DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Enterprise Linux (goose, environment-modules, tornado): Mehrere Schwachstellen
view advisory published 2026-10-12
Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, beliebigen Code auszuführen oder Denial-of-Service-Zustände herbeizuführen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-103262US | high7.5 | — | ||
Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause denial of service by sending a com… | ||||
| CVE-2026-93599US | — | — | ||
rustls-webpki through 0.103.12 (and 0.104.0-alpha releases before 0.104.0-alpha.7) contains a reachable panic in bit_string_flags() in src/der.rs. The input guard fails to reject a… | ||||
| CVE-2026-63128US | — | — | ||
RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate's stateful Streamable HTTP server in crates/rmcp/src/transport/streamable_http_server/to… | ||||
| CVE-2026-63127US | —OT elevated | — | ||
RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate's OAuth implementation in crates/rmcp/src/transport/auth.rs omits the RFC 9728 resource… | ||||
| CVE-2026-85013US | — | — | ||
A flaw was found in environment-modules. A local attacker can exploit this vulnerability by placing a maliciously named modulefile in a location visible to the victim's `MODULEPATH… | ||||
| CVE-2026-72718US | — | — | ||
goose is general-purpose AI agent that runs on your machine. Prior to 1.44.0, the `goose review` command runs the system `git` executable to gather the diff for review without stri… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2026-84594 vom 2026-10-19external
- Red Hat Security Advisory RHSA-2026:80664 vom 2026-10-12external
- Red Hat Security Advisory RHSA-2026:80764 vom 2026-10-12external
- Red Hat Security Advisory RHSA-2026:80765 vom 2026-10-12external
- Red Hat Security Advisory RHSA-2026:82040 vom 2026-10-12external
- Red Hat Security Advisory RHSA-2026:82041 vom 2026-10-12external
- Red Hat Security Advisory RHSA-2026:82919 vom 2026-10-14external
- Red Hat Security Advisory RHSA-2026:83603 vom 2026-10-15external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan