Vulnerability-Lookup

RHSA-2026:92408

Vulnerability from csaf_redhat - Published: 2026-10-29 17:18 - Updated: 2026-10-30 00:54

Summary

Red Hat Security Advisory: dogtag-pki security update

Severity

Important

Notes

Topic: An update for dogtag-pki is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: IdM PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. IdM PKI consists of the following components: * Certificate Authority (CA) * Key Recovery Authority (KRA) * Online Certificate Status Protocol (OCSP) Manager * Token Key Service (TKS) * Token Processing Service (TPS) * Automatic Certificate Management Environment (ACME) Responder * Enrollment over Secure Transport (EST) Responder Security Fix(es): * resteasy-core: RESTEasy: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS) (CVE-2026-89059) * resteasy-core: RESTEasy: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config (CVE-2026-89058) * com.fasterxml.jackson/jackson-core: tools.jackson.core/jackson-core: Jackson-core: Denial of Service via regular expression backtracking (CVE-2026-89407) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-89058

A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the request's Origin header back in the Access-Control-Allow-Origin response together with Access-Control-Allow-Credentials: true. This permissive cross-origin policy allows a malicious website to make credentialed cross-origin requests and read authenticated responses from a victim's session, resulting in a loss of confidentiality.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

CWE-346 - Origin Validation Error

Affected products

Fixed 20 products

Product	Version	Remediation
Unresolved product id: AppStream-10.2.Z:dogtag-pki-0:11.9.0-6.el10_2.1.src	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:idm-pki-acme-0:11.9.0-6.el10_2.1.noarch	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:idm-pki-base-0:11.9.0-6.el10_2.1.noarch	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:idm-pki-ca-0:11.9.0-6.el10_2.1.noarch	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:idm-pki-java-0:11.9.0-6.el10_2.1.noarch	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:idm-pki-kra-0:11.9.0-6.el10_2.1.noarch	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:idm-pki-server-0:11.9.0-6.el10_2.1.noarch	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-10.2.Z:python3-idm-pki-0:11.9.0-6.el10_2.1.noarch	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2026-89059

A flaw was found in RESTEasy's IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit on the declared image dimensions or pixel count. A remote, unauthenticated attacker can send a small crafted image declaring enormous dimensions to trigger a very large memory allocation, exhausting the JVM heap and resulting in a denial of service.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)

Affected products

Fixed 20 products, the same list as for CVE-2026-89058

Threats

Impact Important

CVE-2026-89407

A flaw was found in jackson-core. An attacker can supply specially crafted JSON that, when deserialized into a numeric target type, triggers a Regular expression Denial of Service (ReDoS) vulnerability. This occurs due to quadratic backtracking in the NumberInput.looksLikeValidNumber() method's PATTERN_FLOAT regular expression. A small number of concurrent requests with a long input string can exhaust a server's request-handling thread pool, leading to a Denial of Service (DoS).

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1333 - Inefficient Regular Expression Complexity

Affected products

Fixed 20 products, the same list as for CVE-2026-89058

Threats

Impact Moderate

References

26 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:92408	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2519756	external
https://bugzilla.redhat.com/show_bug.cgi?id=2519775	external
https://bugzilla.redhat.com/show_bug.cgi?id=2538720	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-89058	self
https://bugzilla.redhat.com/show_bug.cgi?id=2519775	external
https://www.cve.org/CVERecord?id=CVE-2026-89058	external
https://nvd.nist.gov/vuln/detail/CVE-2026-89058	external
https://github.com/resteasy/resteasy/commit/efeb2b7	external
https://github.com/resteasy/resteasy/security/adv…	external
https://access.redhat.com/security/cve/CVE-2026-89059	self
https://bugzilla.redhat.com/show_bug.cgi?id=2519756	external
https://www.cve.org/CVERecord?id=CVE-2026-89059	external
https://nvd.nist.gov/vuln/detail/CVE-2026-89059	external
https://github.com/resteasy/resteasy/commit/7c7e6…	external
https://github.com/resteasy/resteasy/security/adv…	external
https://access.redhat.com/security/cve/CVE-2026-89407	self
https://bugzilla.redhat.com/show_bug.cgi?id=2538720	external
https://www.cve.org/CVERecord?id=CVE-2026-89407	external
https://nvd.nist.gov/vuln/detail/CVE-2026-89407	external
https://github.com/FasterXML/jackson-core/issues/1649	external
https://github.com/FasterXML/jackson-core/pull/1650	external
https://github.com/FasterXML/jackson-core/pull/1701	external
https://github.com/FasterXML/jackson-core/securit…	external

