CVE-2026-41603

highrejectedpriority · track · 0DEEUFRUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

— EPSS

CVSS 7.4 · high

Is it mine?

17 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · cert_bund · osv

Rejected reason: This CVE ID is Rejected and will not be used. The record incorrectly described the affected language binding and fixed version. Use CVE-2026-66053, which was assigned to the vulnerability.

cvss

Technical severity, 0–10. One row per scoring source.

7.4

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.17.4highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Nsecondary · ENISA EU

weaknesses

The CWE weakness classes this flaw belongs to.

No weakness (CWE) mapping recorded.

affected products (17)

Products and version ranges known to be affected.

Fedora Linuxall versionscert_bundDEcpe:/o:fedoraproject:fedora:-
IBM App Connect Enterpriseall versionscert_bundDEcpe:/a:ibm:app_connect_enterprise:-
IBM Cognos Analytics <12.0.4 FP3all versionscert_bundDE
IBM Cognos Analytics <12.1.3 FP2all versionscert_bundDE
IBM InfoSphere Information Serverall versionscert_bundDEcpe:/a:ibm:infosphere_information_server:-
IBM Integration Busall versionscert_bundDEcpe:/a:ibm:integration_bus:for_zos
Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
Red Hat Enterprise Linux Multicluster Global Hub <1.5.4all versionscert_bundDE
Red Hat OpenShift Tempo <3.9.3all versionscert_bundDE
SUSE openSUSEall versionscert_bundDEcpe:/o:suse:opensuse:-
Ubuntu Linuxall versionscert_bundDEcpe:/o:canonical:ubuntu_linux:-
IBM Cognos Analytics< 12.0.4 FP3cert_bundDE
IBM Cognos Analytics< 12.1.3 FP2cert_bundDE
IBM QRadar SIEM< 7.5.0 UP15 IF06cert_bundDE
Red Hat Enterprise Linux≤ Multicluster Global Hub <1.5.4cert_bundDE
Red Hat OpenShift≤ Tempo <3.9.3cert_bundDE
Bitnami thrift< 0.23.0osvUSpkg:bitnami/thrift

advisories (5)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2026-1415Red Hat OpenShift Tempo (Apache Thrift): Mehrere SchwachstellenDeutsch2026-05-07csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Tempo ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder einen Denial-of-Service-Zustand zu verursachen.
WID-SEC-W-2026-3043IBM QRadar SIEM: Mehrere SchwachstellenDeutsch2026-08-26csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen und um beliebigen Programmcode auszuführen.
BIT-thrift-2026-41603Apache Thrift: Java TSSLTransportFactory hostname verification2026-04-29vendor · osvUS
Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.
CERTFR-2026-AVI-1336Multiples vulnérabilités dans les produits IBMFrançais2026-10-16vendor · certfrFR
CERTFR-2026-AVI-1378Multiples vulnérabilités dans les produits IBMFrançais2026-10-23vendor · certfrFR

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cert_bund osv certfr NVD CVE.org

published 2026-04-28modified 2026-07-27

references (2) cnnvd

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan