{"id":"EUVD-2026-27091","revision":"28ea3dfd381641fca8a250d7d8a8112a","records":[{"revision":"28ea3dfd381641fca8a250d7d8a8112a","observedAt":"2026-11-13T12:02:10.222+00:00","statement":{"source":"euvd","id":"EUVD-2026-27091","aliases":["CVE-2026-42154"],"title":"Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint (/api/v1/read) does not validate the declared decoded length in a snappy-compressed request body before al…","description":"Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint (/api/v1/read) does not validate the declared decoded length in a snappy-compressed request body before allocating memory. An unauthenticated attacker can send a small payload that causes a huge heap allocation per request. Under concurrent load this can exhaust available memory and crash the Prometheus process. This issue has been patched in versions 3.5.3 and 3.11.3.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":null}],"references":["https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm","https://github.com/prometheus/prometheus/pull/18584","https://github.com/prometheus/prometheus/pull/18585","https://github.com/prometheus/prometheus/releases/tag/v3.11.3","https://github.com/prometheus/prometheus/releases/tag/v3.5.3"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-27091","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"May 4, 2026, 6:13:12 PM","dateUpdated":"Sep 10, 2026, 12:04:54 PM"},"relatedAdvisories":[{"id":"RHSA-2026:40118","title":"Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update","vulnerabilityIds":["CVE-2025-13465","CVE-2025-61729","CVE-2025-68121","CVE-2025-69873","CVE-2026-4800","CVE-2026-4926","CVE-2026-6322","CVE-2026-13676","CVE-2026-22029","CVE-2026-25679","CVE-2026-29063","CVE-2026-32141","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-33186","CVE-2026-33810","CVE-2026-33811","CVE-2026-33816","CVE-2026-39821","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39832","CVE-2026-39835","CVE-2026-42151","CVE-2026-42154","CVE-2026-42508","CVE-2026-46595"]},{"id":"RHSA-2026:42852","title":"Red Hat Security Advisory: Multicluster Global Hub 1.5.6 security update","vulnerabilityIds":["CVE-2026-25681","CVE-2026-27136","CVE-2026-33376","CVE-2026-33377","CVE-2026-33811","CVE-2026-39821","CVE-2026-41567","CVE-2026-42151","CVE-2026-42154","CVE-2026-43870","CVE-2026-46384","CVE-2026-46385","CVE-2026-53488","CVE-2026-53492"]},{"id":"RHSA-2026:44235","title":"Red Hat Security Advisory: OpenShift Container Platform 4.19.40 bug fix and security update","vulnerabilityIds":["CVE-2026-4800","CVE-2026-33186","CVE-2026-40895","CVE-2026-42154","CVE-2026-45736"]},{"id":"RHSA-2026:44622","title":"Red Hat Security Advisory: Multicluster Global Hub 1.6.4 security update","vulnerabilityIds":["CVE-2026-25681","CVE-2026-27136","CVE-2026-27145","CVE-2026-33376","CVE-2026-33377","CVE-2026-33811","CVE-2026-39821","CVE-2026-41567","CVE-2026-42151","CVE-2026-42154","CVE-2026-43870","CVE-2026-46384","CVE-2026-46385","CVE-2026-53488","CVE-2026-53492","CVE-2026-55677"]},{"id":"RHSA-2026:74511","title":"Red Hat Security Advisory: Red Hat Quay 