Acknowledgments

PayPal Cyber Security Team Yu Bao

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for dogtag-pki is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "IdM PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments.  IdM PKI consists of the following components: \n  * Certificate Authority (CA)\n  * Key Recovery Authority (KRA)\n  * Online Certificate Status Protocol (OCSP) Manager\n  * Token Key Service (TKS)\n  * Token Processing Service (TPS)\n  * Automatic Certificate Management Environment (ACME) Responder\n  * Enrollment over Secure Transport (EST) Responder\n\nSecurity Fix(es):\n\n* resteasy-core: RESTEasy: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS) (CVE-2026-89059)\n\n* resteasy-core: RESTEasy: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config (CVE-2026-89058)\n\n* com.fasterxml.jackson/jackson-core: tools.jackson.core/jackson-core: Jackson-core: Denial of Service via regular expression backtracking (CVE-2026-89407)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:92408",
        "url": "https://access.redhat.com/errata/RHSA-2026:92408"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2519756",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519756"
      },
      {
        "category": "external",
        "summary": "2519775",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519775"
      },
      {
        "category": "external",
        "summary": "2538720",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2538720"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_92408.json"
      }
    ],
    "title": "Red Hat Security Advisory: dogtag-pki security update",
    "tracking": {
      "current_release_date": "2026-10-30T00:54:11+00:00",
      "generator": {
        "date": "2026-10-30T00:54:11+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.3"
        }
      },
      "id": "RHSA-2026:92408",
      "initial_release_date": "2026-10-29T17:18:26+00:00",
      "revision_history": [
        {
          "date": "2026-10-29T17:18:26+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-29T17:18:26+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-30T00:54:11+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                  "product_id": "AppStream-10.2.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dogtag-pki-0:11.9.0-6.el10_2.1.src",
                "product": {
                  "name": "dogtag-pki-0:11.9.0-6.el10_2.1.src",
                  "product_id": "dogtag-pki-0:11.9.0-6.el10_2.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dogtag-pki@11.9.0-6.el10_2.1?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "idm-pki-acme-0:11.9.0-6.el10_2.1.noarch",
                "product": {
                  "name": "idm-pki-acme-0:11.9.0-6.el10_2.1.noarch",
                  "product_id": "idm-pki-acme-0:11.9.0-6.el10_2.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/idm-pki-acme@11.9.0-6.el10_2.1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "idm-pki-base-0:11.9.0-6.el10_2.1.noarch",
                "product": {
                  "name": "idm-pki-base-0:11.9.0-6.el10_2.1.noarch",
                  "product_id": "idm-pki-base-0:11.9.0-6.el10_2.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/idm-pki-base@11.9.0-6.el10_2.1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "idm-pki-ca-0:11.9.0-6.el10_2.1.noarch",
                "product": {
                  "name": "idm-pki-ca-0:11.9.0-6.el10_2.1.noarch",
                  "product_id": "idm-pki-ca-0:11.9.0-6.el10_2.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/idm-pki-ca@11.9.0-6.el10_2.1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "idm-pki-java-0:11.9.0-6.el10_2.1.noarch",
                "product": {
                  "name": "idm-pki-java-0:11.9.0-6.el10_2.1.noarch",
                  "product_id": "idm-pki-java-0:11.9.0-6.el10_2.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/idm-pki-java@11.9.0-6.el10_2.1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "idm-pki-kra-0:11.9.0-6.el10_2.1.noarch",
                "product": {
                  "name": "idm-pki-kra-0:11.9.0-6.el10_2.1.noarch",
                  "product_id": "idm-pki-kra-0:11.9.0-6.el10_2.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/idm-pki-kra@11.9.0-6.el10_2.1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "idm-pki-server-0:11.9.0-6.el10_2.1.noarch",
                "product": {
                  "name": "idm-pki-server-0:11.9.0-6.el10_2.1.noarch",
                  "product_id": "idm-pki-server-0:11.9.0-6.el10_2.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/idm-pki-server@11.9.0-6.el10_2.1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-idm-pki-0:11.9.0-6.el10_2.1.noarch",
                "product": {
                  "name": "python3-idm-pki-0:11.9.0-6.el10_2.1.noarch",
                  "product_id": "python3-idm-pki-0:11.9.0-6.el10_2.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-idm-pki@11.9.0-6.el10_2.1?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "idm-pki-tools-0:11.9.0-6.el10_2.1.aarch64",
                "product": {
                  "name": "idm-pki-tools-0:11.9.0-6.el10_2.1.aarch64",
                  "product_id": "idm-pki-tools-0:11.9.0-6.el10_2.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/idm-pki-tools@11.9.0-6.el10_2.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.aarch64",
                "product": {
                  "name": "dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.aarch64",
                  "product_id": "dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dogtag-pki-debugsource@11.9.0-6.el10_2.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.aarch64",
                "product": {
                  "name": "idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.aarch64",
                  "product_id": "idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/idm-pki-tools-debuginfo@11.9.0-6.el10_2.1?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "idm-pki-tools-0:11.9.0-6.el10_2.1.ppc64le",
                "product": {
                  "name": "idm-pki-tools-0:11.9.0-6.el10_2.1.ppc64le",
                  "product_id": "idm-pki-tools-0:11.9.0-6.el10_2.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/idm-pki-tools@11.9.0-6.el10_2.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.ppc64le",
                "product": {
                  "name": "dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.ppc64le",
                  "product_id": "dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dogtag-pki-debugsource@11.9.0-6.el10_2.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.ppc64le",
                "product": {
                  "name": "idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.ppc64le",
                  "product_id": "idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/idm-pki-tools-debuginfo@11.9.0-6.el10_2.1?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "idm-pki-tools-0:11.9.0-6.el10_2.1.s390x",
                "product": {
                  "name": "idm-pki-tools-0:11.9.0-6.el10_2.1.s390x",
                  "product_id": "idm-pki-tools-0:11.9.0-6.el10_2.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/idm-pki-tools@11.9.0-6.el10_2.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.s390x",
                "product": {
                  "name": "dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.s390x",
                  "product_id": "dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dogtag-pki-debugsource@11.9.0-6.el10_2.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.s390x",
                "product": {
                  "name": "idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.s390x",
                  "product_id": "idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/idm-pki-tools-debuginfo@11.9.0-6.el10_2.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "idm-pki-tools-0:11.9.0-6.el10_2.1.x86_64",
                "product": {
                  "name": "idm-pki-tools-0:11.9.0-6.el10_2.1.x86_64",
                  "product_id": "idm-pki-tools-0:11.9.0-6.el10_2.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/idm-pki-tools@11.9.0-6.el10_2.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.x86_64",
                "product": {
                  "name": "dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.x86_64",
                  "product_id": "dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dogtag-pki-debugsource@11.9.0-6.el10_2.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.x86_64",
                "product": {
                  "name": "idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.x86_64",
                  "product_id": "idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/idm-pki-tools-debuginfo@11.9.0-6.el10_2.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dogtag-pki-0:11.9.0-6.el10_2.1.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:dogtag-pki-0:11.9.0-6.el10_2.1.src"
        },
        "product_reference": "dogtag-pki-0:11.9.0-6.el10_2.1.src",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.aarch64"
        },
        "product_reference": "dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.ppc64le"
        },
        "product_reference": "dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.s390x"
        },
        "product_reference": "dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.x86_64"
        },
        "product_reference": "dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "idm-pki-acme-0:11.9.0-6.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:idm-pki-acme-0:11.9.0-6.el10_2.1.noarch"
        },
        "product_reference": "idm-pki-acme-0:11.9.0-6.el10_2.1.noarch",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "idm-pki-base-0:11.9.0-6.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:idm-pki-base-0:11.9.0-6.el10_2.1.noarch"
        },
        "product_reference": "idm-pki-base-0:11.9.0-6.el10_2.1.noarch",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "idm-pki-ca-0:11.9.0-6.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:idm-pki-ca-0:11.9.0-6.el10_2.1.noarch"
        },
        "product_reference": "idm-pki-ca-0:11.9.0-6.el10_2.1.noarch",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "idm-pki-java-0:11.9.0-6.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:idm-pki-java-0:11.9.0-6.el10_2.1.noarch"
        },
        "product_reference": "idm-pki-java-0:11.9.0-6.el10_2.1.noarch",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "idm-pki-kra-0:11.9.0-6.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:idm-pki-kra-0:11.9.0-6.el10_2.1.noarch"
        },
        "product_reference": "idm-pki-kra-0:11.9.0-6.el10_2.1.noarch",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "idm-pki-server-0:11.9.0-6.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:idm-pki-server-0:11.9.0-6.el10_2.1.noarch"
        },
        "product_reference": "idm-pki-server-0:11.9.0-6.el10_2.1.noarch",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "idm-pki-tools-0:11.9.0-6.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.aarch64"
        },
        "product_reference": "idm-pki-tools-0:11.9.0-6.el10_2.1.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "idm-pki-tools-0:11.9.0-6.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.ppc64le"
        },
        "product_reference": "idm-pki-tools-0:11.9.0-6.el10_2.1.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "idm-pki-tools-0:11.9.0-6.el10_2.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.s390x"
        },
        "product_reference": "idm-pki-tools-0:11.9.0-6.el10_2.1.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "idm-pki-tools-0:11.9.0-6.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.x86_64"
        },
        "product_reference": "idm-pki-tools-0:11.9.0-6.el10_2.1.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.aarch64"
        },
        "product_reference": "idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.ppc64le"
        },
        "product_reference": "idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.s390x"
        },
        "product_reference": "idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.x86_64"
        },
        "product_reference": "idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-idm-pki-0:11.9.0-6.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:python3-idm-pki-0:11.9.0-6.el10_2.1.noarch"
        },
        "product_reference": "python3-idm-pki-0:11.9.0-6.el10_2.1.noarch",
        "relates_to_product_reference": "AppStream-10.2.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Yu Bao"
          ],
          "organization": "PayPal Cyber Security Team"
        }
      ],
      "cve": "CVE-2026-89058",
      "cwe": {
        "id": "CWE-346",
        "name": "Origin Validation Error"
      },
      "discovery_date": "2026-08-19T17:06:00.368000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2519775"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in RESTEasy\u0027s CorsFilter, which, when configured to allow all origins (\"*\"), reflects the request\u0027s Origin header back in the Access-Control-Allow-Origin response together with Access-Control-Allow-Credentials: true. This permissive cross-origin policy allows a malicious website to make credentialed cross-origin requests and read authenticated responses from a victim\u0027s session, resulting in a loss of confidentiality.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "resteasy-core: RESTEasy: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:dogtag-pki-0:11.9.0-6.el10_2.1.src",
          "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.aarch64",
          "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.ppc64le",
          "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.s390x",
          "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.x86_64",
          "AppStream-10.2.Z:idm-pki-acme-0:11.9.0-6.el10_2.1.noarch",
          "AppStream-10.2.Z:idm-pki-base-0:11.9.0-6.el10_2.1.noarch",
          "AppStream-10.2.Z:idm-pki-ca-0:11.9.0-6.el10_2.1.noarch",
          "AppStream-10.2.Z:idm-pki-java-0:11.9.0-6.el10_2.1.noarch",
          "AppStream-10.2.Z:idm-pki-kra-0:11.9.0-6.el10_2.1.noarch",
          "AppStream-10.2.Z:idm-pki-server-0:11.9.0-6.el10_2.1.noarch",
          "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.aarch64",
          "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.ppc64le",
          "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.s390x",
          "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.x86_64",
          "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.aarch64",
          "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.ppc64le",
          "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.s390x",
          "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.x86_64",
          "AppStream-10.2.Z:python3-idm-pki-0:11.9.0-6.el10_2.1.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-89058"
        },
        {
          "category": "external",
          "summary": "RHBZ#2519775",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519775"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-89058",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-89058"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89058",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89058"
        },
        {
          "category": "external",
          "summary": "https://github.com/resteasy/resteasy/commit/efeb2b7",
          "url": "https://github.com/resteasy/resteasy/commit/efeb2b7"
        },
        {
          "category": "external",
          "summary": "https://github.com/resteasy/resteasy/security/advisories/GHSA-972r-f3fv-whm3",
          "url": "https://github.com/resteasy/resteasy/security/advisories/GHSA-972r-f3fv-whm3"
        }
      ],
      "release_date": "2026-09-17T14:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-29T17:18:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:dogtag-pki-0:11.9.0-6.el10_2.1.src",
            "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.aarch64",
            "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.ppc64le",
            "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.s390x",
            "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.x86_64",
            "AppStream-10.2.Z:idm-pki-acme-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-base-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-ca-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-java-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-kra-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-server-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.aarch64",
            "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.ppc64le",
            "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.s390x",
            "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.x86_64",
            "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.aarch64",
            "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.ppc64le",
            "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.s390x",
            "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.x86_64",
            "AppStream-10.2.Z:python3-idm-pki-0:11.9.0-6.el10_2.1.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:92408"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:dogtag-pki-0:11.9.0-6.el10_2.1.src",
            "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.aarch64",
            "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.ppc64le",
            "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.s390x",
            "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.x86_64",
            "AppStream-10.2.Z:idm-pki-acme-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-base-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-ca-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-java-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-kra-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-server-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.aarch64",
            "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.ppc64le",
            "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.s390x",
            "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.x86_64",
            "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.aarch64",
            "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.ppc64le",
            "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.s390x",
            "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.x86_64",
            "AppStream-10.2.Z:python3-idm-pki-0:11.9.0-6.el10_2.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "resteasy-core: RESTEasy: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Yu Bao"
          ],
          "organization": "PayPal Cyber Security Team"
        }
      ],
      "cve": "CVE-2026-89059",
      "cwe": {
        "id": "CWE-409",
        "name": "Improper Handling of Highly Compressed Data (Data Amplification)"
      },
      "discovery_date": "2026-08-19T16:21:31.345000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2519756"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in RESTEasy\u0027s IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit on the declared image dimensions or pixel count. A remote, unauthenticated attacker can send a small crafted image declaring enormous dimensions to trigger a very large memory allocation, exhausting the JVM heap and resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "resteasy-core: RESTEasy: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:dogtag-pki-0:11.9.0-6.el10_2.1.src",
          "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.aarch64",
          "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.ppc64le",
          "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.s390x",
          "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.x86_64",
          "AppStream-10.2.Z:idm-pki-acme-0:11.9.0-6.el10_2.1.noarch",
          "AppStream-10.2.Z:idm-pki-base-0:11.9.0-6.el10_2.1.noarch",
          "AppStream-10.2.Z:idm-pki-ca-0:11.9.0-6.el10_2.1.noarch",
          "AppStream-10.2.Z:idm-pki-java-0:11.9.0-6.el10_2.1.noarch",
          "AppStream-10.2.Z:idm-pki-kra-0:11.9.0-6.el10_2.1.noarch",
          "AppStream-10.2.Z:idm-pki-server-0:11.9.0-6.el10_2.1.noarch",
          "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.aarch64",
          "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.ppc64le",
          "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.s390x",
          "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.x86_64",
          "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.aarch64",
          "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.ppc64le",
          "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.s390x",
          "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.x86_64",
          "AppStream-10.2.Z:python3-idm-pki-0:11.9.0-6.el10_2.1.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-89059"
        },
        {
          "category": "external",
          "summary": "RHBZ#2519756",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519756"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-89059",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-89059"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89059",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89059"
