Red Hat Security AdvisoryRHSA-2026:54427
Red Hat Advanced Cluster Management for Kubernetes v2.15.5 security update
Released 2026-08-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Advanced Cluster Management for Kubernetes 2.15 registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9, registry.redhat.io/rhacm2/acm-prometheus-rhel9, registry.redhat.io/rhacm2/console-rhel9 +9
Fixes 8 records
Priority HIGH 78
PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00608 · Published 2026-07-27 · Partial fix · 8.5.12 CWE-200
Priority MEDIUM 44
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02044 · Published 2026-08-11 · Fixed in 16.0.20326.20190 CWE-502
Priority LOW 39
Prometheus is an open-source monitoring system and time series database.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00352 · Published 2026-05-04 · Partial fix · 3.5.3, 3.11.3 +1 CWE-200
Priority LOW 30
(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00591 · Published 2026-06-02 · Partial fix · 1.25.11, 1.26.4
Priority LOW 29
Billy is an interface filesystem abstraction for Go.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00389 · Published 2026-06-01 · Partial fix · 5.9.0, 6.0.0-alpha.1 CWE-674
Priority LOW 27
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00223 · Published 2026-05-22 · Partial fix · 0.55.0 CWE-1021
Priority LOW 27
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00223 · Published 2026-05-22 · Partial fix · 0.55.0 CWE-1021
Priority LOW 22
HashiCorp memberlist before version 0.6.0 is vulnerable to a denial-of-service issue in its push/pull state handling that may allow an attacker with network access to the gossip port to exhaust memory on a receiving node…
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00251 · Published 2026-07-08 · Partial fix · 0.6.0 CWE-770
THREATIST.IORead the docs