Threats Tagged 'cve-2026-84375'

Red Hat Quay versions prior to 3.9.26 contain multiple security vulnerabilities affecting the logging subsystem for Red Hat OpenShift and related components. These issues are addressed in the Red Hat Quay 3.9.26 update. The advisory emphasizes the importance of applying this update to remediate the vulnerabilities.

Red Hat Ansible Automation Platform 2.1 delivers an Ansible-first Red Hat Developer Hub user experience that simplifies the automation experience for Ansible users of all skill levels. The Ansible plug-ins provide curated content and features to accelerate Ansible learner onboarding and streamline Ansible use case adoption across your organization.

Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language. For details about this release, refer to the release notes listed in the References section.

Red Hat Ansible Automation Platform 2.6 contains multiple critical security vulnerabilities affecting its automation-controller, automation-gateway-proxy, and automation-platform-ui components. These vulnerabilities include remote code execution, privilege escalation, information disclosure, denial of service, cross-site scripting, and unauthorized access. Red Hat has released a security update addressing these issues for Ansible Automation Platform 2.6 on RHEL 9 and RHEL 10.

A security advisory from Red Hat addresses a vulnerability identified as CVE-2026-84375 affecting OpenShift Virtualization v4.12 images and related Red Hat Hardened Images RPMs. The advisory updates the grafana13.2 package to version 13.2.0-0.1.4.hum1 to fix this issue. The vulnerability is classified with medium severity and is related to CWE-835. No known exploits are reported in the wild, and no CVSS score is provided.

Red Hat has released a new container image for the satellite/iop-host-inventory-frontend-rhel9 component used in Red Hat Satellite. This component is part of Red Hat Lightspeed in Satellite, which analyzes system health and configuration locally without sending data to Red Hat services. Multiple CVEs including CVE-2026-59879 are associated with this advisory. A patch is available for affected versions, and users are advised to update accordingly.

Red Hat Developer Hub (RHDH) versions prior to 1.9.9 contain a security vulnerability identified as CVE-2026-19534. This vulnerability affects the enterprise-grade, self-managed developer portal based on Backstage.io, supported on Kubernetes platforms including OpenShift. Red Hat has released version 1.9.9 which addresses this and other issues. No CVSS score is provided for this vulnerability, but it is classified as high severity by the source.

OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift Virtualization v4.22 images.

Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services, and configuration settings. When you install Red Hat Lightspeed in Satellite locally, you can generate Red Hat Lightspeed recommendations without sending system data to Red Hat services.

Red Hat issued a security advisory for Red Hat Edge Manager version 1.2.1 addressing multiple vulnerabilities including CVE-2026-6377. Red Hat Edge Manager is a solution for managing edge devices and container workloads, supporting scalable and security-focused lifecycle management. The advisory does not provide specific details on fixes or patches. The vulnerabilities are rated as high severity. No known exploits in the wild are reported. The advisory emphasizes the product's role in managing large-scale edge deployments but does not specify remediation steps or affected versions beyond those listed.