        },
        {
          "category": "external",
          "summary": "https://github.com/resteasy/resteasy/commit/7c7e6b37c8b2451a37aed9cdc6978b447456bacb",
          "url": "https://github.com/resteasy/resteasy/commit/7c7e6b37c8b2451a37aed9cdc6978b447456bacb"
        },
        {
          "category": "external",
          "summary": "https://github.com/resteasy/resteasy/security/advisories/GHSA-m4pc-7gc7-9vw2",
          "url": "https://github.com/resteasy/resteasy/security/advisories/GHSA-m4pc-7gc7-9vw2"
        }
      ],
      "release_date": "2026-09-17T14:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-29T17:18:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:dogtag-pki-0:11.9.0-6.el10_2.1.src",
            "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.aarch64",
            "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.ppc64le",
            "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.s390x",
            "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.x86_64",
            "AppStream-10.2.Z:idm-pki-acme-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-base-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-ca-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-java-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-kra-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-server-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.aarch64",
            "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.ppc64le",
            "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.s390x",
            "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.x86_64",
            "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.aarch64",
            "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.ppc64le",
            "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.s390x",
            "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.x86_64",
            "AppStream-10.2.Z:python3-idm-pki-0:11.9.0-6.el10_2.1.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:92408"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:dogtag-pki-0:11.9.0-6.el10_2.1.src",
            "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.aarch64",
            "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.ppc64le",
            "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.s390x",
            "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.x86_64",
            "AppStream-10.2.Z:idm-pki-acme-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-base-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-ca-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-java-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-kra-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-server-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.aarch64",
            "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.ppc64le",
            "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.s390x",
            "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.x86_64",
            "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.aarch64",
            "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.ppc64le",
            "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.s390x",
            "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.x86_64",
            "AppStream-10.2.Z:python3-idm-pki-0:11.9.0-6.el10_2.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "resteasy-core: RESTEasy: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS)"
    },
    {
      "cve": "CVE-2026-89407",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2026-09-22T20:07:47.987231+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2538720"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-core. An attacker can supply specially crafted JSON that, when deserialized into a numeric target type, triggers a Regular expression Denial of Service (ReDoS) vulnerability. This occurs due to quadratic backtracking in the NumberInput.looksLikeValidNumber() method\u0027s PATTERN_FLOAT regular expression. A small number of concurrent requests with a long input string can exhaust a server\u0027s request-handling thread pool, leading to a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "com.fasterxml.jackson/jackson-core: tools.jackson.core/jackson-core: Jackson-core: Denial of Service via regular expression backtracking",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Moderate impact because while remote actors can induce CPU starvation to trigger a denial of service, the issue affects availability only without granting unauthorized access or data tampering capabilities. In Red Hat environments, exposure depends on services deserializing untrusted JSON payloads into numeric Java object types where default string coercion occurs. Older releases packaging jackson-core versions prior to 2.17.0 do not include the vulnerable pattern matching logic and are unaffected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:dogtag-pki-0:11.9.0-6.el10_2.1.src",
          "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.aarch64",
          "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.ppc64le",
          "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.s390x",
          "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.x86_64",
          "AppStream-10.2.Z:idm-pki-acme-0:11.9.0-6.el10_2.1.noarch",
          "AppStream-10.2.Z:idm-pki-base-0:11.9.0-6.el10_2.1.noarch",
          "AppStream-10.2.Z:idm-pki-ca-0:11.9.0-6.el10_2.1.noarch",
          "AppStream-10.2.Z:idm-pki-java-0:11.9.0-6.el10_2.1.noarch",
          "AppStream-10.2.Z:idm-pki-kra-0:11.9.0-6.el10_2.1.noarch",
          "AppStream-10.2.Z:idm-pki-server-0:11.9.0-6.el10_2.1.noarch",
          "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.aarch64",
          "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.ppc64le",
          "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.s390x",
          "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.x86_64",
          "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.aarch64",
          "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.ppc64le",
          "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.s390x",
          "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.x86_64",
          "AppStream-10.2.Z:python3-idm-pki-0:11.9.0-6.el10_2.1.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-89407"
        },
        {
          "category": "external",
          "summary": "RHBZ#2538720",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2538720"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-89407",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-89407"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89407",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89407"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-core/issues/1649",
          "url": "https://github.com/FasterXML/jackson-core/issues/1649"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-core/pull/1650",
          "url": "https://github.com/FasterXML/jackson-core/pull/1650"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-core/pull/1701",
          "url": "https://github.com/FasterXML/jackson-core/pull/1701"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-p6pp-m3f8-5c89",
          "url": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-p6pp-m3f8-5c89"
        }
      ],
      "release_date": "2026-09-22T14:53:20.999000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-29T17:18:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:dogtag-pki-0:11.9.0-6.el10_2.1.src",
            "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.aarch64",
            "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.ppc64le",
            "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.s390x",
            "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.x86_64",
            "AppStream-10.2.Z:idm-pki-acme-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-base-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-ca-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-java-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-kra-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-server-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.aarch64",
            "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.ppc64le",
            "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.s390x",
            "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.x86_64",
            "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.aarch64",
            "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.ppc64le",
            "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.s390x",
            "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.x86_64",
            "AppStream-10.2.Z:python3-idm-pki-0:11.9.0-6.el10_2.1.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:92408"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:dogtag-pki-0:11.9.0-6.el10_2.1.src",
            "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.aarch64",
            "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.ppc64le",
            "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.s390x",
            "AppStream-10.2.Z:dogtag-pki-debugsource-0:11.9.0-6.el10_2.1.x86_64",
            "AppStream-10.2.Z:idm-pki-acme-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-base-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-ca-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-java-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-kra-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-server-0:11.9.0-6.el10_2.1.noarch",
            "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.aarch64",
            "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.ppc64le",
            "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.s390x",
            "AppStream-10.2.Z:idm-pki-tools-0:11.9.0-6.el10_2.1.x86_64",
            "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.aarch64",
            "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.ppc64le",
            "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.s390x",
            "AppStream-10.2.Z:idm-pki-tools-debuginfo-0:11.9.0-6.el10_2.1.x86_64",
            "AppStream-10.2.Z:python3-idm-pki-0:11.9.0-6.el10_2.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "com.fasterxml.jackson/jackson-core: tools.jackson.core/jackson-core: Jackson-core: Denial of Service via regular expression backtracking"
    }
  ]
}

CVE-2026-89058 (GCVE-0-2026-89058)

Vulnerability from cvelistv5 – Published: 2026-09-18 07:20 – Updated: 2026-10-29 22:08

Title

Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config

Summary

Severity

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-18 11:59 UTC

CWE

CWE-346 - Origin Validation Error
CWE-942 - Permissive Cross-domain Policy with Untrusted Domains

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1070 records in the last 180 days details

References

8 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:83082	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:83520	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:85234	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:92408	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-89058	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2519775	issue-trackingx_refsource_REDHAT
https://github.com/resteasy/resteasy/commit/efeb2b7
https://github.com/resteasy/resteasy/security/adv…

Impacted products

19 products

Vendor	Product	Version
Red Hat		Affected: 0 , < 6.2.19.Final (maven) Affected: 7.0.0.Alpha1 , < 7.0.5.Final (maven)
Red Hat	Red Hat build of Quarkus 3.27.6.redhat	Unaffected: 6.2.19.Final-redhat-00003 , < * (rpm) cpe:/a:redhat:quarkus:3.27::el8
Red Hat	Red Hat build of Quarkus 3.33.4.redhat	Unaffected: 6.2.19.Final-redhat-00003 , < * (rpm) cpe:/a:redhat:quarkus:3.33::el8
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:11.9.0-6.el10_2.1 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:3.0.26-20.el9_8.1 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat build of Apache Camel 4 for Quarkus 3	cpe:/a:redhat:camel_quarkus:3
Red Hat	Red Hat build of Apicurio Registry 3	cpe:/a:redhat:apicurio_registry:3
Red Hat	Red Hat build of Debezium 3	cpe:/a:redhat:debezium:3
Red Hat	Red Hat Build of Keycloak	cpe:/a:redhat:build_keycloak:
Red Hat	Red Hat Certificate System 10	cpe:/a:redhat:certificate_system:10
Red Hat	Red Hat Certificate System 11	cpe:/a:redhat:certificate_system:11
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Fuse 7	cpe:/a:redhat:jboss_fuse:7
Red Hat	Red Hat JBoss Enterprise Application Platform 7	cpe:/a:redhat:jboss_enterprise_application_platform:7
Red Hat	Red Hat JBoss Enterprise Application Platform 8	cpe:/a:redhat:jboss_enterprise_application_platform:8
Red Hat	Red Hat JBoss Enterprise Application Platform Expansion Pack	cpe:/a:redhat:jbosseapxp
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6
Red Hat	Red Hat Single Sign-On 7	cpe:/a:redhat:red_hat_single_sign_on:7

Date Public

2026-09-17 14:00

Credits

Red Hat would like to thank Yu Bao (PayPal Cyber Security Team) for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-89058",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-18T11:59:37.120915Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-942",
                "description": "CWE-942 Permissive Cross-domain Policy with Untrusted Domains",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-19T13:50:50.959Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/resteasy/resteasy/security/advisories/GHSA-972r-f3fv-whm3"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://github.com/resteasy/resteasy",
          "defaultStatus": "unaffected",
          "packageName": "RESTEasy",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "6.2.19.Final",
              "status": "affected",
              "version": "0",
              "versionType": "maven"
            },
            {
              "lessThan": "7.0.5.Final",
              "status": "affected",
              "version": "7.0.0.Alpha1",
              "versionType": "maven"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
          "cpes": [
            "cpe:/a:redhat:quarkus:3.27::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "org.jboss.resteasy/resteasy-core",
          "product": "Red Hat build of Quarkus 3.27.6.redhat",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "6.2.19.Final-redhat-00003",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
          "cpes": [
            "cpe:/a:redhat:quarkus:3.33::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "org.jboss.resteasy/resteasy-core",
          "product": "Red Hat build of Quarkus 3.33.4.redhat",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "6.2.19.Final-redhat-00003",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.2"
          ],
          "defaultStatus": "affected",
          "packageName": "dogtag-pki",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:11.9.0-6.el10_2.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "resteasy",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.0.26-20.el9_8.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:camel_quarkus:3"
          ],
          "defaultStatus": "affected",
          "packageName": "resteasy-core",
          "product": "Red Hat build of Apache Camel 4 for Quarkus 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:apicurio_registry:3"
          ],
          "defaultStatus": "affected",
          "packageName": "resteasy-core",
          "product": "Red Hat build of Apicurio Registry 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:debezium:3"
          ],
          "defaultStatus": "affected",
          "packageName": "resteasy-core",
          "product": "Red Hat build of Debezium 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:build_keycloak:"
          ],
          "defaultStatus": "affected",
          "packageName": "resteasy-core",
          "product": "Red Hat Build of Keycloak",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:build_keycloak:"
          ],
          "defaultStatus": "affected",
          "packageName": "rhbk/keycloak-rhel9-operator",
          "product": "Red Hat Build of Keycloak",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:certificate_system:10"
          ],
          "defaultStatus": "affected",
          "packageName": "redhat-pki:10/redhat-pki",
          "product": "Red Hat Certificate System 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:certificate_system:11"
          ],
          "defaultStatus": "affected",
          "packageName": "redhat-pki",
          "product": "Red Hat Certificate System 11",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "unaffected",
          "packageName": "pki-core:10.6/pki-core",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "unaffected",
          "packageName": "jackson-jaxrs-providers",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "unaffected",
          "packageName": "pki-core",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:jboss_fuse:7"
          ],
          "defaultStatus": "affected",
          "packageName": "resteasy-core",
          "product": "Red Hat Fuse 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:jboss_fuse:7"
          ],
          "defaultStatus": "affected",
          "packageName": "resteasy-jaxrs",
          "product": "Red Hat Fuse 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
          "cpes": [
            "cpe:/a:redhat:jboss_enterprise_application_platform:7"
          ],
          "defaultStatus": "affected",
          "packageName": "jboss-eap-7/eap74-els-openjdk11-openshift-rhel8",
          "product": "Red Hat JBoss Enterprise Application Platform 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
          "cpes": [
            "cpe:/a:redhat:jboss_enterprise_application_platform:7"
          ],
          "defaultStatus": "affected",
          "packageName": "jboss-eap-7/eap74-els-openjdk17-openshift-rhel8",
          "product": "Red Hat JBoss Enterprise Application Platform 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
          "cpes": [
            "cpe:/a:redhat:jboss_enterprise_application_platform:7"
          ],
          "defaultStatus": "affected",
          "packageName": "jboss-eap-7/eap74-els-openjdk8-openshift-rhel8",
          "product": "Red Hat JBoss Enterprise Application Platform 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
          "cpes": [
            "cpe:/a:redhat:jboss_enterprise_application_platform:7"
          ],
          "defaultStatus": "affected",
          "packageName": "resteasy-jaxrs",
          "product": "Red Hat JBoss Enterprise Application Platform 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
          "cpes": [
            "cpe:/a:redhat:jboss_enterprise_application_platform:8"
          ],
          "defaultStatus": "affected",
          "packageName": "resteasy-core",
          "product": "Red Hat JBoss Enterprise Application Platform 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
          "cpes": [
            "cpe:/a:redhat:jbosseapxp"
          ],
          "defaultStatus": "affected",
          "packageName": "resteasy-core",
          "product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:satellite:6"
          ],
          "defaultStatus": "unaffected",
          "packageName": "candlepin",
          "product": "Red Hat Satellite 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:red_hat_single_sign_on:7"
          ],
          "defaultStatus": "affected",
          "packageName": "resteasy-jaxrs",
          "product": "Red Hat Single Sign-On 7",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Yu Bao (PayPal Cyber Security Team) for reporting this issue."
        }
      ],
      "datePublic": "2026-09-17T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in RESTEasy\u0027s CorsFilter, which, when configured to allow all origins (\"*\"), reflects the request\u0027s Origin header back in the Access-Control-Allow-Origin response together with Access-Control-Allow-Credentials: true. This permissive cross-origin policy allows a malicious website to make credentialed cross-origin requests and read authenticated responses from a victim\u0027s session, resulting in a loss of confidentiality."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-346",
              "description": "Origin Validation Error",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-29T22:08:45.938Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:83082",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:83082"
        },
        {
          "name": "RHSA-2026:83520",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:83520"
        },
        {
          "name": "RHSA-2026:85234",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:85234"
        },
        {
          "name": "RHSA-2026:92408",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:92408"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-89058"
        },
        {
          "name": "RHBZ#2519775",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519775"
        },
        {
          "url": "https://github.com/resteasy/resteasy/commit/efeb2b7"
        },
        {
          "url": "https://github.com/resteasy/resteasy/security/advisories/GHSA-972r-f3fv-whm3"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-19T17:06:00.368Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-09-17T14:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-346: Origin Validation Error"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-89058",
    "datePublished": "2026-09-18T07:20:29.162Z",
    "dateReserved": "2026-09-10T18:20:52.114Z",
    "dateUpdated": "2026-10-29T22:08:45.938Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-89059 (GCVE-0-2026-89059)

