Read the docs
Red Hat Security Advisory

RHSA-2026:26638

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-06-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 16 records

TI-2026-33473 CVE-2026-45736 · GHSA-58qx-3vcg-4xpx

ws: Uninitialized memory disclosure

Priority HIGH 66

ws is an open source WebSocket client and server for Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00745 Published 2026-05-15 Partial fix · 8.20.1 CWE-908
TI-2026-33337 CVE-2026-45591 · GHSA-f8h2-vmm9-qhj6

ASP.NET Core Denial of Service Vulnerability

Priority MEDIUM 44

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02481 Published 2026-06-09 Fixed in 10.0.9, 8.0.28 +2 CWE-400
TI-2026-37262 CVE-2026-50528 · GHSA-qvw7-jm5c-6hqw

.NET Security Feature Bypass Vulnerability

Priority MEDIUM 43

Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00609 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +4 CWE-302
Priority MEDIUM 42

Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00841 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +4 CWE-302
TI-2026-41095 CVE-2026-57108 · GHSA-rp2p-6cmp-jxj9

.NET Denial of Service Vulnerability

Priority MEDIUM 41

Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +1 CWE-843
TI-2026-40544 CVE-2026-56170 · GHSA-j8gr-8fp3-5q5h

ASP.NET Core Denial of Service Vulnerability

Priority MEDIUM 41

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +4 CWE-770
TI-2026-37340 CVE-2026-50651 · GHSA-wp74-jgxh-gv4q

.NET Denial of Service Vulnerability

Priority MEDIUM 41

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +4 CWE-770
Priority MEDIUM 41

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +11 CWE-770
Priority MEDIUM 41

Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +11 CWE-121
TI-2026-37259 CVE-2026-50525 · GHSA-8q5v-6pqq-x66h

.NET Denial of Service Vulnerability

Priority MEDIUM 41

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +12 CWE-770
Priority MEDIUM 41

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01232 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +4 CWE-1287
TI-2026-34879 CVE-2026-47302 · GHSA-cvvh-rhrc-wg4q

.NET Denial of Service Vulnerability

Priority MEDIUM 41

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +11 CWE-770
Priority MEDIUM 41

Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00778 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +4 CWE-303
TI-2026-37260 CVE-2026-50526 · GHSA-55jh-fwmh-39m4

.NET Tampering Vulnerability

Priority LOW 32

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00224 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +4 CWE-345
TI-2026-37347 CVE-2026-50659 · GHSA-74jp-vm22-8q8x

.NET Spoofing Vulnerability

Priority LOW 30

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00738 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +11 CWE-116
TI-2026-33262 CVE-2026-45491 · GHSA-7q4v-2mr6-5gpx

.NET Tampering Vulnerability

Priority LOW 28

Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00388 Published 2026-06-09 Fixed in 10.0.9, 8.0.28 +1 CWE-59