Red Hat Security AdvisoryRHSA-2026:26638
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-06-17 · Red Hat rating Important · View on Red Hat →
Fixes 16 records
Priority HIGH 66
ws is an open source WebSocket client and server for Node.js.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00745 · Published 2026-05-15 · Partial fix · 8.20.1 CWE-908
Priority MEDIUM 44
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02481 · Published 2026-06-09 · Fixed in 10.0.9, 8.0.28 +2 CWE-400
Priority MEDIUM 43
Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00609 · Published 2026-07-14 · Fixed in 10.0.10, 8.0.29 +4 CWE-302
Priority MEDIUM 42
Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00841 · Published 2026-07-14 · Fixed in 10.0.10, 8.0.29 +4 CWE-302
Priority MEDIUM 41
Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-07-14 · Fixed in 10.0.10, 8.0.29 +1 CWE-843
Priority MEDIUM 41
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-07-14 · Fixed in 10.0.10, 8.0.29 +4 CWE-770
Priority MEDIUM 41
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-07-14 · Fixed in 10.0.10, 8.0.29 +4 CWE-770
Priority MEDIUM 41
Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-07-14 · Fixed in 10.0.10, 8.0.29 +11 CWE-770
Priority MEDIUM 41
Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-07-14 · Fixed in 10.0.10, 8.0.29 +11 CWE-121
Priority MEDIUM 41
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-07-14 · Fixed in 10.0.10, 8.0.29 +12 CWE-770
Priority MEDIUM 41
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01232 · Published 2026-07-14 · Fixed in 10.0.10, 8.0.29 +4 CWE-1287
Priority MEDIUM 41
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-07-14 · Fixed in 10.0.10, 8.0.29 +11 CWE-770
Priority MEDIUM 41
Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00778 · Published 2026-07-14 · Fixed in 10.0.10, 8.0.29 +4 CWE-303
Priority LOW 32
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00224 · Published 2026-07-14 · Fixed in 10.0.10, 8.0.29 +4 CWE-345
Priority LOW 30
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00738 · Published 2026-07-14 · Fixed in 10.0.10, 8.0.29 +11 CWE-116
Priority LOW 28
Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00388 · Published 2026-06-09 · Fixed in 10.0.9, 8.0.28 +1 CWE-59