Vulnerability from cvelistv5 – Published: 2026-09-18 07:13 – Updated: 2026-10-29 19:44

Title

Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)

Summary

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-18 15:13 UTC

CWE

CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1070 records in the last 180 days details

References

8 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:83082	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:83520	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:85234	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:92408	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-89059	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2519756	issue-trackingx_refsource_REDHAT
https://github.com/resteasy/resteasy/commit/7c7e6…
https://github.com/resteasy/resteasy/security/adv…

Impacted products

19 products

Vendor	Product	Version
Red Hat		Affected: 0 , < 6.2.19.Final (maven) Affected: 7.0.0.Alpha1 , < 7.0.5.Final (maven)
Red Hat	Red Hat build of Quarkus 3.27.6.redhat	Unaffected: 6.2.19.Final-redhat-00003 , < * (rpm) cpe:/a:redhat:quarkus:3.27::el8
Red Hat	Red Hat build of Quarkus 3.33.4.redhat	Unaffected: 6.2.19.Final-redhat-00003 , < * (rpm) cpe:/a:redhat:quarkus:3.33::el8
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:11.9.0-6.el10_2.1 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:3.0.26-20.el9_8.1 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat build of Apache Camel 4 for Quarkus 3	cpe:/a:redhat:camel_quarkus:3
Red Hat	Red Hat build of Apicurio Registry 3	cpe:/a:redhat:apicurio_registry:3
Red Hat	Red Hat build of Debezium 3	cpe:/a:redhat:debezium:3
Red Hat	Red Hat Build of Keycloak	cpe:/a:redhat:build_keycloak:
Red Hat	Red Hat Certificate System 10	cpe:/a:redhat:certificate_system:10
Red Hat	Red Hat Certificate System 11	cpe:/a:redhat:certificate_system:11
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Fuse 7	cpe:/a:redhat:jboss_fuse:7
Red Hat	Red Hat JBoss Enterprise Application Platform 7	cpe:/a:redhat:jboss_enterprise_application_platform:7
Red Hat	Red Hat JBoss Enterprise Application Platform 8	cpe:/a:redhat:jboss_enterprise_application_platform:8
Red Hat	Red Hat JBoss Enterprise Application Platform Expansion Pack	cpe:/a:redhat:jbosseapxp
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6
Red Hat	Red Hat Single Sign-On 7	cpe:/a:redhat:red_hat_single_sign_on:7

Date Public

2026-09-17 14:00

Credits

Red Hat would like to thank Yu Bao (PayPal Cyber Security Team) for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-89059",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-18T15:13:24.737882Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-18T15:13:38.045Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519756"
          },
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/resteasy/resteasy/security/advisories/GHSA-m4pc-7gc7-9vw2"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://github.com/resteasy/resteasy",
          "defaultStatus": "unaffected",
          "packageName": "RESTEasy",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "6.2.19.Final",
              "status": "affected",
              "version": "0",
              "versionType": "maven"
            },
            {
              "lessThan": "7.0.5.Final",
              "status": "affected",
              "version": "7.0.0.Alpha1",
              "versionType": "maven"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
          "cpes": [
            "cpe:/a:redhat:quarkus:3.27::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "org.jboss.resteasy/resteasy-core",
          "product": "Red Hat build of Quarkus 3.27.6.redhat",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "6.2.19.Final-redhat-00003",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
          "cpes": [
            "cpe:/a:redhat:quarkus:3.33::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "org.jboss.resteasy/resteasy-core",
          "product": "Red Hat build of Quarkus 3.33.4.redhat",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "6.2.19.Final-redhat-00003",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.2"
          ],
          "defaultStatus": "affected",
          "packageName": "dogtag-pki",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:11.9.0-6.el10_2.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "resteasy",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.0.26-20.el9_8.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:camel_quarkus:3"
          ],
          "defaultStatus": "affected",
          "packageName": "resteasy-core",
          "product": "Red Hat build of Apache Camel 4 for Quarkus 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:apicurio_registry:3"
          ],
          "defaultStatus": "affected",
          "packageName": "resteasy-core",
          "product": "Red Hat build of Apicurio Registry 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:debezium:3"
          ],
          "defaultStatus": "affected",
          "packageName": "resteasy-core",
          "product": "Red Hat build of Debezium 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:build_keycloak:"
          ],
          "defaultStatus": "affected",
          "packageName": "resteasy-core",
          "product": "Red Hat Build of Keycloak",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:build_keycloak:"
          ],
          "defaultStatus": "affected",
          "packageName": "rhbk/keycloak-rhel9-operator",
          "product": "Red Hat Build of Keycloak",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:certificate_system:10"
          ],
          "defaultStatus": "affected",
          "packageName": "redhat-pki:10/redhat-pki",
          "product": "Red Hat Certificate System 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:certificate_system:11"
          ],
          "defaultStatus": "affected",
          "packageName": "redhat-pki",
          "product": "Red Hat Certificate System 11",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "unaffected",
          "packageName": "pki-core:10.6/pki-core",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "unaffected",
          "packageName": "jackson-jaxrs-providers",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "unaffected",
          "packageName": "pki-core",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:jboss_fuse:7"
          ],
          "defaultStatus": "affected",
          "packageName": "resteasy-core",
          "product": "Red Hat Fuse 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:jboss_fuse:7"
          ],
          "defaultStatus": "affected",
          "packageName": "resteasy-jaxrs",
          "product": "Red Hat Fuse 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
          "cpes": [
            "cpe:/a:redhat:jboss_enterprise_application_platform:7"
          ],
          "defaultStatus": "affected",
          "packageName": "jboss-eap-7/eap74-els-openjdk11-openshift-rhel8",
          "product": "Red Hat JBoss Enterprise Application Platform 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
          "cpes": [
            "cpe:/a:redhat:jboss_enterprise_application_platform:7"
          ],
          "defaultStatus": "affected",
          "packageName": "jboss-eap-7/eap74-els-openjdk17-openshift-rhel8",
          "product": "Red Hat JBoss Enterprise Application Platform 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
          "cpes": [
            "cpe:/a:redhat:jboss_enterprise_application_platform:7"
          ],
          "defaultStatus": "affected",
          "packageName": "jboss-eap-7/eap74-els-openjdk8-openshift-rhel8",
          "product": "Red Hat JBoss Enterprise Application Platform 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
          "cpes": [
            "cpe:/a:redhat:jboss_enterprise_application_platform:7"
          ],
          "defaultStatus": "affected",
          "packageName": "resteasy-jaxrs",
          "product": "Red Hat JBoss Enterprise Application Platform 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
          "cpes": [
            "cpe:/a:redhat:jboss_enterprise_application_platform:8"
          ],
          "defaultStatus": "affected",
          "packageName": "resteasy-core",
          "product": "Red Hat JBoss Enterprise Application Platform 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
          "cpes": [
            "cpe:/a:redhat:jbosseapxp"
          ],
          "defaultStatus": "affected",
          "packageName": "resteasy-core",
          "product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:satellite:6"
          ],
          "defaultStatus": "unaffected",
          "packageName": "candlepin",
          "product": "Red Hat Satellite 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:red_hat_single_sign_on:7"
          ],
          "defaultStatus": "affected",
          "packageName": "resteasy-jaxrs",
          "product": "Red Hat Single Sign-On 7",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Yu Bao (PayPal Cyber Security Team) for reporting this issue."
        }
      ],
      "datePublic": "2026-09-17T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in RESTEasy\u0027s IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit on the declared image dimensions or pixel count. A remote, unauthenticated attacker can send a small crafted image declaring enormous dimensions to trigger a very large memory allocation, exhausting the JVM heap and resulting in a denial of service."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-409",
              "description": "Improper Handling of Highly Compressed Data (Data Amplification)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-29T19:44:23.173Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:83082",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:83082"
        },
        {
          "name": "RHSA-2026:83520",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:83520"
        },
        {
          "name": "RHSA-2026:85234",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:85234"
        },
        {
          "name": "RHSA-2026:92408",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:92408"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-89059"
        },
        {
          "name": "RHBZ#2519756",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519756"
        },
        {
          "url": "https://github.com/resteasy/resteasy/commit/7c7e6b37c8b2451a37aed9cdc6978b447456bacb"
        },
        {
          "url": "https://github.com/resteasy/resteasy/security/advisories/GHSA-m4pc-7gc7-9vw2"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-19T16:21:31.345Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-09-17T14:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-409: Improper Handling of Highly Compressed Data (Data Amplification)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-89059",
    "datePublished": "2026-09-18T07:13:39.763Z",
    "dateReserved": "2026-09-10T18:20:52.115Z",
    "dateUpdated": "2026-10-29T19:44:23.173Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-89407 (GCVE-0-2026-89407)

