Threats Tagged 'cve-2026-84394'

CVE-2026-84292 is a vulnerability in the node-ajv package where the fast-uri component serializes the port part of a URI without validating it. This issue is part of a set of vulnerabilities addressed in a Red Hat Hardened Images RPM security update affecting multiple Red Hat products. The vulnerability has a CVSS score of 7.5 (medium severity) and impacts integrity without affecting confidentiality or availability. A patch is available from Red Hat as part of their security advisory RHSA-2026:63782.

Red Hat Satellite versions from 6.16 up to but not including 6.19.5 contain multiple critical security vulnerabilities affecting various components. These include command injection, unauthenticated information disclosure, server-side template injection, SQL injection, denial of service, cross-site scripting, and authorization bypass. The vulnerabilities enable potential arbitrary code execution, denial of service, information disclosure, and privilege escalation. Red Hat has released security updates in Satellite 6.19.5 for RHEL 9 and related versions to address these issues.

CVE-2026-75899 is a high severity vulnerability affecting Red Hat Hardened Images RPMs, including the satellite/iop-vulnerability-frontend-rhel9 container image. The issue is addressed in updated packages such as grafana13.2. No known exploits are reported in the wild. The vulnerability impacts specific versions of node-ajv and related components within Red Hat's hardened images.

Red Hat Developer Hub (RHDH) versions prior to 1.9.9 contain a high severity security vulnerability identified as CVE-2026-19534. RHDH is an enterprise-grade, self-managed developer portal based on Backstage.io, supported on Kubernetes platforms including OpenShift. Red Hat released version 1.9.9 to address this and other issues. No CVSS score is provided for this vulnerability.

Red Hat has released a security advisory addressing multiple vulnerabilities in the satellite/iop-host-inventory-frontend-rhel9 component used in Red Hat Satellite, part of Red Hat Lightspeed. This component analyzes system health and configuration locally without sending data externally. Several CVEs including CVE-2026-59879 are associated with this advisory. A patch is available for affected versions, and users are advised to update accordingly.

OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift Virtualization v4.22 images.

Red Hat has announced the general availability of the satellite/iop-host-inventory-frontend-rhel9 container image for Red Hat Satellite 6.19. This container image supports Red Hat Lightspeed, which analyzes system health and configuration locally by applying predefined rules to limited system data. No specific security fixes or patches are mentioned in the advisory. The advisory references multiple CVEs but does not detail any remediation or active exploitation. The container image enables generating recommendations without sending data to Red Hat services.

Red Hat issued a security advisory for Red Hat Edge Manager version 1.2.1 addressing multiple vulnerabilities including CVE-2026-6377. Red Hat Edge Manager is a solution for managing edge devices and container workloads, supporting scalable and security-focused lifecycle management. The advisory does not provide specific details on fixes or patches. The vulnerabilities are rated as high severity. No known exploits in the wild are reported. The advisory emphasizes the product's role in managing large-scale edge deployments but does not specify remediation steps or affected versions beyond those listed.

Red Hat Ansible Automation Platform versions 2.1 and 2.2 include Ansible plug-ins for Red Hat Developer Hub that enhance automation. A Red Hat security advisory (RHSA-2026:65118) lists multiple CVEs including CVE-2026-5079 but does not provide specific vulnerability details or confirm patches. Updated images with new features and bug fixes are available, but no explicit fixes for the listed CVEs are stated.

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating the grafana13.2 package to version 13.2.1-0.2.hum1. This update addresses security vulnerabilities identified by CVE-2026-84394 and CVE-2026-84292. The advisory provides updated RPM packages for aarch64 and x86_64 architectures. No explicit patch status is stated beyond the availability of updated packages.