and CVE-2026-69244 but does not provide details on fixes or exploitation. The container image is now generally available, and Red Hat provides documentation for installation and configuration.

Red Hat has announced the general availability of the satellite/iop-host-inventory-frontend-rhel9 container image for Red Hat Satellite 6.19. This container image supports Red Hat Lightspeed, which analyzes system health and configuration locally by applying predefined rules to limited system data. No specific security fixes or patches are mentioned in the advisory. The advisory references multiple CVEs but does not detail any remediation or active exploitation. The container image enables generating recommendations without sending data to Red Hat services.

Red Hat has issued a security update for the Red Hat build of Keycloak 26.4.16 images used in OpenShift Container Platform. The update addresses multiple vulnerabilities including privilege escalation via impersonation roles, information leakage through SAML Redirect DEFLATE helpers, account lockout caused by username collisions, incomplete fixes for filesystem path probing and policy enforcer bypass, TLS hostname verification bypass, and an unauthenticated denial-of-service via unbounded locale caching. These issues affect the Red Hat build of Keycloak versions from 26.4.0 up to and including 26.4.16. The update is important to maintain the security and integrity of authentication services in OpenShift environments.

Red Hat has issued a security update for the Red Hat build of Keycloak 26.6.7 images used in OpenShift Container Platform. The update addresses multiple security vulnerabilities including information disclosure, privilege escalation, authorization bypasses, remote code execution, and denial of service. Users are advised to apply the update to mitigate these risks.

Morgan, an HTTP request logger middleware for Node.js, contains a log injection vulnerability via unescaped double quotes in quoted log fields. This flaw allows attackers controlling certain quoted fields such as user-agent, referrer, request URL, or remote-user to inject double quotes that prematurely close a log field and forge additional fields in the log record. The vulnerability affects combined, common, default, and any custom formats that quote tokens. A fix is available in version 1.12.1.

An XSS vulnerability (CVE-2026-88058) exists in Angular's @angular/platform-server during server-side rendering of ProcessingInstruction DOM nodes nested inside fallback raw-content elements like <noscript>. The vulnerability allows injection of live HTML and arbitrary JavaScript execution in users' browsers if untrusted data is used in processing instruction nodes during SSR. It affects multiple Angular.js versions prior to 20.3.30, 21.2.22, and 22.1.4, as well as several specific older versions. The CVSS score is 6.1 (medium severity).

A heap buffer overflow vulnerability exists in the cjose library's AES Key Wrap decryption functionality affecting versions prior to 0.6.2.5. This vulnerability can lead to denial of service. Red Hat Enterprise Linux 9.6 Extended Update Support and related products are impacted. Red Hat has issued a security advisory with an update that addresses this issue.