DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Enterprise Linux (Apicurio Registry): Mehrere Schwachstellen
view advisory published 2026-08-24
Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux (Apicurio Registry) ausnutzen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen und um einen Cross-Site Scripting Angriff durchzuführen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-49978US | medium6.1 | — | ||
DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.7, DOMPurify IN_PLACE sanitization could skip shadow contents attached to an element… | ||||
| CVE-2026-12993US | — | — | ||
A flaw was found in Apicurio Registry. The DocumentBuilderAccessor correctly blocks external DTD and schema access but does not disable DOCTYPE declarations or enable FEATURE_SECUR… | ||||
| CVE-2026-12992US | — | — | ||
A flaw was found in Apicurio Registry. The WSDLReaderAccessor creates a wsdl4j WSDLReader without disabling the javax.wsdl.importDocuments feature. When the VALIDITY rule is set to… | ||||
| CVE-2026-12975US | — | — | ||
A flaw was found in Apicurio Registry. The ContentTypeUtil.isParsableXml() method creates a SAXParserFactory without enabling secure processing features or disabling external entit… | ||||
| CVE-2026-44496US | — | — | ||
Axios is a promise based HTTP client for the browser and Node.js. Axios versions before 0.32.0 on the 0.x line and before 1.16.0 on the 1.x line build a regular expression from the… | ||||
| CVE-2026-41240US | medium6.1 | — | ||
DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Versions prior to 3.4.0 have an inconsistency between FORBID_TAGS and FORBID_ATTR handling when fu… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:59360 vom 2026-08-24external
- Red Hat Security Advisory RHSA-2026:59833 vom 2026-09-03external
- Red Hat Security Advisory RHSA-2026:62260 vom 2026-09-02external
- Red Hat Security Advisory RHSA-2026:66488 vom 2026-09-10external
- Red Hat Security Advisory RHSA-2026:66545 vom 2026-09-11external
- Red Hat Security Advisory RHSA-2026:68333 vom 2026-09-16external
- Red Hat Security Advisory RHSA-2026:70267 vom 2026-09-22external
- Red Hat Security Advisory RHSA-2026:74511 vom 2026-10-01external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan