https://vulnerability.circl.lu/cna-root/redhat/recent 2026-08-25T15:38:59.899067+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Latest vulnerabilities published by the CNAs operating under the redhat root of the CVE Program. https://vulnerability.circl.lu/vuln/cve-2026-79655 2026-08-25T13:49:37.593000+00:00 Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write

Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write

2026-08-25T13:49:37.593000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-79652 2026-08-25T11:07:48.988000+00:00 Keycloak-services: keycloak-services: jwt bearer authorization grant does not enforce consentrequired

Keycloak-services: keycloak-services: jwt bearer authorization grant does not enforce consentrequired

2026-08-25T11:07:48.988000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-16231 2026-08-25T10:00:09.678000+00:00 hbs vulnerable to XSS via registerAsyncHelper output-escaping bypass

hbs vulnerable to XSS via registerAsyncHelper output-escaping bypass

2026-08-25T10:00:09.678000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-78701 2026-08-25T07:33:02.549000+00:00 389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos

389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos

2026-08-25T07:33:02.549000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-78322 2026-08-25T07:21:38.573000+00:00 File-roller: file-roller: stack buffer overflow in parse_progress_line for 7z and rar handlers

File-roller: file-roller: stack buffer overflow in parse_progress_line for 7z and rar handlers

2026-08-25T07:21:38.573000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-17113 2026-08-24T21:22:49.638000+00:00 Cri-o: cri-o: unvalidated image env var causes daemon crash

Cri-o: cri-o: unvalidated image env var causes daemon crash

2026-08-24T21:22:49.638000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-78475 2026-08-24T17:20:48.050000+00:00 Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader

Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader

2026-08-24T17:20:48.050000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-78465 2026-08-24T16:28:12.574000+00:00 Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit

Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit

2026-08-24T16:28:12.574000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-19685 2026-08-24T16:12:38.297000+00:00 Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615)

Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615)

2026-08-24T16:12:38.297000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-71366 2026-08-24T15:42:44.869000+00:00 Awx: notification backends allow ssrf and credential leakage

Awx: notification backends allow ssrf and credential leakage

2026-08-24T15:42:44.869000+00:00