cvelistv5 - cve-2026-3833

CVE-2026-3833 (GCVE-0-2026-3833)

Vulnerability from cvelistv5

Published

2026-04-30 17:37

Modified

2026-08-26 22:05

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE

CWE-178 - Improper Handling of Case Sensitivity

Summary

A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure.

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2026:13274	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2026:20611	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2026:20612	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2026:20613	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2026:26319	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2026:26409	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2026:29197	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2026:30004	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2026:30849	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2026:30850	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2026:32962	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2026:33125	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2026:41921	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2026:43575	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2026:57402	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2026:58981	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/security/cve/CVE-2026-3833	vdb-entry, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2445763	issue-tracking, x_refsource_REDHAT
	https://gitlab.com/gnutls/gnutls/-/issues/1803

Impacted products

Vendor

Product

Version

Version: 0 ≤

Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:3.8.10-4.el10_2 < * cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:3.8.9-9.el10_0.19 < * cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:3.3.29-9.el7_9.2 < * cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:3.6.16-8.el8_10.6 < * cpe:/a:redhat:enterprise_linux:8::appstream cpe:/o:redhat:enterprise_linux:8::baseos
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:3.6.16-8.el8_10.6 < * cpe:/a:redhat:enterprise_linux:8::appstream cpe:/o:redhat:enterprise_linux:8::baseos
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 0:3.6.14-10.el8_4.1 < * cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream cpe:/o:redhat:rhel_aus:8.4::baseos cpe:/o:redhat:rhel_eus_long_life:8.4::baseos
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 0:4.13-3.el8_4.1 < * cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream cpe:/o:redhat:rhel_aus:8.4::baseos cpe:/o:redhat:rhel_eus_long_life:8.4::baseos
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	Unaffected: 0:3.6.14-10.el8_4.1 < * cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream cpe:/o:redhat:rhel_aus:8.4::baseos cpe:/o:redhat:rhel_eus_long_life:8.4::baseos
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	Unaffected: 0:4.13-3.el8_4.1 < * cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream cpe:/o:redhat:rhel_aus:8.4::baseos cpe:/o:redhat:rhel_eus_long_life:8.4::baseos
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	Unaffected: 0:3.6.16-5.el8_6.5 < * cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_eus_long_life:8.6::appstream cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_eus_long_life:8.6::baseos
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	Unaffected: 0:4.13-3.el8_6.2 < * cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_eus_long_life:8.6::appstream cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_eus_long_life:8.6::baseos
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	Unaffected: 0:3.6.16-5.el8_6.5 < * cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_eus_long_life:8.6::appstream cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_eus_long_life:8.6::baseos
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	Unaffected: 0:4.13-3.el8_6.2 < * cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_eus_long_life:8.6::appstream cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_eus_long_life:8.6::baseos
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	Unaffected: 0:3.6.16-7.el8_8.4 < * cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream cpe:/o:redhat:rhel_e4s:8.8::baseos cpe:/o:redhat:rhel_tus:8.8::baseos
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	Unaffected: 0:4.13-4.el8_8.1 < * cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream cpe:/o:redhat:rhel_e4s:8.8::baseos cpe:/o:redhat:rhel_tus:8.8::baseos
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	Unaffected: 0:3.6.16-7.el8_8.4 < * cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream cpe:/o:redhat:rhel_e4s:8.8::baseos cpe:/o:redhat:rhel_tus:8.8::baseos
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	Unaffected: 0:4.13-4.el8_8.1 < * cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream cpe:/o:redhat:rhel_e4s:8.8::baseos cpe:/o:redhat:rhel_tus:8.8::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:3.8.10-4.el9_8 < * cpe:/a:redhat:enterprise_linux:9::appstream cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:3.8.10-4.el9_8 < * cpe:/a:redhat:enterprise_linux:9::appstream cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:3.7.6-21.el9_2.7 < * cpe:/a:redhat:rhel_e4s:9.2::appstream cpe:/o:redhat:rhel_e4s:9.2::baseos
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:3.8.3-4.el9_4.6 < * cpe:/a:redhat:rhel_e4s:9.4::appstream cpe:/o:redhat:rhel_e4s:9.4::baseos
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:3.8.3-6.el9_6.4 < * cpe:/a:redhat:rhel_eus:9.6::appstream cpe:/o:redhat:rhel_eus:9.6::baseos
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 4.19.9.6.202608182320-0 < * cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat Discovery 2	Unaffected: 1782159791 < * cpe:/a:redhat:discovery:2::el9
Red Hat	Red Hat Discovery 2	Unaffected: 1782166952 < * cpe:/a:redhat:discovery:2::el9
Red Hat	Red Hat Hardened Images	Unaffected: 3.8.13-1.hum1 < * cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Update Infrastructure 5	Unaffected: 1781525684 < * cpe:/a:redhat:rhui:5::el9
Red Hat	Red Hat Update Infrastructure 5	Unaffected: 1781525671 < * cpe:/a:redhat:rhui:5::el9
Red Hat	Red Hat Update Infrastructure 5	Unaffected: 1781525693 < * cpe:/a:redhat:rhui:5::el9
Red Hat	Red Hat Update Infrastructure 5	Unaffected: 1781525739 < * cpe:/a:redhat:rhui:5::el9
Red Hat	Red Hat Update Infrastructure 5	Unaffected: 1787241211 < * cpe:/a:redhat:rhui:5::el9
Red Hat	Red Hat Update Infrastructure 5	Unaffected: 1787135742 < * cpe:/a:redhat:rhui:5::el9
Red Hat	Red Hat Update Infrastructure 5	Unaffected: 1787241260 < * cpe:/a:redhat:rhui:5::el9
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-3833",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-30T18:37:27.251775Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-30T18:37:57.245Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://gitlab.com/gnutls/gnutls/-/issues/1803"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://gitlab.com/gnutls/gnutls",
          "defaultStatus": "unaffected",
          "packageName": "gnutls",
          "versions": [
            {
              "lessThan": "3.8.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.2"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.8.10-4.el10_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux_eus:10.0"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.8.9-9.el10_0.19",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_els:7"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.3.29-9.el7_9.2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.6.16-8.el8_10.6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.6.16-8.el8_10.6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream",
            "cpe:/o:redhat:rhel_aus:8.4::baseos",
            "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.6.14-10.el8_4.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream",
            "cpe:/o:redhat:rhel_aus:8.4::baseos",
            "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libtasn1",
          "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.13-3.el8_4.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream",
            "cpe:/o:redhat:rhel_aus:8.4::baseos",
            "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.6.14-10.el8_4.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream",
            "cpe:/o:redhat:rhel_aus:8.4::baseos",
            "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libtasn1",
          "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.13-3.el8_4.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.6::appstream",
            "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
            "cpe:/o:redhat:rhel_aus:8.6::baseos",
            "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.6.16-5.el8_6.5",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.6::appstream",
            "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
            "cpe:/o:redhat:rhel_aus:8.6::baseos",
            "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libtasn1",
          "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.13-3.el8_6.2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.6::appstream",
            "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
            "cpe:/o:redhat:rhel_aus:8.6::baseos",
            "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.6.16-5.el8_6.5",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.6::appstream",
            "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
            "cpe:/o:redhat:rhel_aus:8.6::baseos",
            "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libtasn1",
          "product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.13-3.el8_6.2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.8::appstream",
            "cpe:/a:redhat:rhel_tus:8.8::appstream",
            "cpe:/o:redhat:rhel_e4s:8.8::baseos",
            "cpe:/o:redhat:rhel_tus:8.8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.6.16-7.el8_8.4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.8::appstream",
            "cpe:/a:redhat:rhel_tus:8.8::appstream",
            "cpe:/o:redhat:rhel_e4s:8.8::baseos",
            "cpe:/o:redhat:rhel_tus:8.8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libtasn1",
          "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.13-4.el8_8.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.8::appstream",
            "cpe:/a:redhat:rhel_tus:8.8::appstream",
            "cpe:/o:redhat:rhel_e4s:8.8::baseos",
            "cpe:/o:redhat:rhel_tus:8.8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.6.16-7.el8_8.4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.8::appstream",
            "cpe:/a:redhat:rhel_tus:8.8::appstream",
            "cpe:/o:redhat:rhel_e4s:8.8::baseos",
            "cpe:/o:redhat:rhel_tus:8.8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libtasn1",
          "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.13-4.el8_8.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.8.10-4.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.8.10-4.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:9.2::appstream",
            "cpe:/o:redhat:rhel_e4s:9.2::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.7.6-21.el9_2.7",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:9.4::appstream",
            "cpe:/o:redhat:rhel_e4s:9.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.8.3-4.el9_4.6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.6::appstream",
            "cpe:/o:redhat:rhel_eus:9.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.8.3-6.el9_6.4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.19::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.19",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.19.9.6.202608182320-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:discovery:2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "discovery/discovery-server-rhel9",
          "product": "Red Hat Discovery 2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1782159791",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:discovery:2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "discovery/discovery-ui-rhel9",
          "product": "Red Hat Discovery 2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1782166952",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:hummingbird:1"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls-main",
          "product": "Red Hat Hardened Images",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "3.8.13-1.hum1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhui:5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhui5/cds-rhel9",
          "product": "Red Hat Update Infrastructure 5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1781525684",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhui:5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhui5/haproxy-rhel9",
          "product": "Red Hat Update Infrastructure 5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1781525671",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhui:5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhui5/installer-rhel9",
          "product": "Red Hat Update Infrastructure 5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1781525693",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhui:5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhui5/rhua-rhel9",
          "product": "Red Hat Update Infrastructure 5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1781525739",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhui:5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhui5/cds-kubernetes-tp-rhel9",
          "product": "Red Hat Update Infrastructure 5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787241211",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhui:5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhui5/installer-tp-rhel9",
          "product": "Red Hat Update Infrastructure 5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787135742",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhui:5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhui5/rhua-tp-rhel9",
          "product": "Red Hat Update Infrastructure 5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787241260",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "unknown",
          "packageName": "openshift4/ose-hypershift-rhel9",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2026-04-30T17:26:28.969Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-178",
              "description": "Improper Handling of Case Sensitivity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-26T22:05:04.410Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:13274",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:13274"
        },
        {
          "name": "RHSA-2026:20611",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:20611"
        },
        {
          "name": "RHSA-2026:20612",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:20612"
        },
        {
          "name": "RHSA-2026:20613",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:20613"
        },
        {
          "name": "RHSA-2026:26319",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:26319"
        },
        {
          "name": "RHSA-2026:26409",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:26409"
        },
        {
          "name": "RHSA-2026:29197",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:29197"
        },
        {
          "name": "RHSA-2026:30004",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:30004"
        },
        {
          "name": "RHSA-2026:30849",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:30849"
        },
        {
          "name": "RHSA-2026:30850",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:30850"
        },
        {
          "name": "RHSA-2026:32962",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:32962"
        },
        {
          "name": "RHSA-2026:33125",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:33125"
        },
        {
          "name": "RHSA-2026:41921",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:41921"
        },
        {
          "name": "RHSA-2026:43575",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:43575"
        },
        {
          "name": "RHSA-2026:57402",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:57402"
        },
        {
          "name": "RHSA-2026:58981",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:58981"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-3833"
        },
        {
          "name": "RHBZ#2445763",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445763"
        },
        {
          "url": "https://gitlab.com/gnutls/gnutls/-/issues/1803"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-03-09T14:02:09.783Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-04-30T17:26:28.969Z",
          "value": "Made public."
        }
      ],
      "title": "Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-178: Improper Handling of Case Sensitivity"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-3833",
    "datePublished": "2026-04-30T17:37:05.818Z",
    "dateReserved": "2026-03-09T14:00:51.698Z",
    "dateUpdated": "2026-08-26T22:05:04.410Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-3833\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-04-30T18:37:27.251775Z\"}}}], \"references\": [{\"url\": \"https://gitlab.com/gnutls/gnutls/-/issues/1803\", \"tags\": [\"exploit\"]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-04-30T18:37:51.941Z\"}}], \"cna\": {\"title\": \"Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Moderate\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 6.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"LOW\"}}], \"affected\": [{\"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"3.8.13\", \"versionType\": \"semver\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://gitlab.com/gnutls/gnutls\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.8.10-4.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.8.9-9.el10_0.19\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7 Extended Lifecycle Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.3.29-9.el7_9.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::appstream\", \"cpe:/o:redhat:enterprise_linux:8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.6.16-8.el8_10.6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::appstream\", \"cpe:/o:redhat:enterprise_linux:8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.6.16-8.el8_10.6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\", \"cpe:/o:redhat:rhel_aus:8.4::baseos\", \"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.6.14-10.el8_4.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\", \"cpe:/o:redhat:rhel_aus:8.4::baseos\", \"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.13-3.el8_4.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtasn1\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\", \"cpe:/o:redhat:rhel_aus:8.4::baseos\", \"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.6.14-10.el8_4.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\", \"cpe:/o:redhat:rhel_aus:8.4::baseos\", \"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.13-3.el8_4.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtasn1\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream\", \"cpe:/o:redhat:rhel_aus:8.6::baseos\", \"cpe:/o:redhat:rhel_eus_long_life:8.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.6.16-5.el8_6.5\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream\", \"cpe:/o:redhat:rhel_aus:8.6::baseos\", \"cpe:/o:redhat:rhel_eus_long_life:8.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.13-3.el8_6.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtasn1\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream\", \"cpe:/o:redhat:rhel_aus:8.6::baseos\", \"cpe:/o:redhat:rhel_eus_long_life:8.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.6.16-5.el8_6.5\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream\", \"cpe:/o:redhat:rhel_aus:8.6::baseos\", \"cpe:/o:redhat:rhel_eus_long_life:8.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.13-3.el8_6.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtasn1\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\", \"cpe:/o:redhat:rhel_e4s:8.8::baseos\", \"cpe:/o:redhat:rhel_tus:8.8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.6.16-7.el8_8.4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\", \"cpe:/o:redhat:rhel_e4s:8.8::baseos\", \"cpe:/o:redhat:rhel_tus:8.8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.13-4.el8_8.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtasn1\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\", \"cpe:/o:redhat:rhel_e4s:8.8::baseos\", \"cpe:/o:redhat:rhel_tus:8.8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.6.16-7.el8_8.4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\", \"cpe:/o:redhat:rhel_e4s:8.8::baseos\", \"cpe:/o:redhat:rhel_tus:8.8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.13-4.el8_8.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtasn1\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/o:redhat:enterprise_linux:9::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.8.10-4.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/o:redhat:enterprise_linux:9::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.8.10-4.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::appstream\", \"cpe:/o:redhat:rhel_e4s:9.2::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.7.6-21.el9_2.7\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4::appstream\", \"cpe:/o:redhat:rhel_e4s:9.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.8.3-4.el9_4.6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6::appstream\", \"cpe:/o:redhat:rhel_eus:9.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.8.3-6.el9_6.4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.19.9.6.202608182320-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:discovery:2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Discovery 2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782159791\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"discovery/discovery-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:discovery:2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Discovery 2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782166952\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"discovery/discovery-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"3.8.13-1.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls-main\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781525684\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/cds-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781525671\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/haproxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781525693\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/installer-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781525739\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/rhua-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787241211\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/cds-kubernetes-tp-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787135742\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/installer-tp-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787241260\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/rhua-tp-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6\", \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-hypershift-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-03-09T14:02:09.783Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-04-30T17:26:28.969Z\", \"value\": \"Made public.\"}], \"datePublic\": \"2026-04-30T17:26:28.969Z\", \"references\": [{\"url\": \"https://access.redhat.com/errata/RHSA-2026:13274\", \"name\": \"RHSA-2026:13274\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20611\", \"name\": \"RHSA-2026:20611\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20612\", \"name\": \"RHSA-2026:20612\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20613\", \"name\": \"RHSA-2026:20613\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26319\", \"name\": \"RHSA-2026:26319\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26409\", \"name\": \"RHSA-2026:26409\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29197\", \"name\": \"RHSA-2026:29197\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30004\", \"name\": \"RHSA-2026:30004\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30849\", \"name\": \"RHSA-2026:30849\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30850\", \"name\": \"RHSA-2026:30850\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:32962\", \"name\": \"RHSA-2026:32962\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33125\", \"name\": \"RHSA-2026:33125\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41921\", \"name\": \"RHSA-2026:41921\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:43575\", \"name\": \"RHSA-2026:43575\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57402\", \"name\": \"RHSA-2026:57402\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:58981\", \"name\": \"RHSA-2026:58981\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/security/cve/CVE-2026-3833\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2445763\", \"name\": \"RHBZ#2445763\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://gitlab.com/gnutls/gnutls/-/issues/1803\"}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\"}], \"x_generator\": {\"engine\": \"cvelib 1.8.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-178\", \"description\": \"Improper Handling of Case Sensitivity\"}]}], \"providerMetadata\": {\"orgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"shortName\": \"redhat\", \"dateUpdated\": \"2026-08-26T22:05:04.410Z\"}, \"x_redhatCweChain\": \"CWE-178: Improper Handling of Case Sensitivity\"}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-3833\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-26T22:05:04.410Z\", \"dateReserved\": \"2026-03-09T14:00:51.698Z\", \"assignerOrgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"datePublished\": \"2026-04-30T17:37:05.818Z\", \"assignerShortName\": \"redhat\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2026-AVI-1094

Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
IBM	WebSphere	WebSphere Application Server Liberty versions 17.0.0.3 à 26.0.0.7 sans le correctif de sécurité PH71585
IBM	QRadar	QRadar SIEM versions 7.5.x antérieures à 7.5.0 UP15 IF06
IBM	Tivoli	Tivoli System Automation Application Manager version 4.1 avec WebSphere Application Server sans les derniers correctifs de sécurité
IBM	Sterling	Sterling Control Center version 6.3.1.0 antérieure à 6.3.1.0 iFix11
IBM	Db2	Db2 versions 11.5.x antérieures à 11.5.9 sans le dernier correctif de sécurité
IBM	Sterling	Sterling Connect:Direct File Agent versions 1.4.0.3x à 1.4.0.5x antérieures à 1.4.0.5_iFix016
IBM	Db2	Db2 versions 12.1.x antérieures à 12.1.4 sans le dernier correctif de sécurité
IBM	Spectrum	Spectrum Control versions antérieures à 5.5
IBM	Sterling	Sterling Control Center version 6.4.2.0 antérieure à 6.4.2.0 iFix06
IBM	QRadar	QRadar SIEM versions 7.6.x antérieures à 7.6.0.3
IBM	QRadar	Security QRadar EDR versions 3.12.x antérieures à 3.12.26
IBM	WebSphere	WebSphere Hybrid Edition version 5.1 sans les correctifs de sécurité APAR DT496328, DT496327 et DT497580
IBM	Db2	Db2 Genius Hub & Agentics versions 1.1.x antérieures à 1.1.4
IBM	Tivoli	Tivoli Application Dependency Discovery Manager versions 7.3.0.0 à 7.3.0.12 avec WebSphere Application Server Liberty versions antérieures à 26.0.0.8
IBM	WebSphere	WebSphere Extreme Scale versions 8.6.1.x antérieures à 8.6.1.6 avec le correctif de sécurité PH72588
IBM	Sterling	Sterling Connect:Direct for Unix versions 6.3.0.x antérieures à 6.3.0.7.iFix026
IBM	Sterling	Sterling Connect:Direct for Unix versions 6.4.0.x antérieures à 6.4.0.6.iFix014
IBM	QRadar	QRadar Suite Software versions 1.10.12.0 à 1.11.10.0 antérieures à 1.11.12.0
IBM	QRadar	QRadar AI Assistant versions antérieures à 2.2.0

References

Title

Publication Time

Tags

Bulletin de sécurité IBM 7285382	2026-08-27	vendor-advisory
Bulletin de sécurité IBM 7284666	2026-08-24	vendor-advisory
Bulletin de sécurité IBM 7285542	2026-08-28	vendor-advisory
Bulletin de sécurité IBM 7285272	2026-08-26	vendor-advisory
Bulletin de sécurité IBM 7285232	2026-08-26	vendor-advisory
Bulletin de sécurité IBM 7285472	2026-08-27	vendor-advisory
Bulletin de sécurité IBM 7285291	2026-08-26	vendor-advisory
Bulletin de sécurité IBM 7285470	2026-08-27	vendor-advisory
Bulletin de sécurité IBM 7285469	2026-08-27	vendor-advisory
Bulletin de sécurité IBM 7284528	2026-08-21	vendor-advisory
Bulletin de sécurité IBM 7285416	2026-08-27	vendor-advisory
Bulletin de sécurité IBM 7285376	2026-08-27	vendor-advisory
Bulletin de sécurité IBM 7285380	2026-08-27	vendor-advisory
Bulletin de sécurité IBM 7285275	2026-08-26	vendor-advisory
Bulletin de sécurité IBM 7285292	2026-08-26	vendor-advisory
Bulletin de sécurité IBM 7285234	2026-08-26	vendor-advisory
Bulletin de sécurité IBM 7285141	2026-08-26	vendor-advisory
Bulletin de sécurité IBM 7279466	2026-08-27	vendor-advisory
Bulletin de sécurité IBM 7284718	2026-08-24	vendor-advisory
Bulletin de sécurité IBM 7285509	2026-08-28	vendor-advisory
Bulletin de sécurité IBM 7285340	2026-08-27	vendor-advisory
Bulletin de sécurité IBM 7285513	2026-08-28	vendor-advisory
Bulletin de sécurité IBM 7285420	2026-08-27	vendor-advisory
Bulletin de sécurité IBM 7284710	2026-08-24	vendor-advisory
Bulletin de sécurité IBM 7285274	2026-08-26	vendor-advisory
Bulletin de sécurité IBM 7284653	2026-08-24	vendor-advisory
Bulletin de sécurité IBM 7285342	2026-08-27	vendor-advisory
Bulletin de sécurité IBM 7285539	2026-08-28	vendor-advisory
Bulletin de sécurité IBM 7284670	2026-08-24	vendor-advisory
Bulletin de sécurité IBM 7284806	2026-08-24	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "WebSphere Application Server Liberty versions 17.0.0.3 \u00e0 26.0.0.7 sans le correctif de s\u00e9curit\u00e9 PH71585",
      "product": {
        "name": "WebSphere",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "QRadar SIEM versions 7.5.x ant\u00e9rieures \u00e0 7.5.0 UP15 IF06",
      "product": {
        "name": "QRadar",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Tivoli System Automation Application Manager version 4.1 avec WebSphere Application Server sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "Tivoli",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Control Center version 6.3.1.0 ant\u00e9rieure \u00e0 6.3.1.0 iFix11",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Db2 versions 11.5.x ant\u00e9rieures \u00e0 11.5.9 sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "Db2",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Connect:Direct File Agent versions 1.4.0.3x \u00e0 1.4.0.5x ant\u00e9rieures \u00e0 1.4.0.5_iFix016",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Db2 versions 12.1.x ant\u00e9rieures \u00e0 12.1.4 sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "Db2",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Spectrum Control versions ant\u00e9rieures \u00e0 5.5",
      "product": {
        "name": "Spectrum",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Control Center version 6.4.2.0 ant\u00e9rieure \u00e0 6.4.2.0 iFix06",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "QRadar SIEM versions 7.6.x ant\u00e9rieures \u00e0 7.6.0.3",
      "product": {
        "name": "QRadar",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Security QRadar EDR versions 3.12.x ant\u00e9rieures \u00e0 3.12.26",
      "product": {
        "name": "QRadar",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "WebSphere Hybrid Edition version 5.1 sans les correctifs de s\u00e9curit\u00e9 APAR DT496328, DT496327 et DT497580",
      "product": {
        "name": "WebSphere",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Db2 Genius Hub \u0026 Agentics versions 1.1.x ant\u00e9rieures \u00e0 1.1.4",
      "product": {
        "name": "Db2",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Tivoli Application Dependency Discovery Manager versions 7.3.0.0 \u00e0 7.3.0.12 avec WebSphere Application Server Liberty versions ant\u00e9rieures \u00e0 26.0.0.8",
      "product": {
        "name": "Tivoli",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "WebSphere Extreme Scale versions 8.6.1.x ant\u00e9rieures \u00e0 8.6.1.6 avec le correctif de s\u00e9curit\u00e9 PH72588",
      "product": {
        "name": "WebSphere",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Connect:Direct for Unix versions 6.3.0.x ant\u00e9rieures \u00e0 6.3.0.7.iFix026",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Connect:Direct for Unix versions 6.4.0.x ant\u00e9rieures \u00e0 6.4.0.6.iFix014",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "QRadar Suite Software versions 1.10.12.0 \u00e0 1.11.10.0 ant\u00e9rieures \u00e0 1.11.12.0",
      "product": {
        "name": "QRadar",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "QRadar AI Assistant versions ant\u00e9rieures \u00e0 2.2.0",
      "product": {
        "name": "QRadar",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-41411",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41411"
    },
    {
      "name": "CVE-2026-14380",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14380"
    },
    {
      "name": "CVE-2026-26007",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-26007"
    },
    {
      "name": "CVE-2026-43198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43198"
    },
    {
      "name": "CVE-2026-54293",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54293"
    },
    {
      "name": "CVE-2026-49978",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49978"
    },
    {
      "name": "CVE-2026-9697",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9697"
    },
    {
      "name": "CVE-2026-53540",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53540"
    },
    {
      "name": "CVE-2026-54283",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54283"
    },
    {
      "name": "CVE-2026-54369",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54369"
    },
    {
      "name": "CVE-2026-40466",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40466"
    },
    {
      "name": "CVE-2026-59724",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59724"
    },
    {
      "name": "CVE-2026-45505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45505"
    },
    {
      "name": "CVE-2026-4878",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4878"
    },
    {
      "name": "CVE-2026-49476",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49476"
    },
    {
      "name": "CVE-2026-42588",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42588"
    },
    {
      "name": "CVE-2026-27205",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27205"
    },
    {
      "name": "CVE-2026-59205",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59205"
    },
    {
      "name": "CVE-2026-33845",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33845"
    },
    {
      "name": "CVE-2026-41254",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41254"
    },
    {
      "name": "CVE-2026-42253",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42253"
    },
    {
      "name": "CVE-2026-44405",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44405"
    },
    {
      "name": "CVE-2026-50645",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50645"
    },
    {
      "name": "CVE-2026-44289",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44289"
    },
    {
      "name": "CVE-2026-42041",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42041"
    },
    {
      "name": "CVE-2026-9679",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9679"
    },
    {
      "name": "CVE-2026-39892",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39892"
    },
    {
      "name": "CVE-2026-10050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10050"
    },
    {
      "name": "CVE-2024-24762",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-24762"
    },
    {
      "name": "CVE-2026-42402",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42402"
    },
    {
      "name": "CVE-2026-42561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42561"
    },
    {
      "name": "CVE-2025-14505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14505"
    },
    {
      "name": "CVE-2026-16184",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16184"
    },
    {
      "name": "CVE-2026-15328",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15328"
    },
    {
      "name": "CVE-2026-32286",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32286"
    },
    {
      "name": "CVE-2026-46227",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46227"
    },
    {
      "name": "CVE-2026-57455",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57455"
    },
    {
      "name": "CVE-2026-54514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54514"
    },
    {
      "name": "CVE-2026-44293",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44293"
    },
    {
      "name": "CVE-2026-44290",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44290"
    },
    {
      "name": "CVE-2021-23336",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-23336"
    },
    {
      "name": "CVE-2026-55276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55276"
    },
    {
      "name": "CVE-2026-48710",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48710"
    },
    {
      "name": "CVE-2026-16243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16243"
    },
    {
      "name": "CVE-2026-9171",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9171"
    },
    {
      "name": "CVE-2025-47279",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47279"
    },
    {
      "name": "CVE-2025-40026",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40026"
    },
    {
