https://vulnerability.circl.lu/cna-root/redhat/recent 2026-08-19T13:30:54.148002+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Latest vulnerabilities published by the CNAs operating under the redhat root of the CVE Program. https://vulnerability.circl.lu/vuln/cve-2026-76235 2026-08-19T12:44:55.680000+00:00 Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_html

Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_html

2026-08-19T12:44:55.680000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-76166 2026-08-19T10:01:28.199000+00:00 Modcluster-core: mod_cluster advertise listener: unauthenticated dos via crafted multicast datagram

Modcluster-core: mod_cluster advertise listener: unauthenticated dos via crafted multicast datagram

2026-08-19T10:01:28.199000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-75900 2026-08-19T07:44:35.968000+00:00 Swtpm: swtpm: out-of-bounds read in swtpm_nvram_checkheader due to sizeof(pointer) vs sizeof(struct) mismatch

Swtpm: swtpm: out-of-bounds read in swtpm_nvram_checkheader due to sizeof(pointer) vs sizeof(struct) mismatch

2026-08-19T07:44:35.968000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-75589 2026-08-19T07:20:44.880000+00:00 Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify

Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify

2026-08-19T07:20:44.880000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-72889 2026-08-19T07:20:09.095000+00:00 Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify

Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify

2026-08-19T07:20:09.095000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-15571 2026-08-18T20:40:17.770000+00:00 Keycloak-services: keycloak-services: predictable account-linking hash enables account takeover via malicious oidc client

Keycloak-services: keycloak-services: predictable account-linking hash enables account takeover via malicious oidc client

2026-08-18T20:40:17.770000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-16732 2026-08-18T20:30:22.592000+00:00 fastify vulnerable to X-Forwarded-* spoofing under trustProxy hop-count

fastify vulnerable to X-Forwarded-* spoofing under trustProxy hop-count

2026-08-18T20:30:22.592000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-18504 2026-08-18T20:19:12.611000+00:00 fastify vulnerable to schema validation bypass via root primitive coercion mismatch

fastify vulnerable to schema validation bypass via root primitive coercion mismatch

2026-08-18T20:19:12.611000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-66780 2026-08-18T17:32:00.879000+00:00 Submariner-operator: submariner-operator: flat broker trust model grants every spoke full crud on all endpoints, secrets, and endpointslices in broker namespace

Submariner-operator: submariner-operator: flat broker trust model grants every spoke full crud on all endpoints, secrets, and endpointslices in broker namespace

2026-08-18T17:32:00.879000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-66783 2026-08-18T17:06:02.815000+00:00 Submariner-operator: submariner-operator: arbitrary image override enables privileged code execution on every node

Submariner-operator: submariner-operator: arbitrary image override enables privileged code execution on every node

2026-08-18T17:06:02.815000+00:00