{"id":"EUVD-2026-17591","enisaUuid":"a9a12e79-0b0e-3767-88fb-071768ebde07","description":"The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution. The fix for CVE-2025-13465 only guards against string key members, so an attacker can bypass the check by passing array-wrapped path segments. This allows deletion of properties from built-in prototypes such as Object.prototype, Number.prototype, and String.prototype. The issue permits deletion of prototype properties but does not allow overwriting their original behavior. The issue is patched from 4.18.0 to 4.18.1 depending on the package: lodash, lodash-es, and lodash-amd in 4.18.1, and the standalone lodash.unset and lodash.omit packages in 4.18.0.","datePublished":"Mar 31, 2026, 7:18:35 PM","dateUpdated":"Oct 15, 2026, 6:44:37 AM","baseScore":6.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","references":"https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh\nhttps://cna.openjsf.org/security-advisories.html\n","aliases":"CVE-2026-2950\n","assigner":"openjs","epss":0.34,"enisaIdProduct":[{"id":"0023b50a-5e01-3b6e-b72c-7950abc0c87f","product":{"name":"lodash-es","vendor":{"name":"lodash"}},"product_version":"4.17.23 \u003c4.18.1"},{"id":"4147f479-b89b-3677-b783-c6612436c4ad","product":{"name":"Lodash-amd","vendor":{"name":"lodash"}},"product_version":"4.17.23 \u003c4.18.1"},{"id":"47aa0557-85d6-327a-8497-7b632b2a357e","product":{"name":"lodash","vendor":{"name":"lodash"}},"product_version":"4.17.23 \u003c4.18.1"},{"id":"6c920215-67b2-39b6-a727-ea5bafe3948b","product":{"name":"lodash.unset","vendor":{"name":"lodash"}},"product_version":"0 \u003c4.18.0"},{"id":"b3dfc43d-824c-3d49-9f25-26f5fae16a47","product":{"name":"lodash.omit","vendor":{"name":"lodash"}},"product_version":"0 \u003c4.18.0"}],"enisaIdVendor":[{"id":"b917bdc5-aba3-3a39-8e9a-67c0370dcf22","vendor":{"name":"lodash"}}],"enisaIdVulnerability":[{"id":"86e38908-c383-32cc-aadb-5e19bd680bbc","vulnerability":{"id":"CVE-2026-2950","description":"The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution. The fix for CVE-2025-13465 only guards against string key members, so an attacker can bypass the check by passing array-wrapped path segments. This allows deletion of properties from built-in prototypes such as Object.prototype, Number.prototype, and String.prototype. The issue permits deletion of prototype properties but does not allow overwriting their original behavior. The issue is patched from 4.18.0 to 4.18.1 depending on the package: lodash, lodash-es, and lodash-amd in 4.18.1, and the standalone lodash.unset and lodash.omit packages in 4.18.0.","datePublished":"Mar 31, 2026, 7:18:35 PM","dateUpdated":"Oct 15, 2026, 6:44:37 AM","status":"PUBLISHED","baseScore":6.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","references":"https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh\nhttps://cna.openjsf.org/security-advisories.html\n","enisa_id":"EUVD-2026-17591\n","assigner":"openjs","epss":0.34,"dataProcessed":"Nov 1, 2026, 4:04:34 AM","vulnerabilityProduct":[{"id":"0c1a65d9-3266-3f81-aa18-b517c0cb6dd2","product":{"name":"lodash","vendor":{"name":"lodash"}},"product_version":"4.17.23 \u003c4.18.1"},{"id":"0e044954-ee34-36e8-aade-6b30b7b9dfd8","product":{"name":"lodash.unset","vendor":{"name":"lodash"}},"product_version":"0 \u003c4.18.0"},{"id":"b99d0a90-3365-3961-ad7e-240f4f94d3cb","product":{"name":"lodash.omit","vendor":{"name":"lodash"}},"product_version":"0 \u003c4.18.0"},{"id":"bb085b81-ef62-3a54-8d96-dcf00ed1f6a5","product":{"name":"lodash-es","vendor":{"name":"lodash"}},"product_version":"4.17.23 \u003c4.18.1"},{"id":"c85cd635-b861-30b2-9481-dc1e39920b9c","product":{"name":"Lodash-amd","vendor":{"name":"lodash"}},"product_version":"4.17.23 \u003c4.18.1"}],"vulnerabilityVendor":[{"id":"3c510909-c967-33bf-9b35-deaef532577c","vendor":{"name":"lodash"}}]}}],"enisaIdAdvisory":[{"id":"1d68e8da-59df-3dc3-b9cc-344ae4da2f28","advisory":{"id":"RHSA-2026:7378","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Apr 10, 2026, 1:03:00 PM","dateUpdated":"Oct 31, 2026, 3:41:20 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:7378\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7378.json\n","aliases":"CVE-2025-55130\nCVE-2025-55131\nCVE-2025-55132\nCVE-2025-59464\nCVE-2026-2950\nCVE-2026-6734\nCVE-2026-9675\nCVE-2026-9678\nCVE-2026-9697\nCVE-2026-45149\nCVE-2026-48615\nCVE-2026-48618\nCVE-2026-48619\nCVE-2026-48928\nCVE-2026-48930\nCVE-2026-48933\nCVE-2026-48934\nCVE-2026-48935\nCVE-2026-48936\nCVE-2026-59868\nCVE-2026-59870\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"012a4b2c-e01d-3c8f-8a59-d7e06210d951","product":{"name":"nodejs25-npm-bin-0:25.9.0-1.1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"08a41cb5-a2de-384c-a42f-98fcd561f46e","product":{"name":"nodejs25-npm-0:11.12.1-1.25.9.0.1.1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"0d28a52d-f68d-342b-8123-34e42ff8185a","product":{"name":"nodejs25-docs-0:25.9.0-1.1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"1293b877-33a5-3d16-9d03-dc1de3d5f1f2","product":{"name":"nodejs25-0:25.9.0-1.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"13c1a84f-ec16-3199-95aa-9dd0c58548ce","product":{"name":"nodejs25-bin-0:25.9.0-1.1.hum1@noarch","vendor":{"name":"Red Hat"}}},{"id":"247b08cc-394d-306f-ad64-8d3dde65874f","product":{"name":"nodejs25-main@aarch64","vendor":{"name":"Red Hat"}}},{"id":"37d19bf0-2773-34ed-9da0-0c8aa50dc89b","product":{"name":"nodejs25-main@x86_64","vendor":{"name":"Red Hat"}}},{"id":"3b2dd494-0925-373f-9c48-b80b23afe34f","product":{"name":"nodejs25-libs-0:25.9.0-1.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"44f3312e-aab1-3af7-aa4b-aca262e9b900","product":{"name":"nodejs25-docs-0:25.9.0-1.1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"4ee0e539-fa09-338a-a841-f9e1d5226fcf","product":{"name":"nodejs25-full-i18n-0:25.9.0-1.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"51dd5b49-bdcb-385c-8a2d-a3192393962b","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"61201c4f-8eae-326d-906f-545b07cc685f","product":{"name":"nodejs25-main@noarch","vendor":{"name":"Red Hat"}}},{"id":"636786f4-23bd-3410-b58e-7c352135c731","product":{"name":"nodejs25-libs-0:25.9.0-1.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"663b9063-edb9-3f85-91cc-5310f870a2ed","product":{"name":"nodejs25-devel-0:25.9.0-1.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"7762542b-f702-3339-bfe6-5cdcca5e12a6","product":{"name":"nodejs25-0:25.9.0-1.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"82aa044c-07e7-3561-b01a-69fb2fd3d1c2","product":{"name":"nodejs25-full-i18n-0:25.9.0-1.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"8aefae49-d608-3c78-99d3-169b5a10d5f2","product":{"name":"nodejs25-npm-bin-0:25.9.0-1.1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"97169f0b-e955-3425-806f-6c7b2ff80faa","product":{"name":"nodejs25-npm-0:11.12.1-1.25.9.0.1.1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"c2cacbbf-8c6d-38ba-a73f-083010bc2f7d","product":{"name":"nodejs25-bin-0:25.9.0-1.1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"d2b7ffcc-af5e-3df6-8b92-703f55ca24ae","product":{"name":"nodejs25-devel-0:25.9.0-1.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"dca5607d-218c-30d0-84f3-c544d990f0d0","product":{"name":"nodejs25-main@src","vendor":{"name":"Red Hat"}}},{"id":"e34777cd-b763-34ee-9fd9-206dcc9d527d","product":{"name":"v8-14.1-devel-0:14.1.146.11-1.25.9.0.1.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"e70da5e7-7293-3b6f-8627-97519451859d","product":{"name":"nodejs25-0:25.9.0-1.1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"f459b109-fbfd-3a35-92dd-395343cbcbe1","product":{"name":"nodejs25-bin-0:25.9.0-1.1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"f7320253-7c76-3e9d-911e-ec6e7b2bca00","product":{"name":"v8-14.1-devel-0:14.1.146.11-1.25.9.0.1.1.hum1@aarch64","vendor":{"name":"Red Hat"}}}]}},{"id":"3c8c64dc-1fc7-3380-847e-5ae75a99d216","advisory":{"id":"RHSA-2026:7655","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Apr 11, 2026, 12:49:50 AM","dateUpdated":"Oct 30, 2026, 7:27:35 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:7655\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7655.json\n","aliases":"CVE-2026-2950\nCVE-2026-45149\nCVE-2026-45736\nCVE-2026-59868\nCVE-2026-59870\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"002fd6d4-06ab-343b-a2c5-ae04c767bd8c","product":{"name":"yarnpkg-0:1.22.22-18.1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"0bd07988-b59f-3418-9f44-b7c997a270fe","product":{"name":"yarnpkg-0:1.22.22-18.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"2f381fa1-4d5d-394d-a988-06386dbbd4a5","product":{"name":"yarnpkg-0:1.22.22-18.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"38881e90-48b9-3405-936d-9bcfe12eb8a3","product":{"name":"yarnpkg-main@src","vendor":{"name":"Red Hat"}}},{"id":"4e1a3b38-8cab-3d4c-aa57-9bef17dc27bf","product":{"name":"yarnpkg-main@x86_64","vendor":{"name":"Red Hat"}}},{"id":"788d7ba9-c6e1-3a74-8ac0-fca874c46426","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"e7037272-4693-3e82-badb-89c80c0aef7b","product":{"name":"yarnpkg-main@aarch64","vendor":{"name":"Red Hat"}}}]}},{"id":"46176b4d-c368-3626-b75b-65b0d231f656","advisory":{"id":"RHSA-2026:24841","description":"Red Hat Security Advisory: Red Hat Developer Hub 1.10.0 release.","summary":"Red Hat Developer Hub 1.10.0 has been released.","datePublished":"Jun 9, 2026, 2:38:34 PM","dateUpdated":"Oct 27, 2026, 4:24:20 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:24841\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24841.json\n","aliases":"CVE-2026-2950\nCVE-2026-4923\nCVE-2026-22036\nCVE-2026-27601\nCVE-2026-31988\nCVE-2026-32235\nCVE-2026-33349\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"2a799a6f-edea-3ce9-80c2-254ed3f4a4fe","product":{"name":"registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b04577fd53315437ef4580af92055fb5238649a5a11e68e264ea1ed70eae79db_amd64","vendor":{"name":"Red Hat"}}},{"id":"5189476c-39d0-36ab-868a-51074649b291","product":{"name":"Red Hat Developer Hub 1.10","vendor":{"name":"Red Hat"}}},{"id":"72cc38f5-f60e-33ed-a129-5e6b87aecf4e","product":{"name":"registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:b99622b2ec913bdf7ad25a7a9919fbf07a6a177548b3f486acf648c533ca4f22_amd64","vendor":{"name":"Red Hat"}}},{"id":"fa92a693-7bbf-35d5-972e-9facb3a8cea3","product":{"name":"registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:c290c8d9d433286ac038022c229b359500b7451a3d3f97c3c50371b6198df029_amd64","vendor":{"name":"Red Hat"}}}]}},{"id":"5df3dc75-2173-3584-b526-536a66724441","advisory":{"id":"WID-SEC-W-2026-1328","description":"Red Hat Hardened Images RPMs: Mehrere Schwachstellen","summary":"Ein Angreifer kann mehrere Schwachstellen in Red Hat Hardened Images RPMs ausnutzen, um einen Denial of Service Angriff durchzuführen oder Daten zu manipulieren.","datePublished":"May 3, 2026, 10:00:00 PM","dateUpdated":"Jun 8, 2026, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1328.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-1328\n","aliases":"CVE-2026-2625\nCVE-2026-2950\nCVE-2026-33813\nCVE-2026-42371\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"0e9cac3b-838b-3e12-953c-1f54b115fe07","product":{"name":"webui","vendor":{"name":"ansibleguy"}}},{"id":"0f91589e-c467-3754-8857-0f6e26f64e33","product":{"name":"IBM QRadar SIEM","vendor":{"name":"IBM"}}},{"id":"16bcb1ce-832d-3d9f-aac1-6b5302c28060","product":{"name":"Fedora Linux","vendor":{"name":"Fedora"}}},{"id":"63284116-44b1-3c94-bdcf-ec848fddfe8c","product":{"name":"IBM MQ","vendor":{"name":"IBM"}}},{"id":"68118000-e434-370b-8fd5-ce34aaa1789c","product":{"name":"6.0.1.0","vendor":{"name":"IBM"}}},{"id":"6c76d997-bed3-3d28-acfb-97136305f172","product":{"name":"Hardened Images RPMs","vendor":{"name":"Red Hat"}}},{"id":"8b7647b3-bd6d-3a49-bb5b-929424f51e2e","product":{"name":"Enterprise Linux","vendor":{"name":"Red Hat"}}},{"id":"919e1c3a-2ea3-37b1-bab9-a5c75b0287dd","product":{"name":"Red Hat Enterprise Linux","vendor":{"name":"Red Hat"}}},{"id":"a795c1f1-4af8-3b46-9b3e-1f16d43edd13","product":{"name":"5.2.3.8","vendor":{"name":"IBM"}}},{"id":"c82e584d-0d8a-3ab8-bbfe-6cf165ed5833","product":{"name":"SUSE openSUSE","vendor":{"name":"SUSE"}}},{"id":"e7a67043-768c-3bb1-8b9c-0fbc86458dbf","product":{"name":"Storage Scale","vendor":{"name":"IBM"}}},{"id":"e94a2b83-9098-366b-83de-59a638193536","product":{"name":"Multicluster Global Hub 1.5.4","vendor":{"name":"Red Hat"}}},{"id":"f79cfaa3-27f9-3d0d-ba27-dd383b72ade0","product":{"name":"BigFix","vendor":{"name":"HCL"}}}]}},{"id":"82b76f83-62e2-3187-88b8-2de0bdf0de67","advisory":{"id":"RHSA-2026:9455","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Apr 21, 2026, 5:31:07 PM","dateUpdated":"Oct 30, 2026, 7:27:39 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:9455\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9455.json\n","aliases":"CVE-2026-2950\nCVE-2026-8723\nCVE-2026-45149\nCVE-2026-48615\nCVE-2026-48618\nCVE-2026-48619\nCVE-2026-48928\nCVE-2026-48930\nCVE-2026-48933\nCVE-2026-48934\nCVE-2026-48935\nCVE-2026-48936\nCVE-2026-59868\nCVE-2026-59870\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"0cc515ef-f834-3be8-b535-996b8efbde24","product":{"name":"nodejs20-main@src","vendor":{"name":"Red Hat"}}},{"id":"17b4397c-1eed-3c5f-8518-6a688e91e41e","product":{"name":"nodejs20-libs-0:20.20.2-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"182d3222-4e46-3a99-9811-e1f428e634c2","product":{"name":"nodejs20-npm-bin-0:20.20.2-1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"1dc6a73e-0102-38c8-bb73-15b609e4c157","product":{"name":"nodejs20-0:20.20.2-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"3286a1e9-d17f-314a-809b-60fa5926f16c","product":{"name":"nodejs20-full-i18n-0:20.20.2-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"38e1184b-4fa8-3b58-8993-8127360ff43a","product":{"name":"nodejs20-devel-0:20.20.2-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"4593e027-e1da-318f-af92-3315b89bfe0e","product":{"name":"v8-11.3-devel-0:11.3.244.8-1.20.20.2.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"533d99bb-537b-34d8-9d86-85a789302a5c","product":{"name":"v8-11.3-devel-0:11.3.244.8-1.20.20.2.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"575e5cc9-e3ec-3ece-9420-f9bc1ffb735a","product":{"name":"nodejs20-docs-0:20.20.2-1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"5c28ce96-4f01-3e63-8534-5b5dde273e46","product":{"name":"nodejs20-npm-0:10.8.2-1.20.20.2.1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"6f9cd7f6-8789-3cd1-abbb-ba74adc51a35","product":{"name":"nodejs20-docs-0:20.20.2-1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"7538ea60-8608-3f7f-8b2d-ea841919ed35","product":{"name":"nodejs20-0:20.20.2-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"78e4a9e1-1164-3dc6-afb9-fffe1e08ace7","product":{"name":"nodejs20-devel-0:20.20.2-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"7a0e6857-28f9-3e06-9bd3-886d1e227eaa","product":{"name":"nodejs20-npm-0:10.8.2-1.20.20.2.1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"7be6a736-b00b-39a7-9c68-733c1f1c2a8c","product":{"name":"nodejs20-bin-0:20.20.2-1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"87802332-ecb2-3480-9927-4b3af9fa3a23","product":{"name":"nodejs20-main@noarch","vendor":{"name":"Red Hat"}}},{"id":"9f1d7d0b-f0e8-37bc-9b82-934e75346a01","product":{"name":"nodejs20-0:20.20.2-1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"a45f9ec4-2740-38fa-9e57-bdfc45bae325","product":{"name":"nodejs20-libs-0:20.20.2-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"c3b04b73-9c35-35e1-854e-9334cea8ce09","product":{"name":"nodejs20-npm-bin-0:20.20.2-1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"c6e114b4-171f-342e-9169-73ac146dfe83","product":{"name":"nodejs20-bin-0:20.20.2-1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"cb03a3d4-fd57-3d55-bdf6-4d732c96067a","product":{"name":"nodejs20-main@x86_64","vendor":{"name":"Red Hat"}}},{"id":"d0758c91-7283-3378-bf7f-b0d208c638aa","product":{"name":"nodejs20-full-i18n-0:20.20.2-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"e52665af-bb4f-3194-b084-9ab67ba3060c","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"f5b24612-2f4b-3630-aeed-bae1c1a7db09","product":{"name":"nodejs20-main@aarch64","vendor":{"name":"Red Hat"}}}]}},{"id":"b6c37ffc-d86a-3908-9a15-fc1b34a45f84","advisory":{"id":"RHBA-2026:21388","description":"Red Hat Bug Fix Advisory: cockpit bug fix and enhancement update","summary":"An update for cockpit is now available for Red Hat Enterprise Linux 10.","datePublished":"May 27, 2026, 4:49:47 PM","dateUpdated":"Oct 30, 2026, 7:35:27 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHBA-2026:21388\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhba-2026_21388.json\n","aliases":"CVE-2026-2950\nCVE-2026-4631\nCVE-2026-4800\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"0b888247-7080-3226-bb4f-31780a41f8c2","product":{"name":"cockpit-0:356.1-1.el10_2.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"10def733-e12a-3549-8c03-beb64b438608","product":{"name":"cockpit-debuginfo-0:356.1-1.el10_2.aarch64","vendor":{"name":"Red Hat"}}},{"id":"13c076ad-21ea-3c83-8c97-680e7705c62c","product":{"name":"cockpit-ws-selinux-0:356.1-1.el10_2.x86_64","vendor":{"name":"Red Hat"}}},{"id":"152102bc-4d44-3e8b-aa88-307690715d56","product":{"name":"cockpit-ws-selinux-0:356.1-1.el10_2.aarch64","vendor":{"name":"Red Hat"}}},{"id":"16ef15b6-13b1-392f-93ae-96b86f92dcaf","product":{"name":"cockpit-debugsource-0:356.1-1.el10_2.s390x","vendor":{"name":"Red Hat"}}},{"id":"22398bff-9af4-38b2-a6af-13d01d385547","product":{"name":"cockpit-debuginfo-0:356.1-1.el10_2.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"2e130422-7550-3e9d-b9c0-a9afeb8ba196","product":{"name":"cockpit-bridge-0:356.1-1.el10_2.noarch","vendor":{"name":"Red Hat"}}},{"id":"30c398db-bc5c-326f-b476-4356a47214dc","product":{"name":"cockpit-ws-0:356.1-1.el10_2.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"3dcea17a-e490-39f7-8ae3-9a58c0d05f7b","product":{"name":"cockpit-0:356.1-1.el10_2.src","vendor":{"name":"Red Hat"}}},{"id":"4107abde-b877-33ce-9726-7f6636fa242e","product":{"name":"cockpit-debuginfo-0:356.1-1.el10_2.s390x","vendor":{"name":"Red Hat"}}},{"id":"5bdb0346-6be9-3f71-95bd-ea95be1d89ae","product":{"name":"cockpit-0:356.1-1.el10_2.x86_64","vendor":{"name":"Red Hat"}}},{"id":"62ee080b-457d-3763-a60a-b187f38af9cb","product":{"name":"cockpit-ws-selinux-0:356.1-1.el10_2.s390x","vendor":{"name":"Red Hat"}}},{"id":"736708da-f5a7-3259-9a1a-f5028fed2829","product":{"name":"cockpit-ws-0:356.1-1.el10_2.x86_64","vendor":{"name":"Red Hat"}}},{"id":"825f793b-6d13-34b0-a08f-877b0eb17a9c","product":{"name":"cockpit-0:356.1-1.el10_2.s390x","vendor":{"name":"Red Hat"}}},{"id":"82dd7402-779f-3136-aa87-4400bfbf44dc","product":{"name":"cockpit-debuginfo-0:356.1-1.el10_2.x86_64","vendor":{"name":"Red Hat"}}},{"id":"8539d8bc-e678-3b4e-9aff-a7e5bafd3d3c","product":{"name":"cockpit-system-0:356.1-1.el10_2.noarch","vendor":{"name":"Red Hat"}}},{"id":"a72a81d8-50c9-306e-b8ee-54b9f85d7160","product":{"name":"cockpit-ws-0:356.1-1.el10_2.aarch64","vendor":{"name":"Red Hat"}}},{"id":"a8d3f6d0-842a-3af5-a572-4a8153bbf1ee","product":{"name":"cockpit-doc-0:356.1-1.el10_2.noarch","vendor":{"name":"Red Hat"}}},{"id":"aa5df66d-450f-308f-85b2-67f5703e58b1","product":{"name":"cockpit-ws-0:356.1-1.el10_2.s390x","vendor":{"name":"Red Hat"}}},{"id":"ad820430-6eae-3394-866b-a7b40fa7894b","product":{"name":"cockpit-0:356.1-1.el10_2.aarch64","vendor":{"name":"Red Hat"}}},{"id":"adf3b749-fc5a-3e66-9011-68c485d619e2","product":{"name":"cockpit-debugsource-0:356.1-1.el10_2.x86_64","vendor":{"name":"Red Hat"}}},{"id":"b3f345f9-d1d1-3096-b88e-9b7edaed4d57","product":{"name":"Red Hat Enterprise Linux AppStream (v. 10)","vendor":{"name":"Red Hat"}}},{"id":"b45f6a19-dcfb-350a-8543-3441704e7430","product":{"name":"cockpit-debugsource-0:356.1-1.el10_2.aarch64","vendor":{"name":"Red Hat"}}},{"id":"ba7af446-e20b-3cfa-989d-0e4fad50307b","product":{"name":"cockpit-storaged-0:356.1-1.el10_2.noarch","vendor":{"name":"Red Hat"}}},{"id":"cba3e8aa-917f-3178-9ad5-4b4617888fd0","product":{"name":"cockpit-ws-selinux-0:356.1-1.el10_2.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"d0b76a22-9a8f-3984-aed9-f8773f4aad81","product":{"name":"cockpit-debugsource-0:356.1-1.el10_2.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"d7e13713-6e99-3fda-8960-e92fa7866a1a","product":{"name":"Red Hat Enterprise Linux BaseOS (v. 10)","vendor":{"name":"Red Hat"}}},{"id":"dbdf7a82-ef41-3d77-9d3a-15fe0c36a4c7","product":{"name":"cockpit-packagekit-0:356.1-1.el10_2.noarch","vendor":{"name":"Red Hat"}}}]}},{"id":"ca22b276-ef76-3d61-9026-afdb547cab10","advisory":{"id":"RHBA-2026:21387","description":"Red Hat Bug Fix Advisory: cockpit bug fix and enhancement update","summary":"An update for cockpit is now available for Red Hat Enterprise Linux 9.","datePublished":"May 27, 2026, 9:13:25 PM","dateUpdated":"Oct 30, 2026, 7:35:26 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHBA-2026:21387\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhba-2026_21387.json\n","aliases":"CVE-2026-2950\nCVE-2026-4631\nCVE-2026-4800\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"07330a7f-d626-32d5-a086-9b18c6a0aa9e","product":{"name":"cockpit-ws-selinux-0:356.1-1.el9_8.aarch64","vendor":{"name":"Red Hat"}}},{"id":"157354c2-172d-3bcc-9ee1-3001eec8911e","product":{"name":"cockpit-debuginfo-0:356.1-1.el9_8.s390x","vendor":{"name":"Red Hat"}}},{"id":"15dabe29-2638-33c4-af04-b1ba5a33394a","product":{"name":"cockpit-debuginfo-0:356.1-1.el9_8.x86_64","vendor":{"name":"Red Hat"}}},{"id":"266748d6-3ee7-3098-9b47-6049ebecd19f","product":{"name":"cockpit-storaged-0:356.1-1.el9_8.noarch","vendor":{"name":"Red Hat"}}},{"id":"2ea771c3-b34d-3f0c-82bd-3df58a2c1943","product":{"name":"Red Hat Enterprise Linux AppStream (v. 9)","vendor":{"name":"Red Hat"}}},{"id":"358a57ca-5635-393e-a067-a8894e299cda","product":{"name":"cockpit-ws-0:356.1-1.el9_8.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"3d7b636a-dba7-32f2-9092-ec6629c8e376","product":{"name":"cockpit-ws-selinux-0:356.1-1.el9_8.s390x","vendor":{"name":"Red Hat"}}},{"id":"3f463317-ccb6-376d-9031-75581fe7de1b","product":{"name":"cockpit-bridge-0:356.1-1.el9_8.noarch","vendor":{"name":"Red Hat"}}},{"id":"41010859-6586-3f25-b1cf-9c362c27d059","product":{"name":"cockpit-doc-0:356.1-1.el9_8.noarch","vendor":{"name":"Red Hat"}}},{"id":"4a96938f-203e-3553-a8ba-a918897eee81","product":{"name":"cockpit-debugsource-0:356.1-1.el9_8.x86_64","vendor":{"name":"Red Hat"}}},{"id":"5d1d1603-098f-3db5-922b-377c19ec2d0a","product":{"name":"cockpit-ws-selinux-0:356.1-1.el9_8.x86_64","vendor":{"name":"Red Hat"}}},{"id":"6b4ef5ab-a538-3576-b5b1-c97e09af0199","product":{"name":"cockpit-ws-0:356.1-1.el9_8.x86_64","vendor":{"name":"Red Hat"}}},{"id":"6c0f9047-023b-39e5-92be-82248510495e","product":{"name":"cockpit-0:356.1-1.el9_8.s390x","vendor":{"name":"Red Hat"}}},{"id":"7779797d-093b-3fe3-9388-928fef2b81bb","product":{"name":"cockpit-debuginfo-0:356.1-1.el9_8.aarch64","vendor":{"name":"Red Hat"}}},{"id":"77fbc504-bc2d-361a-bf14-6cc69f5ea9aa","product":{"name":"cockpit-debuginfo-0:356.1-1.el9_8.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"7ff8a8ad-9d92-3014-a669-ee977e993b7e","product":{"name":"cockpit-ws-0:356.1-1.el9_8.aarch64","vendor":{"name":"Red Hat"}}},{"id":"88267dfc-df10-3075-8f0f-6308a08891f2","product":{"name":"cockpit-debugsource-0:356.1-1.el9_8.s390x","vendor":{"name":"Red Hat"}}},{"id":"8bbf6da3-3a72-375b-b226-26fc7b4dd8f7","product":{"name":"cockpit-debugsource-0:356.1-1.el9_8.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"974d7500-50ea-372c-895f-c2c5445fea2c","product":{"name":"cockpit-system-0:356.1-1.el9_8.noarch","vendor":{"name":"Red Hat"}}},{"id":"ad6354fa-95ca-30f1-855a-87774435862a","product":{"name":"cockpit-0:356.1-1.el9_8.src","vendor":{"name":"Red Hat"}}},{"id":"ad7968f7-625f-3b7b-8da9-e832f1799e71","product":{"name":"cockpit-ws-selinux-0:356.1-1.el9_8.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"ba850698-35dc-3ddd-b6c2-836773dfc6fe","product":{"name":"cockpit-0:356.1-1.el9_8.aarch64","vendor":{"name":"Red Hat"}}},{"id":"bc8ec497-a1ac-3b03-a9ee-49bb9536027e","product":{"name":"cockpit-0:356.1-1.el9_8.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"bed5a186-0981-3135-b794-77d6e9d1788c","product":{"name":"cockpit-debugsource-0:356.1-1.el9_8.aarch64","vendor":{"name":"Red Hat"}}},{"id":"db734bf9-f5b7-317e-94f6-379ed6f6acc8","product":{"name":"cockpit-0:356.1-1.el9_8.x86_64","vendor":{"name":"Red Hat"}}},{"id":"e4971a89-f172-3f0b-9e65-7518f6bc79c3","product":{"name":"cockpit-ws-0:356.1-1.el9_8.s390x","vendor":{"name":"Red Hat"}}},{"id":"f112b370-e81c-3440-93e9-6344e7032b3f","product":{"name":"cockpit-packagekit-0:356.1-1.el9_8.noarch","vendor":{"name":"Red Hat"}}},{"id":"f2f10502-79f8-3484-933d-be09325c89c3","product":{"name":"Red Hat Enterprise Linux BaseOS (v. 9)","vendor":{"name":"Red Hat"}}}]}},{"id":"ce037930-efc9-3d33-859a-45f039a2a39f","advisory":{"id":"WID-SEC-W-2026-3046","description":"IBM Concert: Mehrere Schwachstellen","summary":"Ein Angreifer kann mehrere Schwachstellen in IBM Concert ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um einen SQL-Injection Angriff durchzuführen und um Sicherheitsvorkehrungen zu umgehen.","datePublished":"Aug 26, 2026, 10:00:00 PM","dateUpdated":"Aug 30, 2026, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3046.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-3046\n","aliases":"CVE-2019-19921\nCVE-2021-23337\nCVE-2024-3651\nCVE-2024-39338\nCVE-2024-45590\nCVE-2025-13465\nCVE-2025-15284\nCVE-2025-15599\nCVE-2025-22874\nCVE-2025-47273\nCVE-2025-47907\nCVE-2025-52881\nCVE-2025-53643\nCVE-2025-55184\nCVE-2025-58056\nCVE-2025-58188\nCVE-2025-58189\nCVE-2025-61723\nCVE-2025-61730\nCVE-2025-64649\nCVE-2025-64756\nCVE-2025-67221\nCVE-2025-68121\nCVE-2025-68146\nCVE-2026-0540\nCVE-2026-2327\nCVE-2026-23490\nCVE-2026-23897\nCVE-2026-2391\nCVE-2026-23949\nCVE-2026-24486\nCVE-2026-25528\nCVE-2026-25547\nCVE-2026-25639\nCVE-2026-25990\nCVE-2026-26007\nCVE-2026-26019\nCVE-2026-26996\nCVE-2026-27142\nCVE-2026-27212\nCVE-2026-27699\nCVE-2026-27903\nCVE-2026-27904\nCVE-2026-28684\nCVE-2026-29063\nCVE-2026-29181\nCVE-2026-2950\nCVE-2026-31808\nCVE-2026-31900\nCVE-2026-32274\nCVE-2026-32288\nCVE-2026-32597\nCVE-2026-32630\nCVE-2026-32887\nCVE-2026-32952\nCVE-2026-33186\nCVE-2026-33532\nCVE-2026-33750\nCVE-2026-33814\nCVE-2026-33816\nCVE-2026-33916\nCVE-2026-34043\nCVE-2026-34073\nCVE-2026-34077\nCVE-2026-3520\nCVE-2026-35469\nCVE-2026-35515\nCVE-2026-3627\nCVE-2026-39823\nCVE-2026-39825\nCVE-2026-39826\nCVE-2026-39892\nCVE-2026-39984\nCVE-2026-40175\nCVE-2026-40179\nCVE-2026-40181\nCVE-2026-40190\nCVE-2026-40347\nCVE-2026-41066\nCVE-2026-41182\nCVE-2026-41238\nCVE-2026-41239\nCVE-2026-41240\nCVE-2026-41305\nCVE-2026-41324\nCVE-2026-41425\nCVE-2026-41481\nCVE-2026-41488\nCVE-2026-41602\nCVE-2026-41636\nCVE-2026-42151\nCVE-2026-42154\nCVE-2026-42198\nCVE-2026-42211\nCVE-2026-42338\nCVE-2026-42342\nCVE-2026-42561\nCVE-2026-42577\nCVE-2026-43870\nCVE-2026-44405\nCVE-2026-44431\nCVE-2026-44432\nCVE-2026-44486\nCVE-2026-44487\nCVE-2026-44488\nCVE-2026-44492\nCVE-2026-44494\nCVE-2026-44496\nCVE-2026-44728\nCVE-2026-4539\nCVE-2026-45409\nCVE-2026-45736\nCVE-2026-46625\nCVE-2026-4800\nCVE-2026-4923\nCVE-2026-4926\nCVE-2026-7246\nCVE-2026-8723\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"76a90dbd-da59-3443-a232-e3bd24181126","product":{"name":"Concert","vendor":{"name":"IBM"}}},{"id":"cc1d243a-3c05-3835-99df-7ead0933e4bb","product":{"name":"3.0.0","vendor":{"name":"ECOVACS"}}}]}}]}