RHSA-2026:92566
Vulnerability from csaf_redhat - Published: 2026-10-29 16:25 - Updated: 2026-10-31 20:17Summary
Red Hat Security Advisory: General availability of the satellite/iop-host-inventory-rhel9 container image
Severity
Critical
Notes
Topic: A new satellite/iop-host-inventory-rhel9 container image is now generally available in the Red Hat container registry.
Details: Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services, and configuration settings. When you install Red Hat Lightspeed in Satellite locally, you can generate Red Hat Lightspeed recommendations without sending system data to Red Hat services.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in AnyIO. A remote attacker in a privileged network position can bypass Transport Layer Security (TLS) certificate validation when connecting to internationalized domain names. This vulnerability occurs because the framework converts internationalized hostnames using an outdated encoding standard, Internationalizing Domain Names in Applications (IDNA) 2003 instead of IDNA 2008. If network traffic is redirected or intercepted, an attacker can present a legitimate certificate for the mismatched domain name, allowing them to impersonate the intended server and intercept or alter sensitive communications.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-host-inventory-rhel9@sha256:58c96c24ca4f009e461a265b65aecefbc1abcbb6f6e85b12006edb81a8c7efa8_amd64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in OpenSSL. The Datagram Transport Layer Security (DTLS) retransmission mechanism fails to properly handle handshake message writes that are suspended before completion. A remote attacker could exploit this vulnerability during handshake message retransmission, causing OpenSSL to read past the message buffer or overwrite internal state required to resume writing. This issue can result in information disclosure through out-of-bounds memory reads or cause a Denial of Service (DoS) by crashing the process.
7.4 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-63374
Threats
Impact
Important
A flaw was found in rustls-webpki. A remote attacker, by influencing an application to parse a specially crafted Certificate Revocation List (CRL) that contains an empty `onlySomeReasons` value in its `issuingDistributionPoint` extension, could trigger a panic. This vulnerability leads to a denial of service (DoS) in applications that explicitly enable CRL revocation checking.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-63374
Threats
Impact
Important
A flaw was found in PyJWT. When retrieving cryptographic keys from a JSON Web Key Set (JWKS) endpoint, PyJWKClient fails to validate HTTP redirect destinations against trusted domain boundaries. A remote attacker who can influence the response of a trusted endpoint can redirect key requests to an untrusted server, allowing the client to accept forged verification keys or potentially exposing sensitive credentials.
7.4 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-63374
Threats
Impact
Important
A flaw was found in PyJWT. When an application allows both symmetric and asymmetric signing algorithms, minor formatting variations in a public key can prevent the library from properly identifying it as an asymmetric key. Consequently, the library improperly treats the public key as a shared secret key, allowing a remote attacker to forge valid authentication tokens and bypass security controls.
9.1 (Critical)
Affected products
Fixed
1 product, the same list as for
CVE-2026-63374
Threats
Impact
Critical
References
44 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new satellite/iop-host-inventory-rhel9 container image is now generally available in the Red Hat container registry.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services, and configuration settings. When you install Red Hat Lightspeed in Satellite locally, you can generate Red Hat Lightspeed recommendations without sending system data to Red Hat services. ",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:92566",
"url": "https://access.redhat.com/errata/RHSA-2026:92566"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102267",
"url": "https://access.redhat.com/security/cve/CVE-2026-102267"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102268",
"url": "https://access.redhat.com/security/cve/CVE-2026-102268"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-63374",
"url": "https://access.redhat.com/security/cve/CVE-2026-63374"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84782",
"url": "https://access.redhat.com/security/cve/CVE-2026-84782"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-93599",
"url": "https://access.redhat.com/security/cve/CVE-2026-93599"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://catalog.redhat.com/software/containers/search",
"url": "https://catalog.redhat.com/software/containers/search"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/installing_satellite_server_in_a_connected_network_environment/performing-additional-configuration-on-server_satellite#installing-and-configuring-red-hat-lightspeed-in-satellite",
"url": "https://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/installing_satellite_server_in_a_connected_network_environment/performing-additional-configuration-on-server_satellite#installing-and-configuring-red-hat-lightspeed-in-satellite"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/installing_satellite_server_in_a_disconnected_network_environment/performing-additional-configuration#installing-and-configuring-red-hat-lightspeed-in-satellite",
"url": "https://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/installing_satellite_server_in_a_disconnected_network_environment/performing-additional-configuration#installing-and-configuring-red-hat-lightspeed-in-satellite"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_92566.json"
}
],
"title": "Red Hat Security Advisory: General availability of the satellite/iop-host-inventory-rhel9 container image",
"tracking": {
"current_release_date": "2026-10-31T20:17:20+00:00",
"generator": {
"date": "2026-10-31T20:17:20+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.4"
}
},
"id": "RHSA-2026:92566",
"initial_release_date": "2026-10-29T16:25:29+00:00",
"revision_history": [
{
"date": "2026-10-29T16:25:29+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-29T16:25:33+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-31T20:17:20+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 6.19",
"product": {
"name": "Red Hat Satellite 6.19",
"product_id": "Red Hat Satellite 6.19",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite:6.19::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/satellite/iop-host-inventory-rhel9@sha256:58c96c24ca4f009e461a265b65aecefbc1abcbb6f6e85b12006edb81a8c7efa8_amd64",
"product": {
"name": "registry.redhat.io/satellite/iop-host-inventory-rhel9@sha256:58c96c24ca4f009e461a265b65aecefbc1abcbb6f6e85b12006edb81a8c7efa8_amd64",
"product_id": "registry.redhat.io/satellite/iop-host-inventory-rhel9@sha256:58c96c24ca4f009e461a265b65aecefbc1abcbb6f6e85b12006edb81a8c7efa8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/iop-host-inventory-rhel9@sha256%3A58c96c24ca4f009e461a265b65aecefbc1abcbb6f6e85b12006edb81a8c7efa8?arch=amd64\u0026repository_url=registry.redhat.io/satellite/iop-host-inventory-rhel9\u0026tag=1793248689"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/satellite/iop-host-inventory-rhel9@sha256:58c96c24ca4f009e461a265b65aecefbc1abcbb6f6e85b12006edb81a8c7efa8_amd64 as a component of Red Hat Satellite 6.19",
"product_id": "Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-host-inventory-rhel9@sha256:58c96c24ca4f009e461a265b65aecefbc1abcbb6f6e85b12006edb81a8c7efa8_amd64"
},
"product_reference": "registry.redhat.io/satellite/iop-host-inventory-rhel9@sha256:58c96c24ca4f009e461a265b65aecefbc1abcbb6f6e85b12006edb81a8c7efa8_amd64",
"relates_to_product_reference": "Red Hat Satellite 6.19"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-63374",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-09-22T21:49:20.725016+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2538958"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in AnyIO. A remote attacker in a privileged network position can bypass Transport Layer Security (TLS) certificate validation when connecting to internationalized domain names. This vulnerability occurs because the framework converts internationalized hostnames using an outdated encoding standard, Internationalizing Domain Names in Applications (IDNA) 2003 instead of IDNA 2008. If network traffic is redirected or intercepted, an attacker can present a legitimate certificate for the mismatched domain name, allowing them to impersonate the intended server and intercept or alter sensitive communications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "anyio: AnyIO: TLS certificate spoofing via improper internationalized domain name encoding",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as having a Moderate severity for Red Hat products because exploitation requires an attacker to already be positioned to intercept network traffic, and the flaw only manifests when connecting to internationalized domain names containing non-ASCII characters. Within Red Hat supported environments and containerized AI components, workloads predominantly communicate using standard ASCII fully qualified domain names and internal endpoints. Because the defect does not allow remote code execution and requires a prior man-in-the-middle condition, the overall blast radius is constrained to specific redirected sessions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-host-inventory-rhel9@sha256:58c96c24ca4f009e461a265b65aecefbc1abcbb6f6e85b12006edb81a8c7efa8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-63374"
},
{
"category": "external",
"summary": "RHBZ#2538958",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2538958"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-63374",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-63374"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63374",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63374"
},
{
"category": "external",
"summary": "https://github.com/agronholm/anyio/commit/68f58915f82d9be8109ebbbd8f5d70577d43f2ce",
"url": "https://github.com/agronholm/anyio/commit/68f58915f82d9be8109ebbbd8f5d70577d43f2ce"
},
{
"category": "external",
"summary": "https://github.com/agronholm/anyio/pull/1208",
"url": "https://github.com/agronholm/anyio/pull/1208"
},
{
"category": "external",
"summary": "https://github.com/agronholm/anyio/releases/tag/4.14.2",
"url": "https://github.com/agronholm/anyio/releases/tag/4.14.2"
},
{
"category": "external",
"summary": "https://github.com/agronholm/anyio/security/advisories/GHSA-82r6-8w77-94w6",
"url": "https://github.com/agronholm/anyio/security/advisories/GHSA-82r6-8w77-94w6"
}
],
"release_date": "2026-09-22T15:23:14.259000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-29T16:25:29+00:00",
"details": "For Red Hat Lightspeed in Satellite installation see the Red Hat Satellite documentation.",
"product_ids": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-host-inventory-rhel9@sha256:58c96c24ca4f009e461a265b65aecefbc1abcbb6f6e85b12006edb81a8c7efa8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:92566"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-host-inventory-rhel9@sha256:58c96c24ca4f009e461a265b65aecefbc1abcbb6f6e85b12006edb81a8c7efa8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "anyio: AnyIO: TLS certificate spoofing via improper internationalized domain name encoding"
},
{
"cve": "CVE-2026-84782",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-09-18T19:58:21.939000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2537080"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. The Datagram Transport Layer Security (DTLS) retransmission mechanism fails to properly handle handshake message writes that are suspended before completion. A remote attacker could exploit this vulnerability during handshake message retransmission, causing OpenSSL to read past the message buffer or overwrite internal state required to resume writing. This issue can result in information disclosure through out-of-bounds memory reads or cause a Denial of Service (DoS) by crashing the process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity because an unauthenticated network adversary can trigger process crashes or memory exposure without requiring local system privileges. Red Hat Enterprise Linux utilizes OpenSSL as the fundamental cryptographic provider across the operating system; however, overall exposure is limited because the flaw strictly affects software using Datagram Transport Layer Security (DTLS) over UDP under non-blocking I/O configurations. Standard TLS connections over TCP, which represent the typical deployment model for the majority of Red Hat workloads and system services, are unaffected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-host-inventory-rhel9@sha256:58c96c24ca4f009e461a265b65aecefbc1abcbb6f6e85b12006edb81a8c7efa8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84782"
},
{
"category": "external",
"summary": "RHBZ#2537080",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2537080"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84782",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84782"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84782",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84782"
},
{
"category": "external",
"summary": "https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782",
"url": "https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782"
}
],
"release_date": "2026-09-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-29T16:25:29+00:00",
"details": "For Red Hat Lightspeed in Satellite installation see the Red Hat Satellite documentation.",
"product_ids": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-host-inventory-rhel9@sha256:58c96c24ca4f009e461a265b65aecefbc1abcbb6f6e85b12006edb81a8c7efa8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:92566"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-host-inventory-rhel9@sha256:58c96c24ca4f009e461a265b65aecefbc1abcbb6f6e85b12006edb81a8c7efa8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission"
},
{
"cve": "CVE-2026-93599",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-09-22T18:32:06.471964+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2538431"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in rustls-webpki. A remote attacker, by influencing an application to parse a specially crafted Certificate Revocation List (CRL) that contains an empty `onlySomeReasons` value in its `issuingDistributionPoint` extension, could trigger a panic. This vulnerability leads to a denial of service (DoS) in applications that explicitly enable CRL revocation checking.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rustls-webpki: rustls-webpki: Denial of Service via crafted Certificate Revocation List",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important because an unauthenticated remote attacker can cause an immediate denial of service by triggering an unhandled panic in network-facing services. Exploitation requires the consuming software to explicitly enable Certificate Revocation List (CRL) validation, a capability that is disabled by default in standard rustls configurations. Applications and services that actively ingest revocation lists from untrusted endpoints face service termination, whereas environments utilizing default certificate verification workflows remain unaffected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-host-inventory-rhel9@sha256:58c96c24ca4f009e461a265b65aecefbc1abcbb6f6e85b12006edb81a8c7efa8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-93599"
},
{
"category": "external",
"summary": "RHBZ#2538431",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2538431"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-93599",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93599"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93599",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93599"
},
{
"category": "external",
"summary": "https://github.com/rustls/webpki/security/advisories/GHSA-82j2-j2ch-gfr8",
"url": "https://github.com/rustls/webpki/security/advisories/GHSA-82j2-j2ch-gfr8"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/rustls-webpki-before-0.103.13-panic-via-empty-bit-string",
"url": "https://www.vulncheck.com/advisories/rustls-webpki-before-0.103.13-panic-via-empty-bit-string"
}
],
"release_date": "2026-09-18T13:20:10.258000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-29T16:25:29+00:00",
"details": "For Red Hat Lightspeed in Satellite installation see the Red Hat Satellite documentation.",
"product_ids": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-host-inventory-rhel9@sha256:58c96c24ca4f009e461a265b65aecefbc1abcbb6f6e85b12006edb81a8c7efa8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:92566"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-host-inventory-rhel9@sha256:58c96c24ca4f009e461a265b65aecefbc1abcbb6f6e85b12006edb81a8c7efa8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "rustls-webpki: rustls-webpki: Denial of Service via crafted Certificate Revocation List"
},
{
