← All credits
Red Hat would like to thank Aisle Research for reporting this issue.
12 vulnerability records and advisories credit this contributor.
CVE-2026-6893
Dracut: dracut: root code execution via dhcp options command injection
CVE-2026-86469
Glib2: toctou symlink race in `g_file_create_replace_destination` fallback path
CVE-2026-59848
Libssh: libssh: denial of service via sftp responses with unknown request ids
CVE-2026-43961
Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution
CVE-2026-73197
Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read
CVE-2026-59849
Libssh: libssh: denial of service via automatic certificate authentication loop
CVE-2026-59851
Libssh: libssh: authentication bypass via missing gssapi principal check
CVE-2026-14258
Dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length ipv6 nd option in router advertisement handling
CVE-2026-18157
Yggdrasil-worker-package-manager: yggdrasil-worker-package-manager: remote code execution via apt argument injection
CVE-2026-16461
Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting