Read the docs
Red Hat Security Advisory

RHSA-2026:39952

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-07-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 5 records

TI-2026-34881 CVE-2026-47304 · GHSA-g8r8-53c2-pm3f

.NET Security Feature Bypass Vulnerability

Priority MEDIUM 43

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00286 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +12 CWE-345
Priority MEDIUM 42

Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00841 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +4 CWE-302
TI-2026-40544 CVE-2026-56170 · GHSA-j8gr-8fp3-5q5h

ASP.NET Core Denial of Service Vulnerability

Priority MEDIUM 41

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +4 CWE-770
Priority MEDIUM 41

Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00778 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +4 CWE-303
TI-2026-37347 CVE-2026-50659 · GHSA-74jp-vm22-8q8x

.NET Spoofing Vulnerability

Priority LOW 30

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00738 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +11 CWE-116