CVE-2026-91147 is a medium severity vulnerability in the cockpit-ws component of Red Hat Enterprise Linux 10. It allows a remote unauthenticated attacker to cause a denial of service by sending a specially crafted request to the exact URL-root prefix without a trailing slash when WebService.UrlRoot is configured. This causes the cockpit-ws service to terminate unexpectedly, resulting in unavailability of the Cockpit web service.
CVE-2026-91149 is a vulnerability in Cockpit on Red Hat Enterprise Linux 10 where an unauthenticated remote attacker can cause a denial of service by opening many simultaneous connections to the cockpit-tls service. This triggers the creation of an unbounded number of detached threads, exhausting system resources and potentially making the Cockpit service unavailable to legitimate users.
CVE-2026-93579 is a medium severity vulnerability in Netty's HTTP/2 stack used by Red Hat Build of Debezium 3.6. It allows remote attackers to inject prohibited characters such as NUL, Line Feed, and Carriage Return into HTTP/2 header field values due to insufficient validation. This can lead to HTTP request smuggling, header injection, or response splitting when crossing HTTP/2 to HTTP/1.1 translation boundaries, potentially causing unauthorized access or data manipulation. A security update addressing this issue is available in Red Hat build of Quarkus 3.27.5.SP2. Users are advised to apply this update to mitigate the vulnerability.
Red Hat has released a security advisory addressing multiple high severity vulnerabilities in Red Hat Hardened Images RPMs, including updates to Grafana packages version 12.4.10-0.2.hum1 and 13.1.6-0.2.hum1 for aarch64 and x86_64 architectures. The update is a bug fix and enhancement release that resolves these issues. The advisory covers a range of CVEs including CVE-2026-14199 and others. The update is available and users are advised to apply it as per Red Hat's instructions.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating the jaeger package to version 2.20.0-0.9.hum1. This update addresses the security vulnerability identified as CVE-2026-81871. The advisory does not provide detailed technical information about the vulnerability or its exploitation but categorizes it with medium severity.
A flaw was found in the multicluster-observability-addon. A remote attacker can access a debug endpoint without authentication, due to a misconfiguration in the underlying addon-framework library. This allows for the disclosure of sensitive operational information, such as goroutine, heap, and command-line details, after completing a basic encrypted connection. This vulnerability does not enable direct remote code execution.
CVE-2026-93573 is a medium severity vulnerability in Netty's HTTP/1.1 decoder used by Red Hat Build of Debezium 3.6. It allows remote attackers to bypass Transfer-Encoding header validation by splitting the header across multiple fields, enabling HTTP request smuggling. This can lead to bypassing security controls and unintended request processing. A fix is available as part of Red Hat build of Quarkus 3.27.5.SP2 update.
A vulnerability in Netty affects Red Hat Build of Apache Camel 3.33.3.SP2, where HTTP/2 and HTTP/3 Extended CONNECT requests are incorrectly processed as HTTP/1.1 CONNECT requests. This leads to loss of critical protocol and path information, enabling attackers to bypass security policies such as routing or authorization logic. The flaw can cause integrity loss in applications relying on Netty for HTTP/2 or HTTP/3 communication.
A flaw was found in Netty netty-codec-smtp. The component does not properly validate Carriage Return (CR) and Line Feed (LF) characters in the SMTP command-name field. A remote attacker, if an application routes untrusted input into this field, can embed CR/LF characters to inject arbitrary SMTP commands. This can lead to SMTP command smuggling, allowing for unauthorized email relay or spoofing of sender/recipient addresses. While the impact is significant, the real-world exploitability is considered lower as applications typically do not place user-controlled data in the command-name field.
xdg-dbus-proxy incorrectly filters D-Bus broadcast messages, bypassing configured path, interface, and member restrictions. This allows a sandboxed Flatpak application to intercept broadcast signals on the D-Bus session bus and AT-SPI bus that should be restricted, potentially exposing sensitive information to unauthorized applications.
CVE-2026-85511 is a medium severity vulnerability in Red Hat JBoss Enterprise Application Platform 8.1.8.GA affecting the Elytron security framework. The flaw allows parameter substitution due to missing URL encoding in an Elytron token-realm configured with oauth2-introspection, potentially enabling authentication bypass by spoofing. A security update addressing this issue is available from Red Hat.
CVE-2026-93569 is a vulnerability in Netty's HTTP/1 to HTTP/2 conversion process where conflicting HTTP/1 request-target and Host headers cause incorrect prioritization of the Host header for the HTTP/2 :authority field. This inconsistency can allow remote unauthenticated attackers to bypass security controls in Netty-based proxies or gateways, potentially leading to unauthorized access, cache poisoning, or misrouting of requests.
CVE-2026-93567 is a vulnerability in Netty's HTTP/2 codec used by Red Hat Build of Apache Camel 3.33.3.SP2. The flaw involves improper input validation when converting HTTP/1 CONNECT requests to HTTP/2, where the Host header is incorrectly used instead of the CONNECT authority-form request-target. This allows a remote attacker to supply a manipulated Host header, resulting in a malformed HTTP/2 CONNECT request that can bypass security controls such as tunnel allow-lists and egress policies, causing integrity loss.
CVE-2026-10832 is a resource exhaustion vulnerability in the DERDecoder class of wildfly-elytron-asn1 used by Red Hat JBoss Enterprise Application Platform 8.1.8.GA. A remote attacker can send a crafted DER payload with an inflated length value causing excessive memory allocation and JVM memory exhaustion. This leads to a remote Denial of Service (DoS) affecting services processing untrusted DER/ASN.1 input, including SASL authentication and X.500 certificate principal parsing.
CVE-2026-93566 is a medium severity vulnerability in the Netty HTTP codec used by Red Hat Build of Debezium 3.6. It allows a remote attacker to bypass strict validation by sending a specially crafted HTTP request containing control characters in the chunk-size line, leading to HTTP request smuggling. This can result in information disclosure or unauthorized actions. Red Hat has published an advisory indicating that this issue is addressed in Red Hat build of Quarkus 3.27.5.SP2 with a security update. Users are advised to apply this update to mitigate the vulnerability.
CVE-2026-93565 is a high-severity vulnerability in the Netty RtspDecoder component used by Red Hat Build of Apache Camel 3.33.3.SP2. The flaw involves improper handling in the RtspMethods.valueOf() function, which incorrectly strips trailing control bytes from RTSP method tokens. This can be exploited remotely by sending crafted RTSP requests to bypass method-based access controls and to smuggle malicious requests through Netty-based RTSP proxies, making them appear legitimate to backend systems.
A denial of service flaw was found in Poppler's Splash backend. A crafted PDF with tiling-pattern geometry approaching the int32 boundary can cause SplashOutputDev::tilingPatternFill to compute an attacker-controlled repeat count that drives an excessively long loop in the pattern-fill scanline routine, without a corresponding memory allocation. An attacker could exploit this by supplying a malicious PDF to an application that renders it via Poppler's Splash backend, causing the rendering process to consume 100% CPU for an attacker-controlled, extended duration.
CVE-2026-93564 is a high-severity vulnerability in the Netty component used by Red Hat Build of Apache Camel 3.33.3.SP2. It involves a reference-count leak in the HAProxy PROXY-v2 message decoder that allows a remote, unauthenticated attacker to send specially crafted PROXY-protocol v2 headers. This flaw can cause memory exhaustion leading to a denial of service (DoS) condition. Red Hat has issued an advisory referencing this issue as part of a broader security update for Red Hat build of Quarkus 3.27.5.SP2. The advisory indicates that a security update is available to address this and other vulnerabilities.
CVE-2026-93558 is a high-severity denial of service vulnerability in Netty's WebSocketServerExtensionHandler used by Red Hat Build of Apache Camel 3.33.3.SP2. An unauthenticated remote attacker can exploit HTTP/1.1 pipelining to cause unbounded growth of a per-connection queue, exhausting JVM heap memory and causing service disruption. Red Hat has issued an important security advisory addressing this issue in the Red Hat build of Quarkus 3.27.5.SP2, which includes the fix for this vulnerability.