Read the docs
TI-2026-58035 Aliases CVE-2026-84445GHSA-2v4p-qf9q-27wj

gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers

Priority MEDIUM 45CWE-129Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 62 fixed, 71 without a fix

Attack profile from CVSS 4.0 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-129 and the CVSS impact.

Summary

gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer() allow internal/transport/http2_server.go to accept an RPC containing neither the :authority header nor the Host header, while RouteAndProcess in internal/xds/server/routing.go assumes that an authority value exists and indexes the empty slice. A remote client that can complete transport connection establishment can trigger an index-out-of-bounds panic that is not recovered by the per-RPC goroutine and terminates the entire server process. In insecure or ordinary TLS deployments the request can be unauthenticated, while strict mTLS or ALTS deployments require valid transport credentials before the malformed RPC can reach the interceptor. This issue is fixed in versions 1.82.2 and 1.83.2.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00641 50th percentileScored 2026-11-07
Fix Partial grpc-go (grpc): 1.82.2, 1.83.2google.golang.org/grpc (Go): 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3 +1Red Hat: 90 advisoriesRed Hat: 62 fixed, 71 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
grpcgrpc-gobefore 1.82.2; 1.83.0 to before 1.83.21.82.2, 1.83.2Patch availableCNA
—google.golang.org/grpc (Go)before 1.82.21.82.2Patch availableGHSA-2v4p-qf9q-27wj
—google.golang.org/grpc (Go)1.83.0 to before 1.83.21.83.2Patch availableGHSA-2v4p-qf9q-27wj
—google.golang.org/grpc (Go)1.84.0-dev to before 1.84.0-dev.0.20260825144003-d5a41119e0e31.84.0-dev.0.20260825144003-d5a41119e0e3Patch availableGHSA-2v4p-qf9q-27wj
—google.golang.org/grpc (Go)1.85.0-dev to before 1.85.0-dev.0.20260825072537-93e31b48545e1.85.0-dev.0.20260825072537-93e31b48545ePatch availableGHSA-2v4p-qf9q-27wj
  • grpc-go Vendorgrpc Affected before 1.82.2; 1.83.0 to before 1.83.2 Fixed in 1.82.2, 1.83.2 Patch available CNA
  • google.golang.org/grpc (Go) Vendor— Affected before 1.82.2 Fixed in 1.82.2 Patch available GHSA-2v4p-qf9q-27wj
  • google.golang.org/grpc (Go) Vendor— Affected 1.83.0 to before 1.83.2 Fixed in 1.83.2 Patch available GHSA-2v4p-qf9q-27wj
  • google.golang.org/grpc (Go) Vendor— Affected 1.84.0-dev to before 1.84.0-dev.0.20260825144003-d5a41119e0e3 Fixed in 1.84.0-dev.0.20260825144003-d5a41119e0e3 Patch available GHSA-2v4p-qf9q-27wj
  • google.golang.org/grpc (Go) Vendor— Affected 1.85.0-dev to before 1.85.0-dev.0.20260825072537-93e31b48545e Fixed in 1.85.0-dev.0.20260825072537-93e31b48545e Patch available GHSA-2v4p-qf9q-27wj

Remediation

  • Fix · CNA grpc-go (grpc) Fixed in 1.82.2, 1.83.2
  • Fix · GHSA-2v4p-qf9q-27wj google.golang.org/grpc (Go) Fixed in 1.82.2 Advisory →
  • Fix · GHSA-2v4p-qf9q-27wj google.golang.org/grpc (Go) Fixed in 1.83.2 Advisory →
  • Fix · GHSA-2v4p-qf9q-27wj google.golang.org/grpc (Go) Fixed in 1.84.0-dev.0.20260825144003-d5a41119e0e3 Advisory →
  • Fix · GHSA-2v4p-qf9q-27wj google.golang.org/grpc (Go) Fixed in 1.85.0-dev.0.20260825072537-93e31b48545e Advisory →

Red Hat 90 advisories

  • RHSA-2026:95591 Released 2026-11-05 · Red Hat rating Important
    Cluster Observability Operator - 1.5
    • Cluster Observability Operator 1.5 registry.redhat.io/cluster-observability-operator/alertmanager-rhel9, registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator, registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9 +16
  • RHSA-2026:95577 Released 2026-11-05 · Red Hat rating Important
    OpenShift Container Platform 5.0 CNF IBU extras update
    • Red Hat OpenShift Container Platform 5.0 registry.redhat.io/openshift5/lifecycle-agent-rhel9-operator
  • RHSA-2026:95517 Released 2026-11-05 · Red Hat rating Important
    Multicluster Global Hub 1.7.4 security update
    • Multicluster Global Hub 1.7.4 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
Show 87 more Red Hat advisories
  • RHSA-2026:95360 Released 2026-11-04 · Red Hat rating Important
    Red Hat build of Cryostat security update
    • Cryostat 4 on RHEL 9 cryostat/cryostat-grafana-dashboard-rhel9, cryostat/cryostat-openshift-console-plugin-rhel9, cryostat/cryostat-storage-rhel9
  • RHSA-2026:95272 Released 2026-11-04 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 9) osbuild-composer-165.1-5.el9_8.1, osbuild-composer-core-165.1-5.el9_8.1, osbuild-composer-worker-165.1-5.el9_8.1
  • RHSA-2026:95081 Released 2026-11-04 · Red Hat rating Important
    Cluster Observability Operator - 1.5
    • Cluster Observability Operator 1.5 registry.redhat.io/cluster-observability-operator/alertmanager-rhel9, registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator, registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9 +16
  • RHSA-2026:95054 Released 2026-11-04 · Red Hat rating Important
    OpenShift Container Platform 4.22 CNF vRAN extras topology aware lifecycle manager update
    • Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/topology-aware-lifecycle-manager-rhel9-operator
  • RHSA-2026:95053 Released 2026-11-04 · Red Hat rating Important
    OpenShift Container Platform 4.22 CNF IBU extras update
    • Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/lifecycle-agent-rhel9-operator
  • RHSA-2026:94632 Released 2026-11-03 · Red Hat rating Important
    Red Hat Edge Manager Version 1.2.2 Security Update
    • RHEM 1.2 for RHEL 10 flightctl-1.2.2-1.el10, flightctl-agent-1.2.2-1.el10, flightctl-cli-1.2.2-1.el10
    • RHEM 1.2 for RHEL 9 flightctl-1.2.2-1.el9, flightctl-agent-1.2.2-1.el9, flightctl-cli-1.2.2-1.el9
  • RHSA-2026:94612 Released 2026-11-03 · Red Hat rating Important
    Red Hat Edge Manager Version 1.2.2 Security Update
    • Red Hat Edge Manager 1.2 registry.redhat.io/rhem/flightctl-alert-exporter-rhel10, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10, registry.redhat.io/rhem/flightctl-api-rhel10 +11
  • RHSA-2026:94608 Released 2026-11-03 · Red Hat rating Important
    Red Hat Edge Manager Version 1.2.2 Security Update
    • Red Hat Edge Manager 1.2 registry.redhat.io/rhem/flightctl-alert-exporter-rhel9, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9, registry.redhat.io/rhem/flightctl-api-rhel9 +11
  • RHSA-2026:94583 Released 2026-11-03 · Red Hat rating Critical
    Important: Red Hat OpenShift GitOps v1.21.7 security update
    • Red Hat OpenShift GitOps 1.21 registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9, registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9, registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9 +7
  • RHSA-2026:94531 Released 2026-11-03 · Red Hat rating Important
    OpenShift Container Platform 5.0 NUMA resources operator extras update
    • Red Hat OpenShift Container Platform 5.0 registry.redhat.io/openshift5/numaresources-rhel9-operator
  • RHSA-2026:94528 Released 2026-11-03 · Red Hat rating Important
    OpenShift Container Platform 5.0 CNF vRAN extras topology aware lifecycle manager update
    • Red Hat OpenShift Container Platform 5.0 registry.redhat.io/openshift5/topology-aware-lifecycle-manager-rhel9-operator
  • RHSA-2026:94498 Released 2026-11-03 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection - 1.4.12
    • OpenShift API for Data Protection 1.4 registry.redhat.io/oadp/oadp-cli-binaries-rhel9, registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9 +8
  • RHSA-2026:92859 Released 2026-10-29 · Red Hat rating Important
    Satellite 6.17 security update
    • Red Hat Satellite 6.17 for RHEL 9 openvox-agent-8.31.1-1.el9sat, openvox-server-8.17.0-1.el9sat, yggdrasil-worker-forwarder-0.1.1-1.el9sat
  • RHSA-2026:92861 Released 2026-10-29 · Red Hat rating Critical
    Satellite 6.19 security update
    • Red Hat Satellite 6.19 for RHEL 9 openvox-agent-8.31.1-1.el9sat, openvox-server-8.17.0-1.el9sat, python3.12-brotli-1.2.1-1.el9pc +6
  • RHSA-2026:92858 Released 2026-10-29 · Red Hat rating Important
    Satellite 6.16 EUS security update
    • Red Hat Satellite 6.16 for RHEL 8 openvox-agent-8.31.1-1.el8sat, openvox-server-8.17.0-1.el8sat, yggdrasil-worker-forwarder-0.1.1-1.el8sat
    • Red Hat Satellite 6.16 for RHEL 9 openvox-agent-8.31.1-1.el9sat, openvox-server-8.17.0-1.el9sat, yggdrasil-worker-forwarder-0.1.1-1.el9sat
  • RHSA-2026:92860 Released 2026-10-29 · Red Hat rating Important
    Satellite 6.18 security update
    • Red Hat Satellite 6.18 for RHEL 9 openvox-agent-8.31.1-1.el9sat, openvox-server-8.17.0-1.el9sat, yggdrasil-worker-forwarder-0.1.1-1.el9sat
  • RHSA-2026:92593 Released 2026-10-29 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.6.2
    • Logging Subsystem for Red Hat OpenShift 6.6 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/logging-loki-rhel9, registry.redhat.io/openshift-logging/loki-rhel9-operator +2
  • RHSA-2026:92515 Released 2026-10-29 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.6.2
    • Logging Subsystem for Red Hat OpenShift 6.6 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/logging-loki-rhel9, registry.redhat.io/openshift-logging/loki-rhel9-operator +2
  • RHSA-2026:92510 Released 2026-10-29 · Red Hat rating Critical
    RHOAI 3.4.6 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-cli-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +47
  • RHSA-2026:92372 Released 2026-10-29 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) osbuild-composer-76.1-10.el9_2, osbuild-composer-core-76.1-10.el9_2, osbuild-composer-dnf-json-76.1-10.el9_2 +1
  • RHSA-2026:92307 Released 2026-10-29 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.13.14 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.13 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9, registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9 +16
  • RHSA-2026:91958 Released 2026-10-28 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) osbuild-composer-101.3-4.el9_4.7, osbuild-composer-core-101.3-4.el9_4.7, osbuild-composer-worker-101.3-4.el9_4.7
  • RHSA-2026:91651 Released 2026-10-28 · Red Hat rating Critical
    Red Hat Developer Hub 1.9.10 release.
    • Red Hat Developer Hub 1.9 registry.redhat.io/rhdh/rhdh-hub-rhel9, registry.redhat.io/rhdh/rhdh-rhel9-operator
  • RHSA-2026:91646 Released 2026-10-28 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) osbuild-composer-134.1-13.el10_0, osbuild-composer-core-134.1-13.el10_0, osbuild-composer-worker-134.1-13.el10_0
  • RHSA-2026:91587 Released 2026-10-28 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) osbuild-composer-132.2-13.el9_6, osbuild-composer-core-132.2-13.el9_6, osbuild-composer-worker-132.2-13.el9_6
  • RHSA-2026:91216 Released 2026-10-27 · Red Hat rating Important
    Red Hat Cost Management On-Premise container image update
    • Red Hat Cost Management On-Premise 1 registry.redhat.io/costmanagement/costmanagement-ingress-rhel9
  • RHSA-2026:90321 Released 2026-10-26 · Red Hat rating Critical
    Red Hat OpenShift Dev Spaces 3.31.0 Release.
    • Red Hat OpenShift Dev Spaces 3.31 registry.redhat.io/devspaces/code-rhel9, registry.redhat.io/devspaces/dashboard-rhel9, registry.redhat.io/devspaces/jetbrains-ide-rhel9 +8
  • RHSA-2026:89131 Released 2026-10-24 · Red Hat rating Critical
    Red Hat OpenShift Builds 1.9.2
    • Red Hat OpenShift Builds 1.9.2 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10 +6
  • RHSA-2026:89081 Released 2026-10-24 · Red Hat rating Critical
    Red Hat OpenShift Builds 1.8.3
    • Red Hat OpenShift Builds 1.8.3 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +6
  • RHSA-2026:89041 Released 2026-10-24 · Red Hat rating Important
    Red Hat OpenShift Builds 1.9.2
    • Red Hat OpenShift Builds 1.9.2 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10 +7
  • RHSA-2026:89031 Released 2026-10-24 · Red Hat rating Important
    Red Hat OpenShift Builds 1.8.3
    • Red Hat OpenShift Builds 1.8.3 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +7
  • RHSA-2026:87410 Released 2026-10-21 · Red Hat rating Critical
    RHOAI 2.25.12 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-caikit-nlp-rhel9, registry.redhat.io/rhoai/odh-codeflare-operator-rhel9 +47
  • RHSA-2026:86891 Released 2026-10-21 · Red Hat rating Critical
    RHOAI 3.5.2 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-cli-rhel9 +47
  • RHSA-2026:85846 Released 2026-10-20 · Red Hat rating Important
    Migration Toolkit for Containers (MTC) 1.8.18 security and bug fix update
    • Red Hat Migration Toolkit 1.8 registry.redhat.io/rhmtc/openshift-migration-controller-rhel8, registry.redhat.io/rhmtc/openshift-migration-registry-rhel8, registry.redhat.io/rhmtc/openshift-migration-ui-rhel8 +1
  • RHSA-2026:85247 Released 2026-10-19 · Red Hat rating Important
    DevWorkspace Operator 1.0.0 release.
    • DevWorkspace Operator 1.0 registry.redhat.io/devworkspace/devworkspace-rhel9-operator
  • RHSA-2026:84734 Released 2026-10-19 · Red Hat rating Critical
    RHOAI 3.4.5 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9, registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-autorag-rhel9 +47
  • RHSA-2026:83663 Released 2026-10-15 · Red Hat rating Important
    MTV RHEL9 Images
    • Migration Toolkit for Virtualization 2.10 registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9, registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9, registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9
  • RHSA-2026:83662 Released 2026-10-15 · Red Hat rating Important
    MTV RHEL9 Images
    • Migration Toolkit for Virtualization 2.11 registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9, registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9, registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9 +1
  • RHSA-2026:83601 Released 2026-10-15 · Red Hat rating Important
    RHTAS 1.4.4 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.4 registry.redhat.io/rhtas/ctlog-monitor-rhel9, registry.redhat.io/rhtas/rekor-monitor-rhel9
  • RHSA-2026:83598 Released 2026-10-15 · Red Hat rating Important
    RHTAS 1.4.4 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.4 registry.redhat.io/rhtas/certificate-transparency-rhel9, registry.redhat.io/rhtas/fulcio-rhel9, registry.redhat.io/rhtas/rekor-backfill-redis-rhel9 +6
  • RHSA-2026:83597 Released 2026-10-15 · Red Hat rating Important
    RHTAS 1.4.4 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.4 registry.redhat.io/rhtas/cosign-rhel9, registry.redhat.io/rhtas/fetch-tsa-certs-rhel9, registry.redhat.io/rhtas/gitsign-rhel9 +2
  • RHSA-2026:83596 Released 2026-10-15 · Red Hat rating Important
    RHTAS 1.4.4 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.4 registry.redhat.io/rhtas/createtree-rhel9
  • RHSA-2026:83593 Released 2026-10-15 · Red Hat rating Important
    RHTAS 1.0.3 - GA Release Of the Policy Controller Operator
    • Red Hat Trusted Artifact Signer 1.4 registry.redhat.io/rhtas/policy-controller-rhel9
  • RHSA-2026:83013 Released 2026-10-14 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.0.17
    • Logging Subsystem for Red Hat OpenShift 6.0 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +3
  • RHSA-2026:82342 Released 2026-10-13 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) opentelemetry-collector-0.158.0-1.el9_6
  • RHSA-2026:82344 Released 2026-10-13 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) opentelemetry-collector-0.158.0-1.el10_0
  • RHSA-2026:82346 Released 2026-10-13 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) opentelemetry-collector-0.158.0-1.el9_4
  • RHSA-2026:82322 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.17.2
    • Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2026:82304 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.17.2
    • Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:79575 Released 2026-10-08 · Red Hat rating Important
    RHACS 4.11.5 security and bug fix update
    • Red Hat Advanced Cluster Security for Kubernetes 4.11 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9, registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle, registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator +4
  • RHSA-2026:79368 Released 2026-10-08 · Red Hat rating Important
    Red Hat OpenShift distributed tracing platform (Tempo) 3.11.2 release
    • Red Hat OpenShift distributed tracing 3.11 registry.redhat.io/rhosdt/tempo-gateway-rhel9, registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9, registry.redhat.io/rhosdt/tempo-query-rhel9 +2
  • RHSA-2026:79010 Released 2026-10-08 · Red Hat rating Important
    rhc security update
    • Red Hat CodeReady Linux Builder EUS (v.9.6) rhc-devel-1:0.2.7-1.el9_6.7
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) rhc-1:0.2.7-1.el9_6.7
  • RHSA-2026:79011 Released 2026-10-08 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) rhc-1:0.2.4-9.el9_4.2
  • RHSA-2026:79012 Released 2026-10-08 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) rhc-1:0.2.2-1.el9_2.6
  • RHSA-2026:79326 Released 2026-10-08 · Red Hat rating Important
    Helm CLI for Red Hat OpenShift 4.3.0 container image release
    • Helm CLI 4.3 registry.redhat.io/helm-cli/helm-cli-rhel9
  • RHSA-2026:76744 Released 2026-10-08 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream (v. 9) opentelemetry-collector-0.158.0-1.el9_8
  • RHSA-2026:79088 Released 2026-10-08 · Red Hat rating Critical
    Red Hat Developer Hub 1.10.5 release.
    • Red Hat Developer Hub 1.10 registry.redhat.io/rhdh/rhdh-hub-rhel9, registry.redhat.io/rhdh/rhdh-rhel9-operator
  • RHSA-2026:76743 Released 2026-10-06 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream (v. 10) opentelemetry-collector-0.158.0-1.el10_2
  • RHSA-2026:76752 Released 2026-10-06 · Red Hat rating Important
    OpenShift Security Profiles Operator bug fix and enhancement update
    • OpenShift Security Profiles Operator 1 registry.redhat.io/compliance/openshift-security-profiles-operator-bundle, registry.redhat.io/compliance/openshift-security-profiles-rhel8-operator, registry.redhat.io/compliance/openshift-selinuxd-rhel8
  • RHSA-2026:74430 Released 2026-10-06 · Red Hat rating Important
    OpenShift Container Platform 4.22.17 security and extras update
    • Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/kube-compare-artifacts-rhel9, registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9, registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9
  • RHSA-2026:76145 Released 2026-10-05 · Red Hat rating Important
    Red Hat build of Kueue 1.4.3 release
    • Red Hat build of Kueue 1.4 registry.redhat.io/kueue/kueue-rhel9-operator
  • RHSA-2026:75689 Released 2026-10-05 · Red Hat rating Important
    rhc-worker-script security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) rhc-worker-script-0.12-1.el7_9
  • RHSA-2026:74609 Released 2026-10-01 · Red Hat rating Important
    Cluster Observability Operator 1.5.3
    • Cluster Observability Operator 1.5 registry.redhat.io/cluster-observability-operator/alertmanager-rhel9, registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator, registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9 +13
  • RHSA-2026:73987 Released 2026-09-30 · Red Hat rating Critical
    RHOAI 3.3.7 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9 +47
  • RHSA-2026:73915 Released 2026-09-30 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream (v. 8) rhc-1:0.2.5-12.el8_10
  • RHSA-2026:73538 Released 2026-09-29 · Red Hat rating Important
    Red Hat Lightspeed (formerly Insights) for Runtimes security update
    • Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator
  • RHSA-2026:73125 Released 2026-09-29 · Red Hat rating Important
    Helm CLI for Red Hat OpenShift v4.3.0 release
    • Helm CLI 4.3 helm-cli-4.3.0@amd64, helm-cli-4.3.0@amd64_darwin, helm-cli-4.3.0@amd64_windows +5
  • RHSA-2026:73105 Released 2026-09-29 · Red Hat rating Important
    RHACS 4.10.9 security and bug fix update
    • Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator, registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8 +3
  • RHSA-2026:72892 Released 2026-09-28 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.16.6 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.16 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9, registry.redhat.io/rhacm2/acm-prometheus-rhel9 +10
  • RHSA-2026:72884 Released 2026-09-28 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.15.8 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.15 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9, registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9 +17
  • RHSA-2026:72879 Released 2026-09-28 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.17.3 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.17 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9, registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9 +7
  • RHSA-2026:72854 Released 2026-09-28 · Red Hat rating Important
    multicluster engine for Kubernetes v2.8.11 security update
    • multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9 +8
  • RHSA-2026:72853 Released 2026-09-28 · Red Hat rating Important
    multicluster engine for Kubernetes v2.10.7 security update
    • multicluster engine for Kubernetes 2.10 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9, registry.redhat.io/multicluster-engine/discovery-rhel9 +7
  • RHSA-2026:72851 Released 2026-09-28 · Red Hat rating Important
    multicluster engine for Kubernetes v2.9.8 security update
    • multicluster engine for Kubernetes 2.9 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9, registry.redhat.io/multicluster-engine/console-mce-rhel9 +7
  • RHSA-2026:72850 Released 2026-09-28 · Red Hat rating Important
    multicluster engine for Kubernetes v2.6.15 security update
    • multicluster engine for Kubernetes 2.6 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9 +7
  • RHSA-2026:72849 Released 2026-09-28 · Red Hat rating Important
    multicluster engine for Kubernetes v2.17.3 security update
    • multicluster engine for Kubernetes 2.17 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/cloudevents-conductor-rhel9, registry.redhat.io/multicluster-engine/console-mce-rhel9 +7
  • RHSA-2026:72848 Released 2026-09-28 · Red Hat rating Important
    multicluster engine for Kubernetes v2.11.7 security update
    • multicluster engine for Kubernetes 2.11 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/azure-service-operator-rhel9, registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9 +7
  • RHSA-2026:72476 Released 2026-09-28 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.20.1
    • Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2026:72475 Released 2026-09-28 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.20.1
    • Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
  • RHSA-2026:72470 Released 2026-09-28 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.20.1
    • Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:72399 Released 2026-09-28 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.20.1
    • Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2026:72395 Released 2026-09-28 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.20.1
    • Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
  • RHSA-2026:72394 Released 2026-09-28 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.20.1
    • Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:72275 Released 2026-09-28 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream (v. 9) rhc-1:0.2.7-13.el9_8
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) rhc-devel-1:0.2.7-13.el9_8
  • RHSA-2026:71117 Released 2026-09-23 · Red Hat rating Important
    VolSync v0.16 security fixes and container updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.17 registry.redhat.io/rhacm2/volsync-rhel9
  • RHSA-2026:71116 Released 2026-09-23 · Red Hat rating Important
    VolSync v0.15 security fixes and container updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.16 registry.redhat.io/rhacm2/volsync-rhel9
  • RHSA-2026:70593 Released 2026-09-23 · Red Hat rating Important
    Network Observability 1.12.3 for OpenShift
    • Network Observability (NETOBSERV) 1.12.3 registry.redhat.io/network-observability/network-observability-cli-rhel9, registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9, registry.redhat.io/network-observability/network-observability-console-plugin-rhel9

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
AWS Load Balancer OperatorAffectedNo fix yet
Ansible Automation Orchestrator 2026AffectedNo fix yet
Compliance OperatorAffectedNo fix yet
Cryostat 4AffectedNo fix yet
DPU kit for NVIDIAAffectedNo fix yet
External Secrets Operator for Red Hat OpenShiftAffectedNo fix yet
ExternalDNS OperatorAffectedNo fix yet
Fence Agents Remediation OperatorAffectedNo fix yet
File Integrity OperatorAffectedNo fix yet
Job Set 1AffectedNo fix yet
Job Set Tech PreviewAffectedNo fix yet
Kernel Module Management Operator for Red Hat OpenshiftAffectedNo fix yet
Kube Descheduler OperatorAffectedNo fix yet
Leader Worker SetAffectedNo fix yet
Lightspeed CoreAffectedNo fix yet
MCP Server for Red Hat OpenShiftAffectedNo fix planned: Will not fix
Machine Deletion Remediation OperatorAffectedNo fix yet
Migration Toolkit for Applications 8AffectedNo fix yet
Migration Toolkit for ContainersAffectedNo fix yet
Migration Toolkit for VirtualizationAffectedNo fix yet
Multicluster Engine for KubernetesAffectedNo fix yet
Network Observability OperatorAffectedNo fix yet
Node HealthCheck OperatorAffectedNo fix yet
Node Maintenance OperatorAffectedNo fix yet
OpenShift API for Data ProtectionAffectedNo fix yet
OpenShift Developer Tools and ServicesAffectedNo fix yet
OpenShift LightspeedAffectedNo fix yet
OpenShift PipelinesAffectedNo fix yet
OpenShift Run Once Duration Override OperatorAffectedNo fix yet
OpenShift Secondary Scheduler OperatorAffectedNo fix yet
OpenShift ServerlessAffectedNo fix yet
OpenShift Service Mesh 3AffectedNo fix planned: Will not fix
Power monitoring for Red Hat OpenShiftAffectedNo fix yet
Red Hat AI Inference ServerAffectedNo fix planned: Will not fix
Red Hat Advanced Cluster Management for Kubernetes 2AffectedNo fix yet
Red Hat Ansible Automation Platform 2AffectedNo fix yet
Red Hat Build of KueueAffectedNo fix yet
Red Hat Build of Podman DesktopAffectedNo fix yet
Red Hat Ceph Storage 5AffectedNo fix yet: Fix deferred
Red Hat Ceph Storage 6AffectedNo fix yet: Fix deferred
Red Hat Ceph Storage 7AffectedNo fix yet: Fix deferred
Red Hat Ceph Storage 8AffectedNo fix yet: Fix deferred
Red Hat Ceph Storage 9AffectedNo fix yet: Fix deferred
Red Hat Certification Program for Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat Connectivity Link 1AffectedNo fix yet
Red Hat Developer Hub 1AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 10AffectedNo fix yet
Red Hat Enterprise Linux 7AffectedNo fix yet
Red Hat Enterprise Linux 8AffectedNo fix yet
Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat Hardened ImagesAffectedNo fix planned: Will not fix
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Red Hat OpenShift Cluster Manager CLIAffectedNo fix yet
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Container Platform 5AffectedNo fix yet
Red Hat OpenShift Dev Workspaces OperatorAffectedNo fix yet
Red Hat OpenShift GitOpsAffectedNo fix yet
Red Hat OpenShift distributed tracing 3AffectedNo fix yet
Red Hat OpenShift for Windows ContainersAffectedNo fix yet
Red Hat OpenStack Platform 16.2AffectedNo fix yet
Red Hat OpenStack Platform 18.0AffectedNo fix yet
Red Hat Openshift Data Foundation 4AffectedNo fix yet
Red Hat Service Interconnect 1AffectedNo fix yet
Red Hat Service Interconnect 2AffectedNo fix yet
Red Hat Trusted Artifact SignerAffectedNo fix yet
Red Hat Trusted Profile AnalyzerAffectedNo fix yet
Red Hat Web TerminalAffectedNo fix yet
Self Node Remediation OperatorAffectedNo fix yet
Storage-Based RemediationAffectedNo fix yet
Zero Trust Workload Identity ManagerAffectedNo fix planned: Will not fix
Zero Trust Workload Identity Manager - Tech PreviewAffectedNo fix planned: Will not fix
Cert Manager support for Red Hat OpenShift release 1.17Fixed RHSA-2026:82304, RHSA-2026:82322
Cert Manager support for Red Hat OpenShift release 1.20Fixed RHSA-2026:72394, RHSA-2026:72395, RHSA-2026:72399, RHSA-2026:72470, RHSA-2026:72475, RHSA-2026:72476
Cluster Observability Operator 1.5Fixed RHSA-2026:74609, RHSA-2026:95081, RHSA-2026:95591
Cryostat 4 on RHEL 9Fixed RHSA-2026:95360
DevWorkspace Operator 1.0Fixed RHSA-2026:85247
Helm CLI 4.3Fixed RHSA-2026:73125, RHSA-2026:79326
Logging Subsystem for Red Hat OpenShift 6.0Fixed RHSA-2026:83013
Logging Subsystem for Red Hat OpenShift 6.6Fixed RHSA-2026:92515
Migration Toolkit for Virtualization 2.10Fixed RHSA-2026:83663
Migration Toolkit for Virtualization 2.11Fixed RHSA-2026:83662
Multicluster Global Hub 1.7.4Fixed RHSA-2026:95517
Network Observability (NETOBSERV) 1.12.3Fixed RHSA-2026:70593
OpenShift API for Data Protection 1.4Fixed RHSA-2026:94498
OpenShift Security Profiles Operator 1Fixed RHSA-2026:76752
RHEM 1.2 for RHEL 10Fixed RHSA-2026:94632
RHEM 1.2 for RHEL 9Fixed RHSA-2026:94632
Red Hat Advanced Cluster Management for Kubernetes 2.13Fixed RHSA-2026:92307
Red Hat Advanced Cluster Management for Kubernetes 2.15Fixed RHSA-2026:72884
Red Hat Advanced Cluster Management for Kubernetes 2.16Fixed RHSA-2026:71116, RHSA-2026:72892
Red Hat Advanced Cluster Management for Kubernetes 2.17Fixed RHSA-2026:71117, RHSA-2026:72879
Red Hat Advanced Cluster Security for Kubernetes 4.11Fixed RHSA-2026:79575
Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10Fixed RHSA-2026:73105
Red Hat CodeReady Linux Builder EUS (v.9.6)Fixed RHSA-2026:79010
Red Hat Cost Management On-Premise 1Fixed RHSA-2026:91216
Red Hat Developer Hub 1.10Fixed RHSA-2026:79088
Red Hat Developer Hub 1.9Fixed RHSA-2026:91651
Red Hat Edge Manager 1.2Fixed RHSA-2026:94608, RHSA-2026:94612
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:76743
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:73915
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:72275, RHSA-2026:76744, RHSA-2026:95272
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:79012, RHSA-2026:92372
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:79011, RHSA-2026:82346, RHSA-2026:91958
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:82344, RHSA-2026:91646
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:79010, RHSA-2026:82342, RHSA-2026:91587
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2026:72275
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2026:75689
Red Hat Lightspeed (formerly Insights) for Runtimes 1.0Fixed RHSA-2026:73538
Red Hat Migration Toolkit 1.8Fixed RHSA-2026:85846
Red Hat OpenShift AI 2.25Fixed RHSA-2026:87410
Red Hat OpenShift AI 3.3Fixed RHSA-2026:73987
Red Hat OpenShift AI 3.4Fixed RHSA-2026:84734, RHSA-2026:92510
Red Hat OpenShift AI 3.5Fixed RHSA-2026:86891
Red Hat OpenShift Builds 1.8.3Fixed RHSA-2026:89031, RHSA-2026:89081
Red Hat OpenShift Builds 1.9.2Fixed RHSA-2026:89041, RHSA-2026:89131
Red Hat OpenShift Container Platform 4.22Fixed RHSA-2026:74430, RHSA-2026:95053, RHSA-2026:95054
Red Hat OpenShift Container Platform 5.0Fixed RHSA-2026:94528, RHSA-2026:94531, RHSA-2026:95577
Red Hat OpenShift Dev Spaces 3.31Fixed RHSA-2026:90321
Red Hat OpenShift GitOps 1.21Fixed RHSA-2026:94583
Red Hat OpenShift distributed tracing 3.11Fixed RHSA-2026:79368
Red Hat Satellite 6.16 for RHEL 8Fixed RHSA-2026:92858
Red Hat Satellite 6.16 for RHEL 9Fixed RHSA-2026:92858
Red Hat Satellite 6.17 for RHEL 9Fixed RHSA-2026:92859
Red Hat Satellite 6.18 for RHEL 9Fixed RHSA-2026:92860
Red Hat Satellite 6.19 for RHEL 9Fixed RHSA-2026:92861
Red Hat Trusted Artifact Signer 1.4Fixed RHSA-2026:83593, RHSA-2026:83596, RHSA-2026:83597, RHSA-2026:83598, RHSA-2026:83601
Red Hat build of Kueue 1.4Fixed RHSA-2026:76145
multicluster engine for Kubernetes 2.10Fixed RHSA-2026:72853
multicluster engine for Kubernetes 2.11Fixed RHSA-2026:72848
multicluster engine for Kubernetes 2.17Fixed RHSA-2026:72849
multicluster engine for Kubernetes 2.6Fixed RHSA-2026:72850
multicluster engine for Kubernetes 2.8Fixed RHSA-2026:72854
multicluster engine for Kubernetes 2.9Fixed RHSA-2026:72851
Not affected: 86 products
  • Assisted Installer for Red Hat OpenShift Container Platform 2
  • Cert Manager support for Red Hat OpenShift release 1.20
  • Cluster Observability Operator 1.5
  • Confidential Compute Attestation
  • Cryostat 4
  • Cryostat 4 on RHEL 9
  • Custom Metric Autoscaler operator for Red Hat Openshift
  • Deployment Validation Operator
  • DevWorkspace Operator 1.0
  • Exploit Intelligence
  • File Integrity Operator
  • Gatekeeper 3
  • Logging Subsystem for Red Hat OpenShift 6.0
  • Logging Subsystem for Red Hat OpenShift 6.6
  • Logical Volume Manager Storage
  • MCP Lifecycle Operator
  • Migration Toolkit for Applications 8
  • Migration Toolkit for Virtualization 2.10
  • Migration Toolkit for Virtualization 2.11
  • Multiarch Tuning Operator
  • Multicluster Engine for Kubernetes
  • Multicluster Global Hub 1.7.4
  • Network Observability (NETOBSERV) 1.12.3
  • OpenShift API for Data Protection 1.4
  • OpenShift Developer Tools and Services
  • OpenShift Security Profiles Operator 1
  • OpenShift Service Mesh 3
  • RHEM 1.2 for RHEL 10
  • RHEM 1.2 for RHEL 9
  • Red Hat 3scale API Management Platform 2
  • Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Advanced Cluster Management for Kubernetes 2.13
  • Red Hat Advanced Cluster Management for Kubernetes 2.15
  • Red Hat Advanced Cluster Management for Kubernetes 2.16
  • Red Hat Advanced Cluster Management for Kubernetes 2.17
  • Red Hat Advanced Cluster Security for Kubernetes 4.11
  • Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10
  • Red Hat Ansible Automation Platform 2
  • Red Hat Developer Hub 1
  • Red Hat Developer Hub 1.10
  • Red Hat Developer Hub 1.9
  • Red Hat Edge Manager 1.2
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat Hardened Images
  • Red Hat Lightspeed (formerly Insights) for Runtimes 1.0
  • Red Hat Migration Toolkit 1.8
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift AI 2.25
  • Red Hat OpenShift AI 3.3
  • Red Hat OpenShift AI 3.4
  • Red Hat OpenShift AI 3.5
  • Red Hat OpenShift Builds 1.8.3
  • Red Hat OpenShift Builds 1.9.2
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.22
  • Red Hat OpenShift Container Platform 5
  • Red Hat OpenShift Container Platform 5.0
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Dev Spaces 3.31
  • Red Hat OpenShift GitOps
  • Red Hat OpenShift GitOps 1.21
  • Red Hat OpenShift Virtualization 4
  • Red Hat OpenShift distributed tracing 3.11
  • Red Hat OpenStack Platform 16.2
  • Red Hat OpenStack Platform 17.1
  • Red Hat OpenStack Platform 18.0
  • Red Hat Openshift Data Foundation 4
  • Red Hat Quay 3
  • Red Hat Satellite 6.16 for RHEL 8
  • Red Hat Satellite 6.16 for RHEL 9
  • Red Hat Satellite 6.17 for RHEL 9
  • Red Hat Satellite 6.18 for RHEL 9
  • Red Hat Satellite 6.19 for RHEL 9
  • Red Hat Trusted Artifact Signer
  • Red Hat Trusted Artifact Signer 1.4
  • Red Hat build of Kueue 1.4
  • Service Telemetry Framework 1.5
  • Zero Trust Workload Identity Manager
  • multicluster engine for Kubernetes 2.10
  • multicluster engine for Kubernetes 2.11
  • multicluster engine for Kubernetes 2.17
  • multicluster engine for Kubernetes 2.6
  • multicluster engine for Kubernetes 2.8
  • multicluster engine for Kubernetes 2.9

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-84445
  2. 2026-10-03 Alias added: GHSA-2v4p-qf9q-27wj
  3. 2026-10-05 Fix available: RHSA-2026:75689 · Red Hat
  4. 2026-10-05 Fix available: Red Hat Enterprise Linux Server (v. 7 ELS) · Red Hat
  5. 2026-10-06 Fix available: RHSA-2026:74430 · Red Hat
  6. 2026-10-06 Fix available: RHSA-2026:76145 · Red Hat
  7. 2026-10-06 Fix available: Red Hat Enterprise Linux AppStream (v. 10), Red Hat OpenShift Container Platform 4.22, Red Hat build of Kueue 1.4 · Red Hat
  8. 2026-10-07 Fix available: RHSA-2026:76743 · Red Hat
  9. 2026-10-07 Fix available: RHSA-2026:73987 · Red Hat
  10. 2026-10-07 Fix available: RHSA-2026:76752 · Red Hat
  11. 2026-10-07 Fix available: OpenShift Security Profiles Operator 1 · Red Hat
  12. 2026-10-08 Affected versions changed · Red Hat
  13. 2026-10-09 Fix available: RHSA-2026:76744 · Red Hat
  14. 2026-10-09 Fix available: RHSA-2026:79010 · Red Hat
  15. 2026-10-09 Fix available: RHSA-2026:79011 · Red Hat
  16. 2026-10-09 Fix available: RHSA-2026:79012 · Red Hat
  17. 2026-10-09 Fix available: RHSA-2026:79326 · Red Hat
  18. 2026-10-09 Fix available: RHSA-2026:79368 · Red Hat
  19. 2026-10-09 Fix available: RHSA-2026:79575 · Red Hat
  20. 2026-10-09 Fix available: RHSA-2026:79088 · Red Hat
  21. 2026-10-09 Fix available: Red Hat Advanced Cluster Security for Kubernetes 4.11, Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Developer Hub 1.10 +4 · Red Hat
  22. 2026-10-10 Affected versions changed · Red Hat
  23. 2026-10-13 Fix available: Red Hat OpenShift distributed tracing 3.11 · Red Hat
  24. 2026-10-14 Fix available: RHSA-2026:82304 · Red Hat
  25. 2026-10-14 Fix available: RHSA-2026:82322 · Red Hat
  26. 2026-10-14 Fix available: RHSA-2026:82344 · Red Hat
  27. 2026-10-14 Fix available: RHSA-2026:82342 · Red Hat
  28. 2026-10-14 Fix available: RHSA-2026:82346 · Red Hat
  29. 2026-10-15 Fix available: RHSA-2026:83013 · Red Hat
  30. 2026-10-16 Fix available: RHSA-2026:83593 · Red Hat
  31. 2026-10-16 Fix available: RHSA-2026:83596 · Red Hat
  32. 2026-10-16 Fix available: RHSA-2026:83597 · Red Hat
  33. 2026-10-16 Fix available: RHSA-2026:83601 · Red Hat
  34. 2026-10-16 Fix available: RHSA-2026:83662 · Red Hat
  35. 2026-10-16 Fix available: RHSA-2026:83663 · Red Hat
  36. 2026-10-16 Fix available: RHSA-2026:83598 · Red Hat
  37. 2026-10-16 Fix available: Cert Manager support for Red Hat OpenShift release 1.17, Logging Subsystem for Red Hat OpenShift 6.0, Migration Toolkit for Virtualization 2.10 +3 · Red Hat
  38. 2026-10-18 Affected versions changed · Red Hat
  39. 2026-10-20 Fix available: RHSA-2026:85247 · Red Hat
  40. 2026-10-20 Fix available: RHSA-2026:85846 · Red Hat
  41. 2026-10-20 Fix available: RHSA-2026:84734 · Red Hat
  42. 2026-10-20 Fix available: DevWorkspace Operator 1.0, Red Hat Migration Toolkit 1.8, Red Hat OpenShift AI 3.4 · Red Hat
  43. 2026-10-21 EPSS moved to the 50th–90th percentile
  44. 2026-10-21 Affected versions changed · Red Hat
  45. 2026-10-22 Fix available: RHSA-2026:86891 · Red Hat
  46. 2026-10-22 Fix available: RHSA-2026:87410 · Red Hat
  47. 2026-10-23 Fix available: Red Hat Advanced Cluster Security for Kubernetes for IBM Z and LinuxONE 4.11, Red Hat OpenShift AI 2.25, Red Hat OpenShift AI 3.5 +1 · Red Hat
  48. 2026-10-25 Fix available: RHSA-2026:89081 · Red Hat
  49. 2026-10-25 Fix available: RHSA-2026:89031 · Red Hat
  50. 2026-10-25 Fix available: RHSA-2026:89131 · Red Hat
  51. 2026-10-25 Fix available: RHSA-2026:89041 · Red Hat
  52. 2026-10-25 Fix available: Red Hat OpenShift Builds 1.8.3, Red Hat OpenShift Builds 1.9.2 · Red Hat
  53. 2026-10-26 Fix available: Red Hat OpenShift distributed tracing 3.11 · Red Hat
  54. 2026-10-27 Affected versions changed · Red Hat
  55. 2026-10-29 Affected versions changed · Red Hat
  56. 2026-10-29 Fix available: RHSA-2026:91646 · Red Hat
  57. 2026-10-29 Fix available: RHSA-2026:92372 · Red Hat
  58. 2026-10-29 Fix available: Red Hat OpenShift Dev Spaces 3.31 · Red Hat
  59. 2026-10-30 Fix available: RHSA-2026:91587 · Red Hat
  60. 2026-10-30 Fix available: RHSA-2026:91958 · Red Hat
  61. 2026-10-30 Fix available: RHSA-2026:91216 · Red Hat
  62. 2026-10-30 Fix available: RHSA-2026:91651 · Red Hat
  63. 2026-10-30 Fix available: RHSA-2026:92307 · Red Hat
  64. 2026-10-30 Fix available: RHSA-2026:90321 · Red Hat
  65. 2026-10-30 Fix available: RHSA-2026:92858 · Red Hat
  66. 2026-10-30 Fix available: RHSA-2026:92859 · Red Hat
  67. 2026-10-30 Fix available: RHSA-2026:92510 · Red Hat
  68. 2026-10-30 Fix available: Red Hat Advanced Cluster Management for Kubernetes 2.13, Red Hat Cost Management On-Premise 1, Red Hat Developer Hub 1.9 +4 · Red Hat
  69. 2026-10-30 Fix available: RHSA-2026:92860 · Red Hat
  70. 2026-10-30 Fix available: Logging Subsystem for Red Hat OpenShift 6.6, Red Hat Satellite 6.19 for RHEL 9 · Red Hat
  71. 2026-10-31 Fix available: RHSA-2026:92593 · Red Hat
  72. 2026-10-31 Fix available: RHSA-2026:92515 · Red Hat
  73. 2026-10-31 Fix available: RHSA-2026:92861 · Red Hat
  74. 2026-10-31 Fix available: Red Hat Advanced Cluster Security for Kubernetes 4.11 · Red Hat
  75. 2026-11-03 Fix available: RHSA-2026:94632 · Red Hat
  76. 2026-11-03 Fix available: RHEM 1.2 for RHEL 10, RHEM 1.2 for RHEL 9 · Red Hat
  77. 2026-11-04 Fix available: RHSA-2026:94612 · Red Hat
  78. 2026-11-04 Fix available: RHSA-2026:94608 · Red Hat
  79. 2026-11-04 Fix available: RHSA-2026:94583 · Red Hat
  80. 2026-11-04 Fix available: RHSA-2026:94528 · Red Hat
  81. 2026-11-04 Fix available: RHSA-2026:94531 · Red Hat
  82. 2026-11-04 Fix available: RHSA-2026:94498 · Red Hat
  83. 2026-11-04 Fix available: OpenShift API for Data Protection 1.4, Red Hat Edge Manager 1.2, Red Hat OpenShift Container Platform 5.0 +1 · Red Hat
  84. 2026-11-04 Affected versions changed · Red Hat
  85. 2026-11-04 Fix available: RHSA-2026:95053 · Red Hat
  86. 2026-11-04 Fix available: RHSA-2026:95054 · Red Hat
  87. 2026-11-04 Fix available: RHSA-2026:95081 · Red Hat
  88. 2026-11-04 Fix available: Cluster Observability Operator 1.5, Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 · Red Hat
  89. 2026-11-05 Fix available: Cryostat 4 on RHEL 9 · Red Hat
  90. 2026-11-06 Fix available: Multicluster Global Hub 1.7.4 · Red Hat
  91. 2026-11-06 Fix available: RHSA-2026:95272 · Red Hat
  92. 2026-11-06 Fix available: RHSA-2026:95591 · Red Hat
  93. 2026-11-06 Fix available: RHSA-2026:95517 · Red Hat
  94. 2026-11-06 Fix available: RHSA-2026:95577 · Red Hat
  95. 2026-11-06 Fix available: RHSA-2026:95360 · Red Hat

References

Advisory 1

Other 11

  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2026-25614 gRPC-Go has an authorization bypass via missing leading slash in :path CVSS 3.1CRITICAL 9.1
  • TI-2020-06285 Prototype pollution in grpc CVSS 3.1CRITICAL 9.8
  • TI-2017-05916 Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based… CVSS 3.0CRITICAL 9.8
  • TI-2017-05476 Google gRPC before 2017-02-22 has an out-of-bounds write caused by a heap-based buffer… CVSS 3.0CRITICAL 9.8
  • TI-2017-06843 Google gRPC before 2017-04-05 has an out-of-bounds write caused by a heap-based buffer… CVSS 3.0CRITICAL 9.8
See all 23 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences