← All credits
Red Hat would like to thank Jeon Woochang for reporting this issue.
2 vulnerability records and advisories credit this contributor.
CVE-2026-87872
Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure
CVE-2026-87874
Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution on the ansible controller