3.17.5","vulnerabilityIds":["CVE-2026-15792","CVE-2026-16221","CVE-2026-18255","CVE-2026-33818","CVE-2026-39820","CVE-2026-39822","CVE-2026-42151","CVE-2026-42154","CVE-2026-42499","CVE-2026-42504","CVE-2026-44705","CVE-2026-49477","CVE-2026-49825","CVE-2026-54770","CVE-2026-56852","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862","CVE-2026-67213","CVE-2026-67214","CVE-2026-67313","CVE-2026-67314","CVE-2026-67320","CVE-2026-67321","CVE-2026-69153","CVE-2026-84292","CVE-2026-84394"]},{"id":"RHSA-2026:83013","title":"Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.0.17","vulnerabilityIds":["CVE-2026-18140","CVE-2026-25681","CVE-2026-27136","CVE-2026-29181","CVE-2026-32283","CVE-2026-32285","CVE-2026-33186","CVE-2026-33818","CVE-2026-35469","CVE-2026-41178","CVE-2026-42151","CVE-2026-42154","CVE-2026-42499","CVE-2026-42502","CVE-2026-46600","CVE-2026-56852","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862","CVE-2026-63209","CVE-2026-84445"]},{"id":"RHSA-2026:41019","title":"Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update","vulnerabilityIds":["CVE-2025-61729","CVE-2026-25679","CVE-2026-27137","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33186","CVE-2026-33811","CVE-2026-33815","CVE-2026-33816","CVE-2026-35469","CVE-2026-39821","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39832","CVE-2026-39835","CVE-2026-42151","CVE-2026-42154","CVE-2026-42508","CVE-2026-46595"]},{"id":"RHSA-2026:40792","title":"Red Hat Security Advisory: OpenShift Container Platform 4.21.25 bug fix and security update","vulnerabilityIds":["CVE-2026-33186","CVE-2026-42154","CVE-2026-44487","CVE-2026-44488","CVE-2026-44494","CVE-2026-44495","CVE-2026-45736"]},{"id":"RHSA-2026:43052","title":"Red Hat Security Advisory: Red Hat Quay 3.12.20","vulnerabilityIds":["CVE-2026-12143","CVE-2026-32591","CVE-2026-39820","CVE-2026-39821","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39832","CVE-2026-39835","CVE-2026-42151","CVE-2026-42154","CVE-2026-42499","CVE-2026-42508","CVE-2026-44486","CVE-2026-44487","CVE-2026-44488","CVE-2026-44492","CVE-2026-44494","CVE-2026-44495","CVE-2026-44990","CVE-2026-45822","CVE-2026-46597"]},{"id":"RHSA-2026:40974","title":"Red Hat Security Advisory: RHTAS 1.3.6 - Red Hat Trusted Artifact Signer Release","vulnerabilityIds":["CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39835","CVE-2026-42151","CVE-2026-42154","CVE-2026-44573","CVE-2026-44574","CVE-2026-44575","CVE-2026-44577","CVE-2026-44578","CVE-2026-44579","CVE-2026-45109","CVE-2026-46597"]},{"id":"RHSA-2026:30651","title":"Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.13.9 security update","vulnerabilityIds":["CVE-2026-35206","CVE-2026-39821","CVE-2026-42154","CVE-2026-43869","CVE-2026-44486","CVE-2026-44487","CVE-2026-44488","CVE-2026-44492","CVE-2026-44494","CVE-2026-44495","CVE-2026-44496","CVE-2026-46384","CVE-2026-46385","CVE-2026-46595"]},{"id":"RHSA-2026:25245","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2026-42151","CVE-2026-42154"]},{"id":"RHSA-2026:77639","title":"Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.4.7","vulnerabilityIds":["CVE-2026-41178","CVE-2026-42151","CVE-2026-42154","CVE-2026-42502"]},{"id":"WID-SEC-W-2026-1292","title":"Prometheus: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2026-42151","CVE-2026-42154","CVE-2026-44903"]},{"id":"RHSA-2026:53413","title":"Red Hat Security Advisory: opentelemetry-collector security update","vulnerabilityIds":["CVE-2026-25681","CVE-2026-27136","CVE-2026-27145","CVE-2026-33811","CVE-2026-39821","CVE-2026-42151","CVE-2026-42154","CVE-2026-43870"]},{"id":"RHSA-2026:40262","title":"Red Hat Security Advisory: Red Hat Quay 