Vulnerability from cvelistv5 – Published: 2026-09-22 14:53 – Updated: 2026-09-22 15:52

Title

jackson-core: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber() enables ReDoS

Summary

NumberInput.looksLikeValidNumber() in FasterXML jackson-core pre-validates "stringified numbers" with two regular expressions: PATTERN_FLOAT ([+-]?[0-9]*[\.]?[0-9]+([eE][+-]?[0-9]+)?), present since 2.17.0, and PATTERN_FLOAT_TRAILING_DOT, added in 2.17.2. PATTERN_FLOAT places adjacent quantifiers over the same character class -- an optional [0-9]* run, an optional dot, then a required [0-9]+ run -- so input that ultimately fails to match forces Java's backtracking engine to retry every possible split point of the digit run. Matching cost therefore grows with the square of the input length. An attacker who can supply JSON that an application deserializes into a numeric target type reaches this method through jackson-databind's default String-to-number coercion (StdDeserializer and NumberDeserializers for BigDecimal, BigInteger, Double and Float). Because StreamReadConstraints.maxStringLength defaults to 20,000,000 characters, no constraint bounds the input before it reaches the regex. Testing by the reporter confirmed O(n^2) growth across five consecutive input-size doublings, with a single 160,000-character string consuming roughly 74 seconds in one call; a small number of concurrent requests of ordinary body size can therefore exhaust a server's request-handling thread pool. The affected method does not exist before 2.17.0, so 2.16.x and earlier releases are not affected. The fix replaces both regular expressions with a hand-rolled single-pass scan.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-22 15:52 UTC

CWE

CWE-1333 - Inefficient Regular Expression Complexity
CWE-400 - Uncontrolled Resource Consumption

Assigner

HeroDevs CNA under the mitre root

CNA scorecard B 82/100 over 17 records in the last 180 days details

References

4 references

URL	Tags
https://github.com/FasterXML/jackson-core/securit…	vendor-advisory
https://github.com/FasterXML/jackson-core/issues/1649	issue-tracking
https://github.com/FasterXML/jackson-core/pull/1650	patch
https://github.com/FasterXML/jackson-core/pull/1701	patch

Impacted products

2 products

Vendor	Product	Version
FasterXML	jackson-core	Affected: 2.17.0 , ≤ 2.18.10 (maven) Affected: 2.19.0 , ≤ 2.21.6 (maven) Affected: 2.22.0 , ≤ 2.22.2 (maven)
FasterXML	jackson-core	Affected: 3.0.0 , ≤ 3.1.6 (maven) Affected: 3.2.0 , ≤ 3.2.1 (maven)