"cve": "CVE-2026-102267",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-09-28T20:42:16.576688+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542690"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT. When retrieving cryptographic keys from a JSON Web Key Set (JWKS) endpoint, PyJWKClient fails to validate HTTP redirect destinations against trusted domain boundaries. A remote attacker who can influence the response of a trusted endpoint can redirect key requests to an untrusted server, allowing the client to accept forged verification keys or potentially exposing sensitive credentials.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: pyjwt: Verification key substitution via unvalidated JWKS redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important impact because improper handling of HTTP redirects during dynamic key retrieval can allow an adversary to supply forged cryptographic keys or intercept sensitive request headers. In Red Hat environments where services utilize PyJWKClient to fetch JSON Web Key Sets over the network, accepting untrusted key material may compromise token validation and authentication boundaries. Exploitation requires the target service to dynamically resolve keys via HTTP and relies on an attacker\u0027s ability to manipulate responses returned by the configured key server.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-host-inventory-rhel9@sha256:58c96c24ca4f009e461a265b65aecefbc1abcbb6f6e85b12006edb81a8c7efa8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102267"
},
{
"category": "external",
"summary": "RHBZ#2542690",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542690"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102267",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102267"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102267",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102267"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56",
"url": "https://github.com/jpadilla/pyjwt/commit/0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
"url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9v7f-9g4p-ffgj",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9v7f-9g4p-ffgj"
}
],
"release_date": "2026-09-28T20:23:33.556000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-29T16:25:29+00:00",
"details": "For Red Hat Lightspeed in Satellite installation see the Red Hat Satellite documentation.",
"product_ids": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-host-inventory-rhel9@sha256:58c96c24ca4f009e461a265b65aecefbc1abcbb6f6e85b12006edb81a8c7efa8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:92566"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-host-inventory-rhel9@sha256:58c96c24ca4f009e461a265b65aecefbc1abcbb6f6e85b12006edb81a8c7efa8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-host-inventory-rhel9@sha256:58c96c24ca4f009e461a265b65aecefbc1abcbb6f6e85b12006edb81a8c7efa8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyjwt: pyjwt: Verification key substitution via unvalidated JWKS redirects"
},
{
"cve": "CVE-2026-102268",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-09-28T20:40:56.952621+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT. When an application allows both symmetric and asymmetric signing algorithms, minor formatting variations in a public key can prevent the library from properly identifying it as an asymmetric key. Consequently, the library improperly treats the public key as a shared secret key, allowing a remote attacker to forge valid authentication tokens and bypass security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: PyJWT: Authentication bypass via improper public key validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Critical severity for Red Hat products because an unauthenticated remote attacker could forge valid cryptographic tokens and bypass authentication checks without knowing the private signing key. Exploitation occurs when consuming applications configure token verification to accept both symmetric and asymmetric algorithms simultaneously, allowing an asymmetric public key to be mishandled as a symmetric secret. Deployments that strictly enforce a single algorithm type or validate tokens using JSON Web Key sets do not permit this algorithm confusion and remain unaffected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-host-inventory-rhel9@sha256:58c96c24ca4f009e461a265b65aecefbc1abcbb6f6e85b12006edb81a8c7efa8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102268"
},
{
"category": "external",
"summary": "RHBZ#2542685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102268",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102268"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102268",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102268"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07",
"url": "https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
"url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9"
}
],
"release_date": "2026-09-28T20:26:13.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-29T16:25:29+00:00",
"details": "For Red Hat Lightspeed in Satellite installation see the Red Hat Satellite documentation.",
"product_ids": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-host-inventory-rhel9@sha256:58c96c24ca4f009e461a265b65aecefbc1abcbb6f6e85b12006edb81a8c7efa8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:92566"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-host-inventory-rhel9@sha256:58c96c24ca4f009e461a265b65aecefbc1abcbb6f6e85b12006edb81a8c7efa8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-host-inventory-rhel9@sha256:58c96c24ca4f009e461a265b65aecefbc1abcbb6f6e85b12006edb81a8c7efa8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "pyjwt: PyJWT: Authentication bypass via improper public key validation"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.