3.9.24","vulnerabilityIds":["CVE-2026-12143","CVE-2026-13676","CVE-2026-32591","CVE-2026-39820","CVE-2026-39821","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39835","CVE-2026-42151","CVE-2026-42154","CVE-2026-42499","CVE-2026-42508","CVE-2026-44486","CVE-2026-44487","CVE-2026-44488","CVE-2026-44492","CVE-2026-44494","CVE-2026-44495","CVE-2026-44990","CVE-2026-45822","CVE-2026-46597"]},{"id":"RHSA-2026:59833","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.97 bug fix and security update","vulnerabilityIds":["CVE-2025-68121","CVE-2026-4800","CVE-2026-27143","CVE-2026-27144","CVE-2026-32280","CVE-2026-33186","CVE-2026-33814","CVE-2026-39820","CVE-2026-42154","CVE-2026-42499","CVE-2026-44492","CVE-2026-44495","CVE-2026-44496"]},{"id":"RHSA-2026:36651","title":"Red Hat Security Advisory: Red Hat Edge Manager Version 1.0.3 Security Update","vulnerabilityIds":["CVE-2025-13465","CVE-2025-61729","CVE-2025-68121","CVE-2025-69873","CVE-2026-4800","CVE-2026-4926","CVE-2026-6322","CVE-2026-22029","CVE-2026-25679","CVE-2026-29063","CVE-2026-32141","CVE-2026-32280","CVE-2026-33186","CVE-2026-33810","CVE-2026-33811","CVE-2026-39821","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39832","CVE-2026-39835","CVE-2026-42151","CVE-2026-42154","CVE-2026-42508","CVE-2026-46595"]},{"id":"RHSA-2026:53530","title":"Red Hat Security Advisory: Multicluster Global Hub 1.7.2 security update","vulnerabilityIds":["CVE-2026-27145","CVE-2026-33376","CVE-2026-33377","CVE-2026-33811","CVE-2026-39821","CVE-2026-42151","CVE-2026-42154","CVE-2026-42306","CVE-2026-43870","CVE-2026-46384","CVE-2026-46385","CVE-2026-53488","CVE-2026-53492","CVE-2026-55677","CVE-2026-55969","CVE-2026-66801"]},{"id":"RHSA-2026:40970","title":"Red Hat Security Advisory: RHTAS 1.3.6 - Red Hat Trusted Artifact Signer Release","vulnerabilityIds":["CVE-2026-42151","CVE-2026-42154"]},{"id":"RHSA-2026:67539","title":"Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.14.5 security update","vulnerabilityIds":["CVE-2025-47907","CVE-2026-33377","CVE-2026-41178","CVE-2026-42154","CVE-2026-48586","CVE-2026-55969","CVE-2026-56852","CVE-2026-59879","CVE-2026-66780","CVE-2026-71556","CVE-2026-89060"]},{"id":"RHSA-2026:34359","title":"Red Hat Security Advisory: opentelemetry-collector security update","vulnerabilityIds":["CVE-2026-25681","CVE-2026-27145","CVE-2026-33811","CVE-2026-39821","CVE-2026-42151","CVE-2026-42154"]},{"id":"RHSA-2026:36796","title":"Red Hat Security Advisory: Red Hat Edge Manager Version 1.0.3 Security Update","vulnerabilityIds":["CVE-2025-61729","CVE-2026-25679","CVE-2026-27137","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33186","CVE-2026-33810","CVE-2026-33811","CVE-2026-33815","CVE-2026-33816","CVE-2026-35469","CVE-2026-39821","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39832","CVE-2026-39835","CVE-2026-42151","CVE-2026-42154","CVE-2026-42508","CVE-2026-46595"]},{"id":"RHSA-2026:65840","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.71 bug fix and security update","vulnerabilityIds":["CVE-2025-68121","CVE-2026-9277","CVE-2026-27143","CVE-2026-27144","CVE-2026-32280","CVE-2026-33186","CVE-2026-33814","CVE-2026-39820","CVE-2026-42154","CVE-2026-42499","CVE-2026-44496"]},{"id":"RHSA-2026:41031","title":"Red Hat Security Advisory: Red Hat Quay 3.10.24","vulnerabilityIds":["CVE-2026-12143","CVE-2026-32591","CVE-2026-39820","CVE-2026-39821","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39835","CVE-2026-42151","CVE-2026-42154","CVE-2026-42499","CVE-2026-42508","CVE-2026-44486","CVE-2026-44487","CVE-2026-44488","CVE-2026-44492","CVE-2026-44494","CVE-2026-44495","CVE-2026-44990","CVE-2026-45822","CVE-2026-46597"]},{"id":"RHSA-2026:67542","title":"Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.16.5 security update","vulnerabilityIds":["CVE-2026-41178","CVE-2026-42154","CVE-2026-48586","CVE-2026-55969","CVE-2026-56852","CVE-2026-66780","CVE-2026-71556","CVE-2026-75899","CVE-2026-75931","CVE-2026-75975","CVE-2026-76172","CVE-2026-89060"]},{"id":"RHSA-2026:42146","title":"Red Hat Security Advisory: Red Hat Quay 3.12.20","vulnerabilityIds":["CVE-2026-12143","CVE-2026-32591","CVE-2026-39820","CVE-2026-39821","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39832","CVE-2026-39835","CVE-2026-42151","CVE-2026-42154","CVE-2026-42499","CVE-2026-42508","CVE-2026-44486","CVE-2026-44487","CVE-2026-44488","CVE-2026-44492","CVE-2026-44494","CVE-2026-44495","CVE-2026-44990","CVE-2026-45822","CVE-2026-46597"]},{"id":"RHSA-2026:70870","title":"Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.5.3","vulnerabilityIds":["CVE-2026-18140","CVE-2026-25681","CVE-2026-27136","CVE-2026-29181","CVE-2026-33818","CVE-2026-35469","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-41178","CVE-2026-42151","CVE-2026-42154","CVE-2026-42502","CVE-2026-42508","CVE-2026-46595","CVE-2026-46597","CVE-2026-46600","CVE-2026-46604","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862"]},{"id":"RHSA-2026:67541","title":"Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.15.7 security update","vulnerabilityIds":["CVE-2025-53547","CVE-2026-41178","CVE-2026-42154","CVE-2026-42502","CVE-2026-48586","CVE-2026-55969","CVE-2026-56852","CVE-2026-66780","CVE-2026-71556","CVE-2026-89060"]},{"id":"RHSA-2026:25039","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2026-42151","CVE-2026-42154","CVE-2026-44431","CVE-2026-44432","CVE-2026-45409","CVE-2026-48990"]},{"id":"SUSE-SU-2026:2774-1","title":"Security update 5.1.4 for Multi-Linux Manager Server","vulnerabilityIds":["CVE-2022-21698","CVE-2026-28374","CVE-2026-28376","CVE-2026-28379","CVE-2026-28380","CVE-2026-28383","CVE-2026-33376","CVE-2026-33377","CVE-2026-33378","CVE-2026-33380","CVE-2026-33381","CVE-2026-34986","CVE-2026-39821","CVE-2026-40179","CVE-2026-41602","CVE-2026-42151","CVE-2026-42154","CVE-2026-42198"]},{"id":"RHSA-2026:47952","title":"Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.2.12","vulnerabilityIds":["CVE-2026-25681","CVE-2026-27136","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-33186","CVE-2026-33810","CVE-2026-33811","CVE-2026-34986","CVE-2026-39820","CVE-2026-39821","CVE-2026-42151","CVE-2026-42154","CVE-2026-42499","CVE-2026-42504"]},{"id":"SUSE-SU-2026:2243-1","title":"Security update 5.0.8 for Multi-Linux Manager Client Tools","vulnerabilityIds":["CVE-2022-21698","CVE-2025-29923","CVE-2026-21724","CVE-2026-21725","CVE-2026-26958","CVE-2026-27606","CVE-2026-27876","CVE-2026-27877","CVE-2026-27879","CVE-2026-28375","CVE-2026-33186","CVE-2026-33375","CVE-2026-34986","CVE-2026-40179","CVE-2026-41602","CVE-2026-42151","CVE-2026-42154"]},{"id":"RHSA-2026:42796","title":"Red Hat Security Advisory: Red Hat Quay 3.15.6","vulnerabilityIds":["CVE-2026-9277","CVE-2026-10143","CVE-2026-12143","CVE-2026-32591","CVE-2026-39820","CVE-2026-39821","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39835","CVE-2026-42151","CVE-2026-42154","CVE-2026-42499","CVE-2026-42508","CVE-2026-44432","CVE-2026-44486","CVE-2026-44487","CVE-2026-44488","CVE-2026-44492","CVE-2026-44494","CVE-2026-44495","CVE-2026-44496","CVE-2026-44990","CVE-2026-46595","CVE-2026-46597","CVE-2026-48526"]},{"id":"RHSA-2026:54288","title":"Red Hat Security Advisory: OpenShift File Integrity Operator bug fix and enhancement update","vulnerabilityIds":["CVE-2026-27136","CVE-2026-32281","CVE-2026-32282","CVE-2026-42151","CVE-2026-42154","CVE-2026-42502"]},{"id":"RHSA-2026:34357","title":"Red Hat Security Advisory: opentelemetry-collector security update","vulnerabilityIds":["CVE-2026-25681","CVE-2026-27145","CVE-2026-33811","CVE-2026-39821","CVE-2026-42151","CVE-2026-42154"]},{"id":"RHSA-2026:34364","title":"Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.4.6","vulnerabilityIds":["CVE-2026-25681","CVE-2026-32285","CVE-2026-33186","CVE-2026-33811","CVE-2026-33813","CVE-2026-34986","CVE-2026-39820","CVE-2026-39821","CVE-2026-42154","CVE-2026-42499"]},{"id":"RHSA-2026:67538","title":"Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.11.12 security update","vulnerabilityIds":["CVE-2026-27136","CVE-2026-41178","CVE-2026-42151","CVE-2026-42154","CVE-2026-42502","CVE-2026-48586","CVE-2026-55969","CVE-2026-56852","CVE-2026-66780","CVE-2026-71556","CVE-2026-73646"]},{"id":"RHSA-2026:44263","title":"Red Hat Security Advisory: OpenShift Container Platform 4.20.31 bug fix and security update","vulnerabilityIds":["CVE-2026-9277","CVE-2026-12143","CVE-2026-40895","CVE-2026-42154","CVE-2026-42338","CVE-2026-45736","CVE-2026-59869","CVE-2026-59873"]},{"id":"RHSA-2026:50843","title":"Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.0.16","vulnerabilityIds":["CVE-2026-25681","CVE-2026-27136","CVE-2026-33186","CVE-2026-33811","CVE-2026-39820","CVE-2026-39821","CVE-2026-42151","CVE-2026-42154","CVE-2026-42499","CVE-2026-42504"]},{"id":"RHSA-2026:53412","title":"Red Hat Security Advisory: opentelemetry-collector security update","vulnerabilityIds":["CVE-2026-25681","CVE-2026-27136","CVE-2026-27145","CVE-2026-33811","CVE-2026-39821","CVE-2026-42151","CVE-2026-42154","CVE-2026-43870"]},{"id":"SUSE-SU-2026:2768-1","title":"Security update 5.1.4 for Multi-Linux Manager Client Tools","vulnerabilityIds":["CVE-2022-21698","CVE-2026-25680","CVE-2026-25681","CVE-2026-27136","CVE-2026-28374","CVE-2026-28376","CVE-2026-28379","CVE-2026-28380","CVE-2026-28383","CVE-2026-33376","CVE-2026-33377","CVE-2026-33378","CVE-2026-33380","CVE-2026-33381","CVE-2026-34986","CVE-2026-39821","CVE-2026-40179","CVE-2026-41602","CVE-2026-42151","CVE-2026-42154","CVE-2026-42502","CVE-2026-42506"]},{"id":"RHSA-2026:56340","title":"Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.5.2","vulnerabilityIds":["CVE-2026-25681","CVE-2026-27136","CVE-2026-32281","CVE-2026-32282","CVE-2026-33811","CVE-2026-33813","CVE-2026-39820","CVE-2026-39821","CVE-2026-42151","CVE-2026-42154","CVE-2026-42499","CVE-2026-42502","CVE-2026-42504","CVE-2026-56852"]},{"id":"RHSA-2026:47149","title":"Red Hat Security Advisory: Multicluster Global Hub 1.7.2 security update","vulnerabilityIds":["CVE-2026-27145","CVE-2026-33376","CVE-2026-33377","CVE-2026-33811","CVE-2026-39821","CVE-2026-42151","CVE-2026-42154","CVE-2026-43870","CVE-2026-46384","CVE-2026-46385","CVE-2026-53488","CVE-2026-53492","CVE-2026-55677"]},{"id":"openSUSE-SU-2026:10676-1","title":"golang-github-prometheus-prometheus-3.11.3-1.1 on GA media","vulnerabilityIds":["CVE-2026-42151","CVE-2026-42154"]},{"id":"RHSA-2026:40945","title":"Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update","vulnerabilityIds":["CVE-2025-13465","CVE-2025-61729","CVE-2025-68121","CVE-2025-69873","CVE-2026-4800","CVE-2026-4926","CVE-2026-6322","CVE-2026-13676","CVE-2026-22029","CVE-2026-25679","CVE-2026-29063","CVE-2026-32141","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-33186","CVE-2026-33810","CVE-2026-33811","CVE-2026-33816","CVE-2026-39821","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39832","CVE-2026-39835","CVE-2026-42151","CVE-2026-42154","CVE-2026-42508","CVE-2026-46595"]},{"id":"RHSA-2026:41066","title":"Red Hat Security Advisory: Red Hat Quay 3.16.5","vulnerabilityIds":["CVE-2026-6322","CVE-2026-9277","CVE-2026-10143","CVE-2026-12143","CVE-2026-13676","CVE-2026-32281","CVE-2026-32591","CVE-2026-39820","CVE-2026-39821","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39835","CVE-2026-42044","CVE-2026-42151","CVE-2026-42154","CVE-2026-42499","CVE-2026-42504","CVE-2026-42508","CVE-2026-44432","CVE-2026-44486","CVE-2026-44487","CVE-2026-44488","CVE-2026-44492","CVE-2026-44494","CVE-2026-44495","CVE-2026-44496","CVE-2026-44990","CVE-2026-45822","CVE-2026-46597","CVE-2026-48526"]},{"id":"RHSA-2026:47728","title":"Red Hat Security Advisory: OpenShift Container Platform 4.17.56 bug fix and security update","vulnerabilityIds":["CVE-2026-9697","CVE-2026-12151","CVE-2026-13676","CVE-2026-16242","CVE-2026-26996","CVE-2026-33186","CVE-2026-35469","CVE-2026-40895","CVE-2026-42154","CVE-2026-46579"]},{"id":"RHSA-2026:48699","title":"Red Hat Security Advisory: OpenShift Container Platform 4.18.51 bug fix and security update","vulnerabilityIds":["CVE-2026-4800","CVE-2026-9277","CVE-2026-16242","CVE-2026-33186","CVE-2026-40895","CVE-2026-42154"]},{"id":"RHSA-2026:29770","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2026-42154","CVE-2026-42211","CVE-2026-47262"]},{"id":"RHSA-2026:53415","title":"Red Hat Security Advisory: opentelemetry-collector security update","vulnerabilityIds":["CVE-2026-25681","CVE-2026-27136","CVE-2026-27145","CVE-2026-33811","CVE-2026-39821","CVE-2026-42151","CVE-2026-42154","CVE-2026-43870"]},{"id":"RHSA-2026:40972","title":"Red Hat Security Advisory: RHTAS 1.3.6 - Red Hat Trusted Artifact Signer Release","vulnerabilityIds":["CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39835","CVE-2026-42151","CVE-2026-42154","CVE-2026-44740","CVE-2026-46597"]},{"id":"msrc_CVE-2026-42154","title":"Prometheus: remote read endpoint allows denial of service via crafted snappy payload","vulnerabilityIds":["CVE-2026-42154"]},{"id":"RHSA-2026:50758","title":"Red Hat Security Advisory: OpenShift Container Platform 4.16.68 bug fix and security update","vulnerabilityIds":["CVE-2026-13676","CVE-2026-16242","CVE-2026-33186","CVE-2026-42154","CVE-2026-49332"]},{"id":"RHSA-2026:70267","title":"Red Hat Security Advisory: Red Hat Quay 3.14.9","vulnerabilityIds":["CVE-2026-4427","CVE-2026-6322","CVE-2026-9277","CVE-2026-10143","CVE-2026-12143","CVE-2026-13149","CVE-2026-13676","CVE-2026-14257","CVE-2026-15792","CVE-2026-15927","CVE-2026-16221","CVE-2026-18255","CVE-2026-32591","CVE-2026-33747","CVE-2026-33748","CVE-2026-33818","CVE-2026-39820","CVE-2026-39821","CVE-2026-39822","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39835","CVE-2026-42151","CVE-2026-42154","CVE-2026-42499","CVE-2026-42504","CVE-2026-42508","CVE-2026-44432","CVE-2026-44486","CVE-2026-44487","CVE-2026-44488","CVE-2026-44492","CVE-2026-44494","CVE-2026-44495","CVE-2026-44496","CVE-2026-44705","CVE-2026-44990","CVE-2026-46595","CVE-2026-46597","CVE-2026-48526","CVE-2026-49477","CVE-2026-54058","CVE-2026-54060","CVE-2026-55379","CVE-2026-55380","CVE-2026-56852","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862","CVE-2026-57231","CVE-2026-59197","CVE-2026-59199","CVE-2026-59200","CVE-2026-59204","CVE-2026-59205","CVE-2026-59869","CVE-2026-59885","CVE-2026-59886","CVE-2026-67213","CVE-2026-67214","CVE-2026-67313","CVE-2026-67314","CVE-2026-67320","CVE-2026-67321","CVE-2026-69152","CVE-2026-69153","CVE-2026-73086","CVE-2026-73088","CVE-2026-73089","CVE-2026-84375"]},{"id":"WID-SEC-W-2026-3046","title":"IBM Concert: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2019-19921","CVE-2021-23337","CVE-2024-3651","CVE-2024-39338","CVE-2024-45590","CVE-2025-13465","CVE-2025-15284","CVE-2025-15599","CVE-2025-22874","CVE-2025-47273","CVE-2025-47907","CVE-2025-52881","CVE-2025-53643","CVE-2025-55184","CVE-2025-58056","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61730","CVE-2025-64649","CVE-2025-64756","CVE-2025-67221","CVE-2025-68121","CVE-2025-68146","CVE-2026-0540","CVE-2026-2327","CVE-2026-23490","CVE-2026-23897","CVE-2026-2391","CVE-2026-23949","CVE-2026-24486","CVE-2026-25528","CVE-2026-25547","CVE-2026-25639","CVE-2026-25990","CVE-2026-26007","CVE-2026-26019","CVE-2026-26996","CVE-2026-27142","CVE-2026-27212","CVE-2026-27699","CVE-2026-27903","CVE-2026-27904","CVE-2026-28684","CVE-2026-29063","CVE-2026-29181","CVE-2026-2950","CVE-2026-31808","CVE-2026-31900","CVE-2026-32274","CVE-2026-32288","CVE-2026-32597","CVE-2026-32630","CVE-2026-32887","CVE-2026-32952","CVE-2026-33186","CVE-2026-33532","CVE-2026-33750","CVE-2026-33814","CVE-2026-33816","CVE-2026-33916","CVE-2026-34043","CVE-2026-34073","CVE-2026-34077","CVE-2026-3520","CVE-2026-35469","CVE-2026-35515","CVE-2026-3627","CVE-2026-39823","CVE-2026-39825","CVE-2026-39826","CVE-2026-39892","CVE-2026-39984","CVE-2026-40175","CVE-2026-40179","CVE-2026-40181","CVE-2026-40190","CVE-2026-40347","CVE-2026-41066","CVE-2026-41182","CVE-2026-41238","CVE-2026-41239","CVE-2026-41240","CVE-2026-41305","CVE-2026-41324","CVE-2026-41425","CVE-2026-41481","CVE-2026-41488","CVE-2026-41602","CVE-2026-41636","CVE-2026-42151","CVE-2026-42154","CVE-2026-42198","CVE-2026-42211","CVE-2026-42338","CVE-2026-42342","CVE-2026-42561","CVE-2026-42577","CVE-2026-43870","CVE-2026-44405","CVE-2026-44431","CVE-2026-44432","CVE-2026-44486","CVE-2026-44487","CVE-2026-44488","CVE-2026-44492","CVE-2026-44494","CVE-2026-44496","CVE-2026-44728","CVE-2026-4539","CVE-2026-45409","CVE-2026-45736","CVE-2026-46625","CVE-2026-4800","CVE-2026-4923","CVE-2026-4926","CVE-2026-7246","CVE-2026-8723"]},{"id":"RHSA-2026:34794","title":"Red Hat Security Advisory: OpenShift Container Platform 4.22.4 bug fix and security update","vulnerabilityIds":["CVE-2026-9595","CVE-2026-33186","CVE-2026-34986","CVE-2026-35469","CVE-2026-42154","CVE-2026-44494"]},{"id":"RHSA-2026:41030","title":"Red Hat Security Advisory: Multicluster Global Hub 1.4.7 security update","vulnerabilityIds":["CVE-2026-25681","CVE-2026-27136","CVE-2026-27145","CVE-2026-33811","CVE-2026-39821","CVE-2026-41567","CVE-2026-42151","CVE-2026-42154","CVE-2026-43870","CVE-2026-46384","CVE-2026-46385","CVE-2026-53488","CVE-2026-53492"]},{"id":"RHSA-2026:56789","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.72 bug fix and security update","vulnerabilityIds":["CVE-2025-68121","CVE-2026-4800","CVE-2026-16242","CVE-2026-26996","CVE-2026-32280","CVE-2026-33186","CVE-2026-33811","CVE-2026-39820","CVE-2026-42154","CVE-2026-42499","CVE-2026-44496","CVE-2026-50236","CVE-2026-50237"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-27091","identifiers":["EUVD-2026-27091","CVE-2026-42154"]},"retained":false,"historicalAffected":[]}],"coverage":[]}