Credits

manqingzhou

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-89407",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-22T15:52:15.349840Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-22T15:52:44.881Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-p6pp-m3f8-5c89"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://repo1.maven.org/maven2",
          "defaultStatus": "unaffected",
          "packageName": "com.fasterxml.jackson.core:jackson-core",
          "product": "jackson-core",
          "programRoutines": [
            {
              "name": "com.fasterxml.jackson.core.io.NumberInput.looksLikeValidNumber"
            }
          ],
          "repo": "https://github.com/FasterXML/jackson-core",
          "vendor": "FasterXML",
          "versions": [
            {
              "lessThanOrEqual": "2.18.10",
              "status": "affected",
              "version": "2.17.0",
              "versionType": "maven"
            },
            {
              "lessThanOrEqual": "2.21.6",
              "status": "affected",
              "version": "2.19.0",
              "versionType": "maven"
            },
            {
              "lessThanOrEqual": "2.22.2",
              "status": "affected",
              "version": "2.22.0",
              "versionType": "maven"
            }
          ]
        },
        {
          "collectionURL": "https://repo1.maven.org/maven2",
          "defaultStatus": "unaffected",
          "packageName": "tools.jackson.core:jackson-core",
          "product": "jackson-core",
          "programRoutines": [
            {
              "name": "tools.jackson.core.io.NumberInput.looksLikeValidNumber"
            }
          ],
          "repo": "https://github.com/FasterXML/jackson-core",
          "vendor": "FasterXML",
          "versions": [
            {
              "lessThanOrEqual": "3.1.6",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "maven"
            },
            {
              "lessThanOrEqual": "3.2.1",
              "status": "affected",
              "version": "3.2.0",
              "versionType": "maven"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "manqingzhou"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNumberInput.looksLikeValidNumber() in FasterXML jackson-core pre-validates \"stringified numbers\" with two regular expressions: PATTERN_FLOAT ([+-]?[0-9]*[\\.]?[0-9]+([eE][+-]?[0-9]+)?), present since 2.17.0, and PATTERN_FLOAT_TRAILING_DOT, added in 2.17.2. PATTERN_FLOAT places adjacent quantifiers over the same character class -- an optional [0-9]* run, an optional dot, then a required [0-9]+ run -- so input that ultimately fails to match forces Java\u0027s backtracking engine to retry every possible split point of the digit run.\u0026nbsp;\u003c/p\u003e\u003cp\u003eMatching cost therefore grows with the square of the input length.\u0026nbsp;\u003c/p\u003e\u003cp\u003eAn attacker who can supply JSON that an application deserializes into a numeric target type reaches this method through jackson-databind\u0027s default String-to-number coercion (StdDeserializer and NumberDeserializers for BigDecimal, BigInteger, Double and Float).\u0026nbsp;\u003c/p\u003e\u003cp\u003eBecause StreamReadConstraints.maxStringLength defaults to 20,000,000 characters, no constraint bounds the input before it reaches the regex.\u0026nbsp;\u003c/p\u003e\u003cp\u003eTesting by the reporter confirmed O(n^2) growth across five consecutive input-size doublings, with a single 160,000-character string consuming roughly 74 seconds in one call; a small number of concurrent requests of ordinary body size can therefore exhaust a server\u0027s request-handling thread pool.\u0026nbsp;\u003c/p\u003e\u003cp\u003eThe affected method does not exist before 2.17.0, so 2.16.x and earlier releases are not affected.\u0026nbsp;\u003c/p\u003e\u003cp\u003eThe fix replaces both regular expressions with a hand-rolled single-pass scan.\u003c/p\u003e"
            }
          ],
          "value": "NumberInput.looksLikeValidNumber() in FasterXML jackson-core pre-validates \"stringified numbers\" with two regular expressions: PATTERN_FLOAT ([+-]?[0-9]*[\\.]?[0-9]+([eE][+-]?[0-9]+)?), present since 2.17.0, and PATTERN_FLOAT_TRAILING_DOT, added in 2.17.2. PATTERN_FLOAT places adjacent quantifiers over the same character class -- an optional [0-9]* run, an optional dot, then a required [0-9]+ run -- so input that ultimately fails to match forces Java\u0027s backtracking engine to retry every possible split point of the digit run.\u00a0\n\n\n\nMatching cost therefore grows with the square of the input length.\u00a0\n\n\n\nAn attacker who can supply JSON that an application deserializes into a numeric target type reaches this method through jackson-databind\u0027s default String-to-number coercion (StdDeserializer and NumberDeserializers for BigDecimal, BigInteger, Double and Float).\u00a0\n\n\n\nBecause StreamReadConstraints.maxStringLength defaults to 20,000,000 characters, no constraint bounds the input before it reaches the regex.\u00a0\n\n\n\nTesting by the reporter confirmed O(n^2) growth across five consecutive input-size doublings, with a single 160,000-character string consuming roughly 74 seconds in one call; a small number of concurrent requests of ordinary body size can therefore exhaust a server\u0027s request-handling thread pool.\u00a0\n\n\n\nThe affected method does not exist before 2.17.0, so 2.16.x and earlier releases are not affected.\u00a0\n\n\n\nThe fix replaces both regular expressions with a hand-rolled single-pass scan."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1333",
              "description": "CWE-1333 Inefficient Regular Expression Complexity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400 Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-22T14:53:20.999Z",
        "orgId": "36c7be3b-2937-45df-85ea-ca7133ea542c",
        "shortName": "HeroDevs"
      },
      "references": [
        {
          "name": "GHSA-p6pp-m3f8-5c89",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-p6pp-m3f8-5c89"
        },
        {
          "name": "FasterXML/jackson-core#1649",
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/FasterXML/jackson-core/issues/1649"
        },
        {
          "name": "FasterXML/jackson-core#1650",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/FasterXML/jackson-core/pull/1650"
        },
        {
          "name": "FasterXML/jackson-core#1701 (2.18 backport)",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/FasterXML/jackson-core/pull/1701"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eUpgrade to com.fasterxml.jackson.core:jackson-core 2.18.11, 2.21.7 or 2.22.3, or to tools.jackson.core:jackson-core 3.1.7 or 3.2.2. The 2.17.x, 2.19.x, 2.20.x and 3.0.x lines received no fix on their own branch and are no longer maintained upstream; consumers of those lines must move forward to a maintained release.\u003c/p\u003e"
            }
          ],
          "value": "Upgrade to com.fasterxml.jackson.core:jackson-core 2.18.11, 2.21.7 or 2.22.3, or to tools.jackson.core:jackson-core 3.1.7 or 3.2.2. The 2.17.x, 2.19.x, 2.20.x and 3.0.x lines received no fix on their own branch and are no longer maintained upstream; consumers of those lines must move forward to a maintained release."
        }
      ],
      "title": "jackson-core: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber() enables ReDoS",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eUntil upgrading, lower StreamReadConstraints.maxStringLength well below its default of 20,000,000 characters so that oversized string tokens are rejected before number coercion, and apply wall-clock timeouts to parse and coercion operations. Because matching cost is quadratic in token length, a tight length bound substantially reduces worst-case cost. These are mitigations, not a complete fix.\u003c/p\u003e"
            }
          ],
          "value": "Until upgrading, lower StreamReadConstraints.maxStringLength well below its default of 20,000,000 characters so that oversized string tokens are rejected before number coercion, and apply wall-clock timeouts to parse and coercion operations. Because matching cost is quadratic in token length, a tight length bound substantially reduces worst-case cost. These are mitigations, not a complete fix."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "36c7be3b-2937-45df-85ea-ca7133ea542c",
    "assignerShortName": "HeroDevs",
    "cveId": "CVE-2026-89407",
    "datePublished": "2026-09-22T14:53:20.999Z",
    "dateReserved": "2026-09-11T16:07:58.141Z",
    "dateUpdated": "2026-09-22T15:52:44.881Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:92408

CVE-2026-89058 (GCVE-0-2026-89058)

CVE-2026-89059 (GCVE-0-2026-89059)

CVE-2026-89407 (GCVE-0-2026-89407)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour