Threats Tagged 'cve-2026-84961'

Red Hat Ansible Automation Platform 2.2 includes updated Ansible plug-ins for the Red Hat Developer Hub that enhance user experience and automation capabilities. A security advisory has been issued covering multiple CVEs including CVE-2026-47686. The advisory marks the severity as critical but does not provide detailed vulnerability descriptions, affected versions, or patches. No fixes or patches are currently available according to the vendor advisory.

Red Hat Ansible Automation Platform 2.1 includes updated Ansible plug-ins for the Red Hat Developer Hub that enhance automation and provide curated content. A security advisory published by Red Hat identifies multiple vulnerabilities including CVE-2026-47686 affecting this platform. The advisory highlights new features, bug fixes, and enhancements but does not specify any fixes or remediation guidance for the listed vulnerabilities. The severity of the vulnerabilities is rated critical. No known exploits in the wild have been reported, and no patch or official fix is currently available.

Red Hat Developer Hub (RHDH) versions prior to 1.9.9 contain a high severity security vulnerability identified as CVE-2026-19534. RHDH is an enterprise-grade, self-managed developer portal based on Backstage.io, supported on Kubernetes platforms including OpenShift. Red Hat released version 1.9.9 to address this and other issues. No CVSS score is provided for this vulnerability.

Red Hat has released a security advisory addressing multiple vulnerabilities in Red Hat Hardened Images RPMs, specifically updating nodejs24 and nodejs26 packages. The advisory includes bug fixes and enhancements for CVE-2026-18540, CVE-2026-19534, CVE-2026-84961, and CVE-2026-85024. Updated packages cover architectures including aarch64 and x86_64. No known exploits have been reported in the wild. The advisory provides updated package versions to mitigate these vulnerabilities.

Red Hat has released a security advisory addressing multiple high severity vulnerabilities in Red Hat Hardened Images RPMs, including updates to Grafana packages version 12.4.10-0.2.hum1 and 13.1.6-0.2.hum1 for aarch64 and x86_64 architectures. The update is a bug fix and enhancement release that resolves these issues. The advisory covers a range of CVEs including CVE-2026-14199 and others. The update is available and users are advised to apply it as per Red Hat's instructions.

Node.js undici library's BalancedPool constructor improperly handles TLS options by deep cloning its options via JSON serialization, which drops function-valued TLS options such as custom checkServerIdentity callbacks. This leads to TLS certificate validation bypass when using BalancedPool with such custom callbacks, allowing acceptance of TLS peers that should be rejected. Other undici components like Client, Pool, and Agent are not affected. The issue is fixed in versions 7.29.1 and 8.10.2.

Red Hat has released a security advisory addressing multiple vulnerabilities in Red Hat Hardened Images RPMs, including updates to nodejs24 packages for aarch64 and x86_64 architectures. The advisory covers several CVEs such as CVE-2026-18149 and others. A patch is available to remediate these issues. The update includes bug fixes and enhancements to various nodejs24-related RPMs. The vulnerabilities are rated with high severity.