      "name": "CVE-2026-47010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47010"
    },
    {
      "name": "CVE-2026-69249",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-69249"
    },
    {
      "name": "CVE-2026-54058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54058"
    },
    {
      "name": "CVE-2026-55653",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55653"
    },
    {
      "name": "CVE-2026-41239",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41239"
    },
    {
      "name": "CVE-2026-46117",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46117"
    },
    {
      "name": "CVE-2026-59084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59084"
    },
    {
      "name": "CVE-2026-45740",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45740"
    },
    {
      "name": "CVE-2025-14920",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14920"
    },
    {
      "name": "CVE-2026-52993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-52993"
    },
    {
      "name": "CVE-2026-59725",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59725"
    },
    {
      "name": "CVE-2026-14739",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14739"
    },
    {
      "name": "CVE-2026-39824",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39824"
    },
    {
      "name": "CVE-2026-46605",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46605"
    },
    {
      "name": "CVE-2026-54275",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54275"
    },
    {
      "name": "CVE-2026-22013",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22013"
    },
    {
      "name": "CVE-2026-47057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47057"
    },
    {
      "name": "CVE-2026-10846",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10846"
    },
    {
      "name": "CVE-2026-22018",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22018"
    },
    {
      "name": "CVE-2026-12505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12505"
    },
    {
      "name": "CVE-2026-35469",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-35469"
    },
    {
      "name": "CVE-2026-9698",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9698"
    },
    {
      "name": "CVE-2026-42015",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42015"
    },
    {
      "name": "CVE-2026-14528",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14528"
    },
    {
      "name": "CVE-2026-54278",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54278"
    },
    {
      "name": "CVE-2026-53538",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53538"
    },
    {
      "name": "CVE-2026-18499",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-18499"
    },
    {
      "name": "CVE-2026-46113",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46113"
    },
    {
      "name": "CVE-2026-54515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54515"
    },
    {
      "name": "CVE-2026-53550",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53550"
    },
    {
      "name": "CVE-2026-43279",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43279"
    },
    {
      "name": "CVE-2026-53071",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53071"
    },
    {
      "name": "CVE-2026-49157",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49157"
    },
    {
      "name": "CVE-2026-16221",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16221"
    },
    {
      "name": "CVE-2026-55798",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55798"
    },
    {
      "name": "CVE-2026-6790",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6790"
    },
    {
      "name": "CVE-2026-7246",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7246"
    },
    {
      "name": "CVE-2026-15308",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15308"
    },
    {
      "name": "CVE-2026-66143",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66143"
    },
    {
      "name": "CVE-2026-46331",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46331"
    },
    {
      "name": "CVE-2026-66144",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66144"
    },
    {
      "name": "CVE-2026-44494",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
    },
    {
      "name": "CVE-2026-55153",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55153"
    },
    {
      "name": "CVE-2026-46209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46209"
    },
    {
      "name": "CVE-2026-11541",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11541"
    },
    {
      "name": "CVE-2026-34282",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34282"
    },
    {
      "name": "CVE-2026-44618",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44618"
    },
    {
      "name": "CVE-2026-42036",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42036"
    },
    {
      "name": "CVE-2026-33236",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33236"
    },
    {
      "name": "CVE-2026-54475",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54475"
    },
    {
      "name": "CVE-2026-31692",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31692"
    },
    {
      "name": "CVE-2026-44240",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44240"
    },
    {
      "name": "CVE-2026-55443",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55443"
    },
    {
      "name": "CVE-2026-65900",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65900"
    },
    {
      "name": "CVE-2026-33558",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33558"
    },
    {
      "name": "CVE-2026-53916",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53916"
    },
    {
      "name": "CVE-2026-53006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53006"
    },
    {
      "name": "CVE-2026-43450",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43450"
    },
    {
      "name": "CVE-2026-33846",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33846"
    },
    {
      "name": "CVE-2026-42403",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42403"
    },
    {
      "name": "CVE-2026-34043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34043"
    },
    {
      "name": "CVE-2026-59880",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59880"
    },
    {
      "name": "CVE-2026-15057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15057"
    },
    {
      "name": "CVE-2026-59890",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59890"
    },
    {
      "name": "CVE-2026-53266",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53266"
    },
    {
      "name": "CVE-2025-64718",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-64718"
    },
    {
      "name": "CVE-2026-46116",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46116"
    },
    {
      "name": "CVE-2026-14742",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14742"
    },
    {
      "name": "CVE-2025-62718",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
    },
    {
      "name": "CVE-2026-44990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
    },
    {
      "name": "CVE-2026-47265",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47265"
    },
    {
      "name": "CVE-2026-49458",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49458"
    },
    {
      "name": "CVE-2026-54282",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54282"
    },
    {
      "name": "CVE-2026-46259",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46259"
    },
    {
      "name": "CVE-2026-0540",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0540"
    },
    {
      "name": "CVE-2026-45149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45149"
    },
    {
      "name": "CVE-2026-45249",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45249"
    },
    {
      "name": "CVE-2026-23865",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23865"
    },
    {
      "name": "CVE-2026-48988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48988"
    },
    {
      "name": "CVE-2026-43499",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43499"
    },
    {
      "name": "CVE-2026-11525",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11525"
    },
    {
      "name": "CVE-2026-15325",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15325"
    },
    {
      "name": "CVE-2026-59199",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59199"
    },
    {
      "name": "CVE-2026-69247",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-69247"
    },
    {
      "name": "CVE-2026-33671",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33671"
    },
    {
      "name": "CVE-2026-34515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34515"
    },
    {
      "name": "CVE-2026-14976",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14976"
    },
    {
      "name": "CVE-2026-48864",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48864"
    },
    {
      "name": "CVE-2026-34519",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34519"
    },
    {
      "name": "CVE-2026-42033",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42033"
    },
    {
      "name": "CVE-2026-42035",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42035"
    },
    {
      "name": "CVE-2026-54277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54277"
    },
    {
      "name": "CVE-2026-69248",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-69248"
    },
    {
      "name": "CVE-2026-18446",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-18446"
    },
    {
      "name": "CVE-2026-5450",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5450"
    },
    {
      "name": "CVE-2026-14512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14512"
    },
    {
      "name": "CVE-2026-5260",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5260"
    },
    {
      "name": "CVE-2026-42009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42009"
    },
    {
      "name": "CVE-2026-54059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54059"
    },
    {
      "name": "CVE-2026-10842",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10842"
    },
    {
      "name": "CVE-2026-46189",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46189"
    },
    {
      "name": "CVE-2026-33750",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33750"
    },
    {
      "name": "CVE-2026-5038",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5038"
    },
    {
      "name": "CVE-2026-40186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40186"
    },
    {
      "name": "CVE-2026-2359",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2359"
    },
    {
      "name": "CVE-2026-42043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42043"
    },
    {
      "name": "CVE-2026-44288",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44288"
    },
    {
      "name": "CVE-2026-41603",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41603"
    },
    {
      "name": "CVE-2026-8646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8646"
    },
    {
      "name": "CVE-2026-45822",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45822"
    },
    {
      "name": "CVE-2026-6918",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6918"
    },
    {
      "name": "CVE-2026-55380",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55380"
    },
    {
      "name": "CVE-2026-54280",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54280"
    },
    {
      "name": "CVE-2026-46625",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46625"
    },
    {
      "name": "CVE-2026-25749",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25749"
    },
    {
      "name": "CVE-2026-44489",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44489"
    },
    {
      "name": "CVE-2026-12413",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12413"
    },
    {
      "name": "CVE-2026-59869",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59869"
    },
    {
      "name": "CVE-2026-3833",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3833"
    },
    {
      "name": "CVE-2025-13151",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-13151"
    },
    {
      "name": "CVE-2026-9320",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9320"
    },
    {
      "name": "CVE-2026-49459",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49459"
    },
    {
      "name": "CVE-2026-66053",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66053"
    },
    {
      "name": "CVE-2026-41044",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41044"
    },
    {
      "name": "CVE-2026-41043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41043"
    },
    {
      "name": "CVE-2026-5079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5079"
    },
    {
      "name": "CVE-2026-34518",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34518"
    },
    {
      "name": "CVE-2026-50734",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50734"
    },
    {
      "name": "CVE-2026-44930",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44930"
    },
    {
      "name": "CVE-2026-14974",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14974"
    },
    {
      "name": "CVE-2026-41240",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41240"
    },
    {
      "name": "CVE-2026-42010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42010"
    },
    {
      "name": "CVE-2026-5435",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5435"
    },
    {
      "name": "CVE-2026-4427",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4427"
    },
    {
      "name": "CVE-2026-59887",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59887"
    },
    {
      "name": "CVE-2026-59203",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59203"
    },
    {
      "name": "CVE-2025-10263",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-10263"
    },
    {
      "name": "CVE-2026-42040",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42040"
    },
    {
      "name": "CVE-2026-47027",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47027"
    },
    {
      "name": "CVE-2026-23216",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23216"
    },
    {
      "name": "CVE-2026-47058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47058"
    },
    {
      "name": "CVE-2026-42013",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42013"
    },
    {
      "name": "CVE-2026-62389",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62389"
    },
    {
      "name": "CVE-2026-12151",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12151"
    },
    {
      "name": "CVE-2026-5928",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5928"
    },
    {
      "name": "CVE-2026-16441",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16441"
    },
    {
      "name": "CVE-2026-27903",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27903"
    },
    {
      "name": "CVE-2026-14981",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14981"
    },
    {
      "name": "CVE-2026-6734",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6734"
    },
    {
      "name": "CVE-2026-12243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12243"
    },
    {
      "name": "CVE-2025-6170",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6170"
    },
    {
      "name": "CVE-2026-46150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46150"
    },
    {
      "name": "CVE-2026-46090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46090"
    },
    {
      "name": "CVE-2026-14529",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14529"
    },
    {
      "name": "CVE-2026-34525",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34525"
    },
    {
      "name": "CVE-2025-71089",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71089"
    },
    {
      "name": "CVE-2026-54274",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54274"
    },
    {
      "name": "CVE-2026-54512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54512"
    },
    {
      "name": "CVE-2026-59197",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59197"
    },
    {
      "name": "CVE-2026-57819",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57819"
    },
    {
      "name": "CVE-2026-53059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53059"
    },
    {
      "name": "CVE-2026-65899",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65899"
    },
    {
      "name": "CVE-2026-4539",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4539"
    },
    {
      "name": "CVE-2026-34197",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34197"
    },
    {
      "name": "CVE-2026-55956",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55956"
    },
    {
      "name": "CVE-2026-54060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54060"
    },
    {
      "name": "CVE-2026-41140",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41140"
    },
    {
      "name": "CVE-2025-48913",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48913"
    },
    {
      "name": "CVE-2026-59858",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59858"
    },
    {
      "name": "CVE-2026-42404",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42404"
    },
    {
      "name": "CVE-2026-45984",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45984"
    },
    {
      "name": "CVE-2026-53537",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53537"
    },
    {
      "name": "CVE-2026-40046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40046"
    },
    {
      "name": "CVE-2026-16192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16192"
    },
    {
      "name": "CVE-2026-50722",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50722"
    },
    {
      "name": "CVE-2026-3304",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3304"
    },
    {
      "name": "CVE-2026-46145",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46145"
    },
    {
      "name": "CVE-2026-54273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54273"
    },
    {
      "name": "CVE-2026-40895",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40895"
    },
    {
      "name": "CVE-2026-42198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42198"
    },
    {
      "name": "CVE-2026-47063",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47063"
    },
    {
      "name": "CVE-2026-14515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14515"
    },
    {
      "name": "CVE-2026-22016",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22016"
    },
    {
      "name": "CVE-2026-22021",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22021"
    },
    {
      "name": "CVE-2026-59083",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59083"
    },
    {
      "name": "CVE-2026-25243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25243"
    },
    {
      "name": "CVE-2026-46135",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46135"
    },
    {
      "name": "CVE-2026-22007",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22007"
    },
    {
      "name": "CVE-2026-58016",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58016"
    },
    {
      "name": "CVE-2026-43056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43056"
    },
    {
      "name": "CVE-2026-59888",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59888"
    },
    {
      "name": "CVE-2026-13149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13149"
    },
    {
      "name": "CVE-2026-47021",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47021"
    },
    {
      "name": "CVE-2025-54410",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-54410"
    },
    {
      "name": "CVE-2026-46054",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46054"
    },
    {
      "name": "CVE-2025-69873",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69873"
    },
    {
      "name": "CVE-2026-49434",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49434"
    },
    {
      "name": "CVE-2026-42011",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42011"
    },
    {
      "name": "CVE-2026-34268",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34268"
    },
    {
      "name": "CVE-2026-16440",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16440"
    },
    {
      "name": "CVE-2026-64958",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64958"
    },
    {
      "name": "CVE-2026-50721",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50721"
    },
    {
      "name": "CVE-2025-71066",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71066"
    },
    {
      "name": "CVE-2026-44291",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44291"
    },
    {
      "name": "CVE-2026-15043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15043"
    },
    {
      "name": "CVE-2026-66373",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66373"
    },
    {
      "name": "CVE-2026-3520",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3520"
    },
    {
      "name": "CVE-2026-55693",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55693"
    },
    {
      "name": "CVE-2026-57456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57456"
    },
    {
      "name": "CVE-2026-29786",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-29786"
    },
    {
      "name": "CVE-2026-44487",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
    },
    {
      "name": "CVE-2026-2482",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2482"
    },
    {
      "name": "CVE-2026-11897",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11897"
    },
    {
      "name": "CVE-2026-42038",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42038"
    },
    {
      "name": "CVE-2026-49844",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49844"
    },
    {
      "name": "CVE-2026-31419",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31419"
    },
    {
      "name": "CVE-2026-41680",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41680"
    },
    {
      "name": "CVE-2026-44292",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44292"
    },
    {
      "name": "CVE-2026-54370",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54370"
    },
    {
      "name": "CVE-2026-42039",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42039"
    },
    {
      "name": "CVE-2026-49432",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49432"
    },
    {
      "name": "CVE-2026-59879",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59879"
    },
    {
      "name": "CVE-2026-46968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46968"
    },
    {
      "name": "CVE-2025-15599",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15599"
    },
    {
      "name": "CVE-2026-55379",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55379"
    },
    {
      "name": "CVE-2026-31488",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31488"
    },
    {
      "name": "CVE-2026-9358",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9358"
    },
    {
      "name": "CVE-2026-44417",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44417"
    },
    {
      "name": "CVE-2026-14446",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14446"
    },
    {
      "name": "CVE-2026-54279",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54279"
    },
    {
      "name": "CVE-2026-33672",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33672"
    },
    {
      "name": "CVE-2026-6238",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6238"
    },
    {
      "name": "CVE-2026-8723",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8723"
    },
    {
      "name": "CVE-2026-75838",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75838"
    },
    {
      "name": "CVE-2026-59200",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59200"
    },
    {
      "name": "CVE-2025-58181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58181"
    },
    {
      "name": "CVE-2025-47914",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47914"
    },
    {
      "name": "CVE-2026-59877",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59877"
    },
    {
      "name": "CVE-2026-9678",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9678"
    },
    {
      "name": "CVE-2026-39304",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39304"
    },
    {
      "name": "CVE-2026-48713",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48713"
    },
    {
      "name": "CVE-2026-49270",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49270"
    },
    {
      "name": "CVE-2026-34516",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34516"
    },
    {
      "name": "CVE-2026-46086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46086"
    },
    {
      "name": "CVE-2026-15064",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15064"
    },
    {
      "name": "CVE-2026-42044",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42044"
    },
    {
      "name": "CVE-2026-14476",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14476"
    },
    {
      "name": "CVE-2026-53359",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53359"
    },
    {
      "name": "CVE-2026-16439",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16439"
    },
    {
      "name": "CVE-2018-16487",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16487"
    },
    {
      "name": "CVE-2026-44728",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44728"
    },
    {
      "name": "CVE-2026-55955",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55955"
    },
    {
      "name": "CVE-2026-34517",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34517"
    },
    {
      "name": "CVE-2026-49477",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49477"
    },
    {
      "name": "CVE-2026-42034",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42034"
    },
    {
      "name": "CVE-2026-9322",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9322"
    },
    {
      "name": "CVE-2025-5889",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-5889"
    },
    {
      "name": "CVE-2026-31411",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31411"
    },
    {
      "name": "CVE-2026-54513",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54513"
    },
    {
      "name": "CVE-2026-34591",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34591"
    },
    {
      "name": "CVE-2026-48779",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
    },
    {
      "name": "CVE-2025-14914",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14914"
    },
    {
      "name": "CVE-2026-9563",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9563"
    },
    {
      "name": "CVE-2026-13676",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
    },
    {
      "name": "CVE-2026-54276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54276"
    },
    {
      "name": "CVE-2026-53434",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53434"
    },
    {
      "name": "CVE-2026-40347",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40347"
    },
    {
      "name": "CVE-2026-43112",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43112"
    },
    {
      "name": "CVE-2025-66168",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66168"
    },
    {
      "name": "CVE-2026-66142",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66142"
    },
    {
      "name": "CVE-2026-10051",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10051"
    },
    {
      "name": "CVE-2026-6322",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
    },
    {
      "name": "CVE-2026-34513",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34513"
    },
    {
      "name": "CVE-2026-43869",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43869"
    },
    {
      "name": "CVE-2026-8400",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8400"
    },
    {
      "name": "CVE-2026-14980",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14980"
    },
    {
      "name": "CVE-2026-5078",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5078"
    },
    {
      "name": "CVE-2026-12143",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
    },
    {
      "name": "CVE-2026-55655",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55655"
    },
    {
      "name": "CVE-2026-34514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34514"
    },
    {
      "name": "CVE-2026-44431",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44431"
    },
    {
      "name": "CVE-2026-27601",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27601"
    },
    {
      "name": "CVE-2026-26996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-26996"
    },
    {
      "name": "CVE-2026-44486",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
    },
    {
      "name": "CVE-2026-33227",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33227"
    },
    {
      "name": "CVE-2026-48775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48775"
    },
    {
      "name": "CVE-2026-44496",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
    },
    {
      "name": "CVE-2026-60081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-60081"
    },
    {
      "name": "CVE-2026-10879",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10879"
    },
    {
      "name": "CVE-2026-64530",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64530"
    },
    {
      "name": "CVE-2026-44492",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
    },
    {
      "name": "CVE-2026-45736",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45736"
    },
    {
