A flaw was found in the Netty STOMP codec. A remote attacker could send a specially crafted STOMP frame with a content-length header exceeding the maximum integer value. This integer truncation vulnerability could lead to an infinite decode loop, causing a Denial of Service (DoS) by exhausting memory and CPU resources.
CVE-2026-93492 is a medium severity vulnerability in the Netty HTTP/2 HpackEncoder component used by Red Hat Build of Debezium 3.6. It allows a remote attacker to cause a denial of service by sending HTTP/2 SETTINGS frames with an excessively large MAX_HEADER_TABLE_SIZE, leading to high CPU and memory usage. Red Hat has published an advisory referencing this issue as part of a broader security update for Red Hat build of Quarkus 3.27.5.SP2. The advisory indicates that a security update is available to address this and other vulnerabilities.
CVE-2026-93491 is a high-severity denial of service vulnerability in Netty's HttpServerCodec component used by Red Hat Build of Apache Camel 3.33.3.SP2. An unauthenticated remote attacker can exploit this by sending pipelined HTTP/1.1 requests and withholding reads, causing unbounded memory growth and eventual service outage due to memory exhaustion. Red Hat has published an advisory referencing this issue and related fixes in Red Hat build of Quarkus 3.27.5.SP2. No explicit patch for Apache Camel 3.33.3.SP2 is detailed in the advisory, so users should consult the vendor advisory for remediation guidance.
CVE-2026-93488 is a denial of service vulnerability in the Netty component used by Red Hat Build of Apache Camel 3.33.3.SP2. The flaw arises because SpdySessionHandler accepts an unlimited number of concurrent remote-initiated streams due to the default localConcurrentStreams value being Integer.MAX_VALUE and no API to limit it. This allows a remote attacker to exhaust JVM heap and direct memory by opening many SPDY streams, leading to OutOfMemoryError and service disruption.
A flaw was found in Netty's `SmtpResponseDecoder` component. A remote attacker, acting as a malicious or man-in-the-middle (MITM) SMTP server, could exploit this by sending a specially crafted, unbounded multi-line SMTP response without a terminator. This vulnerability leads to unbounded memory accumulation within the client's Java Virtual Machine (JVM) heap, causing an `OutOfMemoryError` and a denial of service (DoS) due to a process crash.
A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset D_LCK protection and injecting code into System Management Mode memory.
A flaw was found in Netty's Online Certificate Status Protocol (OCSP) Client. The client fails to verify the 'id-kp-OCSPSigning' Extended Key Usage (EKU) in OCSP responder certificates. A remote attacker, holding any valid certificate issued by the same Certificate Authority (CA), can exploit this by forging 'GOOD' OCSP responses for revoked certificates. This bypasses certificate revocation checks, allowing applications using Netty's OCSP Client to accept certificates that should have been revoked, leading to an authorization bypass.
A flaw was found in Netty's `RedisArrayAggregator` component. A remote attacker can exploit this vulnerability by sending specially crafted nested Redis (RESP) array headers. This can cause the `RedisArrayAggregator` to eagerly preallocate a large amount of heap memory, leading to heap memory exhaustion and a Denial of Service (DoS) for applications using `RedisDecoder` with `RedisArrayAggregator` on untrusted traffic.
A flaw was found in Netty's MqttDecoder. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted MQTT CONNECT packet. The decoder fails to properly validate the 'Properties Length' against the 'Remaining Length', allowing an attacker to bypass size limits. This leads to excessive memory and CPU consumption, resulting in a denial of service (DoS) due to an OutOfMemoryError.
A flaw was found in io.netty/netty-codec-memcache. The Memcache binary protocol codec incorrectly reads `keyLength` and `extrasLength` as signed Java types instead of unsigned, as specified by the protocol. A malicious Memcache server can exploit this type mismatch by sending a specially crafted response. This can lead to frame desynchronization and response smuggling, where one client's data may be inadvertently exposed to another client's response stream in proxy or cache environments.
CVE-2026-87743 is a security vulnerability in the Red Hat build of Quarkus 3.27.5.SP2 involving a path normalization discrepancy in HTTP security. An unauthenticated attacker can craft a URL that bypasses authorization checks by exploiting differences in how paths are normalized between the security matcher and HTTP request dispatchers. This leads to unauthorized access to protected endpoints and potentially sensitive information. The issue has a high severity rating with a CVSS score of 7.5. Red Hat has released an important security update addressing this vulnerability as part of the Quarkus 3.27.5.SP2 release. Users are advised to apply the update to remediate the issue.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating the grafana12.4 package version 12.4.10-0.6.hum1 for aarch64 and x86_64 architectures to address multiple vulnerabilities including CVE-2026-61709. The advisory highlights this CVE as a security fix. The severity of the vulnerabilities is assessed as high. The update is available as new RPM packages. No explicit patch status beyond the availability of updated RPMs is stated in the advisory.
A flaw was found in Netty's `netty-handler-ssl-ocsp` component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol (OCSP) response that omits the optional `nextUpdate` field. This omission causes the OCSP validation to be silently skipped, leading to applications proceeding with an unvalidated certificate. This can result in a bypass of security controls where certificate validation is expected.
A flaw was found in Netty's StompSubframeDecoder component. A remote attacker can exploit this vulnerability by sending a specially crafted STOMP frame body without its terminating null byte. This causes the decoder to allocate a ByteBuf (a buffer for bytes) that is never released, leading to a permanent memory leak. Over time, this uncontrolled memory consumption can result in a Denial of Service (DoS) for the application using the affected STOMP codec.
CVE-2026-89058 is a vulnerability in RESTEasy's CorsFilter component of the Red Hat build of Quarkus. When configured to allow all origins ("*"), it improperly reflects the request's Origin header in the Access-Control-Allow-Origin response while also setting Access-Control-Allow-Credentials to true. This misconfiguration enables a malicious website to perform credentialed cross-origin requests and read authenticated responses from a victim's session, leading to a loss of confidentiality. The issue affects versions >=0 and <6.2.19.Final, and >=7.0.0.Alpha1 and <7.0.5.Final. A security update is available in Red Hat build of Quarkus 3.27.6.redhat that addresses this and other vulnerabilities.
CVE-2026-89059 is a vulnerability in RESTEasy's IIOImageProvider component used in the Red Hat build of Quarkus. It allows a remote, unauthenticated attacker to send a crafted image with extremely large declared dimensions, causing excessive memory allocation and JVM heap exhaustion, leading to denial of service. The vulnerability affects certain versions of Red Hat build of Quarkus prior to fixed releases. The CVSS score is 7.5 (high severity) with no impact on confidentiality or integrity but high impact on availability.
Red Hat has issued a security advisory for an update to Red Hat Hardened Images RPMs, specifically addressing vulnerabilities identified by CVE-2026-63209 and CVE-2026-71557 in the syft package version 1.52.0-0.1.hum1 for aarch64 and x86_64 architectures. The update is described as a bug fix and enhancement update without detailed technical information on the vulnerabilities. No known exploits are reported in the wild at this time.
A vulnerability exists in the Qt XML parsing component (QDomNode destructor) used in Red Hat Hardened Images RPMs containing qt6-qtbase packages. The flaw can cause unbounded recursion leading to denial-of-service (DoS) crashes when processing untrusted XML input. Currently, no fix has been released and no mitigation meets Red Hat's criteria.
Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services, and configuration settings.