      "name": "CVE-2026-54225",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54225"
    },
    {
      "name": "CVE-2026-34520",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34520"
    },
    {
      "name": "CVE-2026-41238",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41238"
    },
    {
      "name": "CVE-2026-42037",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42037"
    },
    {
      "name": "CVE-2026-53404",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53404"
    },
    {
      "name": "CVE-2026-33416",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33416"
    },
    {
      "name": "CVE-2026-42042",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42042"
    },
    {
      "name": "CVE-2026-9071",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9071"
    },
    {
      "name": "CVE-2026-34993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34993"
    },
    {
      "name": "CVE-2026-59198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59198"
    },
    {
      "name": "CVE-2026-11806",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11806"
    },
    {
      "name": "CVE-2026-44294",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44294"
    },
    {
      "name": "CVE-2026-6321",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6321"
    },
    {
      "name": "CVE-2026-33231",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33231"
    },
    {
      "name": "CVE-2026-48801",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48801"
    },
    {
      "name": "CVE-2026-52923",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-52923"
    },
    {
      "name": "CVE-2026-42012",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42012"
    },
    {
      "name": "CVE-2026-44490",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44490"
    },
    {
      "name": "CVE-2026-46917",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46917"
    },
    {
      "name": "CVE-2026-43116",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43116"
    },
    {
      "name": "CVE-2026-60147",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-60147"
    },
    {
      "name": "CVE-2026-22815",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22815"
    },
    {
      "name": "CVE-2026-15280",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15280"
    },
    {
      "name": "CVE-2026-22008",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22008"
    },
    {
      "name": "CVE-2026-31802",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31802"
    },
    {
      "name": "CVE-2026-56852",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56852"
    },
    {
      "name": "CVE-2026-6733",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6733"
    },
    {
      "name": "CVE-2026-13311",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13311"
    },
    {
      "name": "CVE-2026-44488",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
    },
    {
      "name": "CVE-2026-33230",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33230"
    },
    {
      "name": "CVE-2026-10535",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10535"
    },
    {
      "name": "CVE-2026-34481",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34481"
    },
    {
      "name": "CVE-2025-47273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47273"
    },
    {
      "name": "CVE-2026-59204",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59204"
    },
    {
      "name": "CVE-2026-27904",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27904"
    },
    {
      "name": "CVE-2026-14474",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14474"
    },
    {
      "name": "CVE-2026-47059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47059"
    },
    {
      "name": "CVE-2026-53539",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53539"
    },
    {
      "name": "CVE-2026-2739",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2739"
    },
    {
      "name": "CVE-2026-65898",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65898"
    },
    {
      "name": "CVE-2026-53917",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53917"
    },
    {
      "name": "CVE-2026-15392",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15392"
    },
    {
      "name": "CVE-2026-8177",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8177"
    }
  ],
  "initial_release_date": "2026-08-28T00:00:00",
  "last_revision_date": "2026-08-28T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1094",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-08-28T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits IBM. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM",
  "vendor_advisories": [
    {
      "published_at": "2026-08-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285382",
      "url": "https://www.ibm.com/support/pages/node/7285382"
    },
    {
      "published_at": "2026-08-24",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7284666",
      "url": "https://www.ibm.com/support/pages/node/7284666"
    },
    {
      "published_at": "2026-08-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285542",
      "url": "https://www.ibm.com/support/pages/node/7285542"
    },
    {
      "published_at": "2026-08-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285272",
      "url": "https://www.ibm.com/support/pages/node/7285272"
    },
    {
      "published_at": "2026-08-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285232",
      "url": "https://www.ibm.com/support/pages/node/7285232"
    },
    {
      "published_at": "2026-08-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285472",
      "url": "https://www.ibm.com/support/pages/node/7285472"
    },
    {
      "published_at": "2026-08-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285291",
      "url": "https://www.ibm.com/support/pages/node/7285291"
    },
    {
      "published_at": "2026-08-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285470",
      "url": "https://www.ibm.com/support/pages/node/7285470"
    },
    {
      "published_at": "2026-08-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285469",
      "url": "https://www.ibm.com/support/pages/node/7285469"
    },
    {
      "published_at": "2026-08-21",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7284528",
      "url": "https://www.ibm.com/support/pages/node/7284528"
    },
    {
      "published_at": "2026-08-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285416",
      "url": "https://www.ibm.com/support/pages/node/7285416"
    },
    {
      "published_at": "2026-08-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285376",
      "url": "https://www.ibm.com/support/pages/node/7285376"
    },
    {
      "published_at": "2026-08-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285380",
      "url": "https://www.ibm.com/support/pages/node/7285380"
    },
    {
      "published_at": "2026-08-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285275",
      "url": "https://www.ibm.com/support/pages/node/7285275"
    },
    {
      "published_at": "2026-08-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285292",
      "url": "https://www.ibm.com/support/pages/node/7285292"
    },
    {
      "published_at": "2026-08-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285234",
      "url": "https://www.ibm.com/support/pages/node/7285234"
    },
    {
      "published_at": "2026-08-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285141",
      "url": "https://www.ibm.com/support/pages/node/7285141"
    },
    {
      "published_at": "2026-08-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7279466",
      "url": "https://www.ibm.com/support/pages/node/7279466"
    },
    {
      "published_at": "2026-08-24",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7284718",
      "url": "https://www.ibm.com/support/pages/node/7284718"
    },
    {
      "published_at": "2026-08-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285509",
      "url": "https://www.ibm.com/support/pages/node/7285509"
    },
    {
      "published_at": "2026-08-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285340",
      "url": "https://www.ibm.com/support/pages/node/7285340"
    },
    {
      "published_at": "2026-08-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285513",
      "url": "https://www.ibm.com/support/pages/node/7285513"
    },
    {
      "published_at": "2026-08-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285420",
      "url": "https://www.ibm.com/support/pages/node/7285420"
    },
    {
      "published_at": "2026-08-24",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7284710",
      "url": "https://www.ibm.com/support/pages/node/7284710"
    },
    {
      "published_at": "2026-08-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285274",
      "url": "https://www.ibm.com/support/pages/node/7285274"
    },
    {
      "published_at": "2026-08-24",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7284653",
      "url": "https://www.ibm.com/support/pages/node/7284653"
    },
    {
      "published_at": "2026-08-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285342",
      "url": "https://www.ibm.com/support/pages/node/7285342"
    },
    {
      "published_at": "2026-08-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285539",
      "url": "https://www.ibm.com/support/pages/node/7285539"
    },
    {
      "published_at": "2026-08-24",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7284670",
      "url": "https://www.ibm.com/support/pages/node/7284670"
    },
    {
      "published_at": "2026-08-24",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7284806",
      "url": "https://www.ibm.com/support/pages/node/7284806"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2026-3833 (GCVE-0-2026-3833)

Vulnerability from cvelistv5

CERTFR-2026-AVI-1094

Vulnerability from certfr_avis

Solutions

Tags

Sightings

Nomenclature