{"id":"EUVD-2026-58632","enisaUuid":"a8fa4f35-93c0-3d78-9736-779124323d7c","description":"go-chi/chi versions 0.9.0 before 5.3.0 contains an IP spoofing vulnerability in the RealIP middleware, which resolves the request source IP (Request.RemoteAddr) using the first IP in the X-Forwarded-For header without validating trusted proxies. A malicious client can prepend a forged IP as the first value of the X-Forwarded-For header to spoof the request source IP, potentially bypassing access controls or falsifying request logs.","datePublished":"Aug 14, 2026, 11:35:28 AM","dateUpdated":"Oct 8, 2026, 3:24:32 PM","baseScore":6.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/go-chi/chi/security/advisories/GHSA-9g5q-2w5x-hmxf\nhttps://www.vulncheck.com/advisories/go-chi-chi-before-ip-spoofing-via-x-forwarded-for\n","aliases":"CVE-2026-72817\nGHSA-9f4g-6whf-f3pv\n","assigner":"VulnCheck","epss":0.24,"enisaIdProduct":[{"id":"3055bc6c-e37b-312e-97b0-ecfee41148b4","product":{"name":"chi","vendor":{"name":"go-chi"}},"product_version":"0.9.0 \u003c5.3.0"}],"enisaIdVendor":[{"id":"9c5cf9b6-6f01-3f85-8ee6-0aefa2827e61","vendor":{"name":"go-chi"}}],"enisaIdVulnerability":[{"id":"9f256411-1fa5-3d37-b54e-e0583b925672","vulnerability":{"id":"CVE-2026-72817","description":"go-chi/chi versions 0.9.0 before 5.3.0 contains an IP spoofing vulnerability in the RealIP middleware, which resolves the request source IP (Request.RemoteAddr) using the first IP in the X-Forwarded-For header without validating trusted proxies. A malicious client can prepend a forged IP as the first value of the X-Forwarded-For header to spoof the request source IP, potentially bypassing access controls or falsifying request logs.","datePublished":"Aug 14, 2026, 11:35:28 AM","dateUpdated":"Oct 8, 2026, 3:24:32 PM","status":"PUBLISHED","baseScore":6.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/go-chi/chi/security/advisories/GHSA-9g5q-2w5x-hmxf\nhttps://www.vulncheck.com/advisories/go-chi-chi-before-ip-spoofing-via-x-forwarded-for\n","enisa_id":"EUVD-2026-58632\n","assigner":"VulnCheck","epss":0.24,"dataProcessed":"Nov 1, 2026, 7:14:23 AM","vulnerabilityProduct":[{"id":"65bf1bc3-4f3c-3a46-99f9-0649b9a43e12","product":{"name":"chi","vendor":{"name":"go-chi"}},"product_version":"0.9.0 \u003c5.3.0"}],"vulnerabilityVendor":[{"id":"39018119-4e77-3a10-9240-b4279d99f30c","vendor":{"name":"go-chi"}}]}},{"id":"eb2bd66b-92cd-3039-b019-1a4fedb64b6f","vulnerability":{"id":"GHSA-9f4g-6whf-f3pv","description":"go-chi/chi versions 0.9.0 before 5.3.0 contains an IP spoofing vulnerability in the RealIP middleware, which resolves the request source IP (Request.RemoteAddr) using the first IP in the X-Forwarded-For header without validating trusted proxies. A malicious client can prepend a forged IP as the first value of the X-Forwarded-For header to spoof the request source IP, potentially bypassing access controls or falsifying request logs.","datePublished":"Aug 14, 2026, 12:31:25 PM","dateUpdated":"Aug 14, 2026, 12:31:25 PM","baseScore":0.0,"references":"https://github.com/go-chi/chi/security/advisories/GHSA-9g5q-2w5x-hmxf\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-72817\nhttps://www.vulncheck.com/advisories/go-chi-chi-before-ip-spoofing-via-x-forwarded-for\n","enisa_id":"EUVD-2026-58632\n","aliases":"CVE-2026-72817\nGHSA-9f4g-6whf-f3pv\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:03:49 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"1c9164b5-0c0e-3e8b-9a27-8d3307d8f62f","advisory":{"id":"openSUSE-SU-2026:11574-1","description":"hauler-2.0.3-1.1 on GA media","summary":"hauler-2.0.3-1.1 on GA media","datePublished":"Aug 22, 2026, 12:00:00 AM","dateUpdated":"Sep 17, 2026, 5:20:43 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11574-1.json\nhttps://www.suse.com/security/cve/CVE-2026-41888/\nhttps://www.suse.com/security/cve/CVE-2026-72817/\n","aliases":"CVE-2026-41888\nCVE-2026-72817\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"08bbc92a-2e18-325b-b7b6-09a3630b954b","product":{"name":"hauler-2.0.3-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"0a772386-03f1-354e-b344-d6fa02a99b01","product":{"name":"hauler-2.0.3-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"106382da-c6ab-37bc-a420-4b7eb2a270b4","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"204f6fa7-be72-334b-b02f-2f872f01047e","product":{"name":"hauler-0:2.0.3-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"2612b4a0-38b4-3cdf-b3e5-33d6dde357fe","product":{"name":"hauler-2.0.3-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"5ca030c3-6887-3733-a4e3-5719a17515b7","product":{"name":"hauler-0:2.0.3-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"8fda0266-ddac-381d-95f7-ca1acaddc106","product":{"name":"hauler-0:2.0.3-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"cf3a9fa6-81ef-3072-b947-2f6a34e805c7","product":{"name":"hauler-0:2.0.3-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"d428431a-c606-3921-b90c-df3706e6cba4","product":{"name":"hauler-2.0.3-1.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"22bddf34-fa47-39a3-bd51-56925eb9010a","advisory":{"id":"RHSA-2026:54420","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Aug 12, 2026, 5:43:48 PM","dateUpdated":"Oct 30, 2026, 7:27:00 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:54420\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54420.json\n","aliases":"CVE-2026-72815\nCVE-2026-72816\nCVE-2026-72817\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"097bb5bd-3d69-39b0-9c7c-56cbef58fa53","product":{"name":"cosign-main@aarch64","vendor":{"name":"Red Hat"}}},{"id":"4100e192-b2ad-35be-b4f2-7cb7535d6a04","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"77d1bff0-31e7-3f43-a463-fd38fb7e0366","product":{"name":"cosign-0:3.1.3-0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"c51eedea-c76e-3b87-bc0d-26de1c920bd2","product":{"name":"cosign-0:3.1.3-0.1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"e3e7578d-d5bb-307b-a787-66457d45cbd7","product":{"name":"cosign-main@src","vendor":{"name":"Red Hat"}}},{"id":"f1002646-1a77-3607-af81-1d8eb37dd516","product":{"name":"cosign-main@x86_64","vendor":{"name":"Red Hat"}}},{"id":"f55be290-0c65-30a1-a59e-06a42faa6e6a","product":{"name":"cosign-0:3.1.3-0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}}]}},{"id":"3117c0dc-325b-3965-bfda-d4f57df2cc03","advisory":{"id":"openSUSE-SU-2026:21918-1","description":"Security update for warewulf4","summary":"Security update for warewulf4","datePublished":"Sep 18, 2026, 10:51:38 AM","dateUpdated":"Sep 24, 2026, 5:48:21 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21918-1.json\nhttps://bugzilla.suse.com/1262805\nhttps://bugzilla.suse.com/1276100\nhttps://www.suse.com/security/cve/CVE-2026-34986/\nhttps://www.suse.com/security/cve/CVE-2026-72815/\nhttps://www.suse.com/security/cve/CVE-2026-72816/\nhttps://www.suse.com/security/cve/CVE-2026-72817/\n","aliases":"CVE-2026-34986\nCVE-2026-72815\nCVE-2026-72816\nCVE-2026-72817\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"0c4f167c-7604-3b6c-8027-40bb59244797","product":{"name":"warewulf4-0:4.7.1-bp160.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"13592195-acb2-3f20-918d-df5e0b2c3c74","product":{"name":"warewulf4-overlay-rke2-0:4.7.1-bp160.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"19bd16be-f20e-3e43-8599-ba5ae38d0aa3","product":{"name":"warewulf4-man-0:4.7.1-bp160.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"6d8216c2-4223-3872-a891-3336c7788255","product":{"name":"warewulf4-reference-doc-0:4.7.1-bp160.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"6e5f1f6e-d91c-3bf8-9144-475135abc87a","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"97c32106-2a99-3242-9dad-c688e6e46e81","product":{"name":"warewulf4-overlay-0:4.7.1-bp160.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"b6887f85-9e63-3767-b7d3-98aa0d3837fd","product":{"name":"warewulf4-0:4.7.1-bp160.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"d8790b0d-3b46-3e4e-9982-b394dabb9456","product":{"name":"warewulf4-dracut-0:4.7.1-bp160.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"e1e47721-40a4-337f-b5c9-86c517c15d57","product":{"name":"warewulf4-overlay-0:4.7.1-bp160.1.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"634f5763-aaa1-3282-928e-fb59a57acc45","advisory":{"id":"msrc_CVE-2026-72817","description":"go-chi chi 0.9.0 before 5.3.0 IP Spoofing via X-Forwarded-For","datePublished":"Aug 20, 2026, 10:02:19 PM","dateUpdated":"Sep 22, 2026, 2:49:12 PM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-72817.json\n","aliases":"CVE-2026-72817\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"67f00c6e-29eb-3dfd-94ed-13e34ee00b83","product":{"name":"azl3 gh 0:2.62.0-20.azl3","vendor":{"name":"Microsoft"}}},{"id":"984ea0ec-fbc9-3c18-b248-daee8c0c589e","product":{"name":"Azure Linux","vendor":{"name":"Microsoft"}}},{"id":"b57b0100-5ee0-308d-baca-656818229926","product":{"name":"3.0","vendor":{"name":"Wind River"}}},{"id":"c356b532-f1cb-380f-b7bf-e372d61ef310","product":{"name":"influxdb","vendor":{"name":"Microsoft"}}},{"id":"ddddf9da-95b0-34e6-b7ac-bae35f1d07f9","product":{"name":"azl3 influxdb 0:2.7.5-20.azl3","vendor":{"name":"Microsoft"}}},{"id":"e771cb48-6e3e-3349-98db-dc35797b525c","product":{"name":"gh","vendor":{"name":"r-lib"}}}]}},{"id":"74e7d739-7fd0-397c-8e16-7585e05a0e2a","advisory":{"id":"openSUSE-SU-2026:11578-1","description":"trivy-0.74.0-1.1 on GA media","summary":"trivy-0.74.0-1.1 on GA media","datePublished":"Aug 22, 2026, 12:00:00 AM","dateUpdated":"Sep 17, 2026, 5:20:49 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11578-1.json\nhttps://www.suse.com/security/cve/CVE-2026-72817/\n","aliases":"CVE-2026-72817\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"147f38a4-4321-3408-8a8c-036d3c14d0ca","product":{"name":"trivy-0.74.0-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"276ef405-1297-3f6a-8613-cfa09f2640f3","product":{"name":"trivy-0:0.74.0-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"56d397bd-cc6f-3889-9029-609f3c491f27","product":{"name":"trivy-0.74.0-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"6d5868dd-a36c-35e6-a2ef-83c9284363c3","product":{"name":"trivy-0:0.74.0-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"908900dc-f6c7-3df0-99aa-c201c250ca66","product":{"name":"trivy-0.74.0-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"9cd9d529-0c20-3bc8-baf9-7fcd33dcd138","product":{"name":"trivy-0:0.74.0-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"b7285161-28d8-3c86-b3d9-8d72cfb4b6de","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"e563e527-7653-3843-8781-a80d72cf2366","product":{"name":"trivy-0:0.74.0-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"e92d86c2-4202-3641-8d75-2966fd676cc0","product":{"name":"trivy-0.74.0-1.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"7bf4edb4-d778-30a9-9dd7-76ca2e0a813a","advisory":{"id":"openSUSE-SU-2026:21645-1","description":"Security update for trivy","summary":"Security update for trivy","datePublished":"Aug 25, 2026, 7:22:37 AM","dateUpdated":"Sep 17, 2026, 5:42:31 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21645-1.json\nhttps://bugzilla.suse.com/1276128\nhttps://www.suse.com/security/cve/CVE-2026-72815/\nhttps://www.suse.com/security/cve/CVE-2026-72816/\nhttps://www.suse.com/security/cve/CVE-2026-72817/\n","aliases":"CVE-2026-72815\nCVE-2026-72816\nCVE-2026-72817\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"0da1372b-ba62-3353-8c2e-0051c3ccdb6b","product":{"name":"trivy-0:0.74.0-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"93b4a60b-b02c-3788-958f-2b558a85e537","product":{"name":"trivy-0:0.74.0-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"9d73d383-09e4-31d9-953a-2f0c40600046","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"acb0a0b4-4f38-350a-bd64-796e77e586bc","product":{"name":"trivy-0:0.74.0-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"d8497427-9c4d-3226-918c-77875e316870","product":{"name":"trivy-0:0.74.0-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}}]}},{"id":"a5c9372e-be29-30c6-babb-d3f77017fc2e","advisory":{"id":"openSUSE-SU-2026:11591-1","description":"golang-github-v2fly-v2ray-core-5.53.0-1.1 on GA media","summary":"golang-github-v2fly-v2ray-core-5.53.0-1.1 on GA media","datePublished":"Aug 24, 2026, 12:00:00 AM","dateUpdated":"Sep 17, 2026, 5:21:03 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11591-1.json\nhttps://www.suse.com/security/cve/CVE-2026-72817/\n","aliases":"CVE-2026-72817\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"0abf626f-8442-3502-b7eb-a3a3efea9023","product":{"name":"golang-github-v2fly-v2ray-core-0:5.53.0-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"0f39d4f1-0137-3dee-8eba-d518501d63c2","product":{"name":"golang-github-v2fly-v2ray-core-5.53.0-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"2b9da5e2-9360-38c4-9279-c358c2fff96e","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"30cd1590-ba13-30a4-ab1c-a457840e482c","product":{"name":"golang-github-v2fly-v2ray-core-5.53.0-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"44c076ed-48f8-3e48-8db0-def329899b8a","product":{"name":"golang-github-v2fly-v2ray-core-5.53.0-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"61c86fd5-8a8d-3a94-8d4f-511d48364b12","product":{"name":"v2ray-core-5.53.0-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"7b0075b1-c667-335b-a304-0310396521ee","product":{"name":"golang-github-v2fly-v2ray-core-0:5.53.0-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"7cf643e5-c86d-3c9b-b731-ca48f7991d76","product":{"name":"v2ray-core-0:5.53.0-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"86cbe4af-00de-382b-b268-c3bf3c287e74","product":{"name":"v2ray-core-0:5.53.0-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"8865cc4d-16f8-34e3-9748-a02d960426f6","product":{"name":"golang-github-v2fly-v2ray-core-0:5.53.0-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"8f30e49a-32d0-369e-93a0-8e66642dcb06","product":{"name":"golang-github-v2fly-v2ray-core-5.53.0-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"958071f4-72e4-3c98-92c9-88146a416bf3","product":{"name":"v2ray-core-5.53.0-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"b4289f3e-7a0f-35af-a921-1aa0efeddfc8","product":{"name":"golang-github-v2fly-v2ray-core-0:5.53.0-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"cd7dd3ca-e5f5-351b-a538-ea70e891210e","product":{"name":"v2ray-core-5.53.0-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"f76e648d-25fd-3985-8ecb-aa1dbdd4ecb4","product":{"name":"v2ray-core-5.53.0-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"f7911e70-8aa5-30c9-9774-11a0ff833b91","product":{"name":"v2ray-core-0:5.53.0-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"f8fe7c43-f887-3cb0-b159-65b8f8ee1231","product":{"name":"v2ray-core-0:5.53.0-1.1.s390x","vendor":{"name":"SUSE"}}}]}},{"id":"b7fc9ccc-14c5-318e-a82f-661f50d4f46a","advisory":{"id":"openSUSE-SU-2026:21653-1","description":"Security update for v2ray-core","summary":"Security update for v2ray-core","datePublished":"Aug 25, 2026, 6:20:49 PM","dateUpdated":"Sep 17, 2026, 5:42:34 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21653-1.json\nhttps://bugzilla.suse.com/1258546\nhttps://bugzilla.suse.com/1266787\nhttps://bugzilla.suse.com/1276119\nhttps://www.suse.com/security/cve/CVE-2026-27017/\nhttps://www.suse.com/security/cve/CVE-2026-39821/\nhttps://www.suse.com/security/cve/CVE-2026-72815/\nhttps://www.suse.com/security/cve/CVE-2026-72816/\nhttps://www.suse.com/security/cve/CVE-2026-72817/\n","aliases":"CVE-2026-27017\nCVE-2026-39821\nCVE-2026-72815\nCVE-2026-72816\nCVE-2026-72817\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"3b437aad-e760-39c6-a559-4808882b1912","product":{"name":"golang-github-v2fly-v2ray-core-0:5.53.0-bp160.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"45164c58-03b2-37f5-a150-933e5dc15d3b","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"8de9c0fb-cbcf-3a43-9ecb-37bc2ba96763","product":{"name":"v2ray-core-0:5.53.0-bp160.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"d1a4e007-6974-300c-93e5-46b49ae6379b","product":{"name":"v2ray-core-0:5.53.0-bp160.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"d3d2d625-5361-3324-ba26-b07afb834d1b","product":{"name":"v2ray-core-0:5.53.0-bp160.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"f6c345f9-1eac-3e38-8b88-08823a61f191","product":{"name":"v2ray-core-0:5.53.0-bp160.1.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"c09b0a10-be19-3128-9ad8-d5c7f175c383","advisory":{"id":"RHSA-2026:49718","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Aug 3, 2026, 4:54:21 PM","dateUpdated":"Oct 30, 2026, 7:26:53 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:49718\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49718.json\n","aliases":"CVE-2026-72815\nCVE-2026-72816\nCVE-2026-72817\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"41b779ac-b261-3260-af39-495d8df04a33","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"43fcc979-0231-3c60-a9d9-697de3f30bbd","product":{"name":"spire1-14-main@x86_64","vendor":{"name":"Red Hat"}}},{"id":"4be89cbc-8375-3075-ad74-aebb0a6f8225","product":{"name":"spire1-14-main@aarch64","vendor":{"name":"Red Hat"}}},{"id":"5939cfe7-5180-3f04-b1e4-9670004fedbc","product":{"name":"spire1.14-oidc-discovery-provider-0:1.14.7-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"5963e036-705a-34a3-a063-01411798a810","product":{"name":"spire1.14-0:1.14.7-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"73a041d6-b432-3a43-8d6b-ac3e4ba58470","product":{"name":"spire1.14-server-0:1.14.7-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"78f0b076-0404-381c-95e1-efc5438f1d88","product":{"name":"spire1.14-agent-0:1.14.7-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"c91f4a7c-3371-3fa1-aa80-1a523f477232","product":{"name":"spire1-14-main@src","vendor":{"name":"Red Hat"}}},{"id":"ceb7f9b5-c61e-3b2f-b648-0661b94c6992","product":{"name":"spire1.14-agent-0:1.14.7-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"d56f96d9-1f15-36dc-b7b7-e04d4e48a58a","product":{"name":"spire1.14-0:1.14.7-0.4.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"e0cd98fc-88b7-3b5e-9319-c51402f946e8","product":{"name":"spire1.14-0:1.14.7-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"ef489d29-9a92-39e9-b22d-db666dd729b7","product":{"name":"spire1.14-server-0:1.14.7-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"f3b1f885-d478-389f-9d92-81f216554203","product":{"name":"spire1.14-oidc-discovery-provider-0:1.14.7-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}}]}},{"id":"d001aa55-7a6f-329b-932d-1c6eabb043cd","advisory":{"id":"openSUSE-SU-2026:21793-1","description":"Security update for hauler","summary":"Security update for hauler","datePublished":"Sep 3, 2026, 12:32:31 PM","dateUpdated":"Sep 17, 2026, 5:43:58 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21793-1.json\nhttps://bugzilla.suse.com/1265425\nhttps://bugzilla.suse.com/1276124\nhttps://bugzilla.suse.com/1276651\nhttps://bugzilla.suse.com/1277965\nhttps://www.suse.com/security/cve/CVE-2026-37236/\nhttps://www.suse.com/security/cve/CVE-2026-41178/\nhttps://www.suse.com/security/cve/CVE-2026-41888/\nhttps://www.suse.com/security/cve/CVE-2026-72815/\nhttps://www.suse.com/security/cve/CVE-2026-72816/\nhttps://www.suse.com/security/cve/CVE-2026-72817/\n","aliases":"CVE-2026-37236\nCVE-2026-41178\nCVE-2026-41888\nCVE-2026-72815\nCVE-2026-72816\nCVE-2026-72817\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"49894494-6840-373a-b223-74071c7f039a","product":{"name":"hauler-0:2.1.0-bp160.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"5bec76f5-9dcf-3bfa-bae7-b066fe8ce53b","product":{"name":"hauler-0:2.1.0-bp160.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"d9ee0cc9-0cd0-3cee-8163-8584803916d5","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}}]}},{"id":"eb6780a6-acaa-309b-aea3-7bc0d1be73f4","advisory":{"id":"openSUSE-SU-2026:21670-1","description":"Security update for cloudflared","summary":"Security update for cloudflared","datePublished":"Aug 27, 2026, 7:43:09 PM","dateUpdated":"Sep 17, 2026, 5:42:43 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21670-1.json\nhttps://bugzilla.suse.com/1276196\nhttps://www.suse.com/security/cve/CVE-2026-72815/\nhttps://www.suse.com/security/cve/CVE-2026-72816/\nhttps://www.suse.com/security/cve/CVE-2026-72817/\n","aliases":"CVE-2026-72815\nCVE-2026-72816\nCVE-2026-72817\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"03ed7c04-669d-3910-bed7-99757e89c887","product":{"name":"cloudflared-0:2026.8.2-bp160.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"1c1dcfb9-e496-36ec-aa59-b64d591c6afe","product":{"name":"cloudflared-0:2026.8.2-bp160.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"2199f209-58b0-391a-a20b-fa90683bffaa","product":{"name":"cloudflared-0:2026.8.2-bp160.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"23ca1a57-2e22-326e-860d-54251d39c6e0","product":{"name":"cloudflared-0:2026.8.2-bp160.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"c34b9841-2d66-3ac1-9953-2db2fe6f8685","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}}]}},{"id":"fd8a4d5a-fde2-36af-a2f6-0a8aaed1b286","advisory":{"id":"RHSA-2026:49732","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Aug 3, 2026, 5:08:46 PM","dateUpdated":"Oct 30, 2026, 7:26:54 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:49732\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49732.json\n","aliases":"CVE-2026-72815\nCVE-2026-72816\nCVE-2026-72817\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"628b82d3-5a3b-3fce-bd1a-0a18763dae05","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"663b4d20-77ac-3127-a97f-93dd695803fd","product":{"name":"spire1-15-main@x86_64","vendor":{"name":"Red Hat"}}},{"id":"6b2dc169-3b41-3f4e-96c7-66277692d802","product":{"name":"spire1.15-server-0:1.15.2-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"73cc2440-e1cc-3798-9aeb-31c05d0bd7bb","product":{"name":"spire1.15-server-0:1.15.2-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"75b9f1f5-3bba-3692-b3d9-9d9c7b945856","product":{"name":"spire1.15-oidc-discovery-provider-0:1.15.2-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"7c9a0701-7453-39bd-aad3-c7d6ef4ba2ba","product":{"name":"spire1-15-main@src","vendor":{"name":"Red Hat"}}},{"id":"b0366bc1-b0f1-38f4-93df-a8915c990324","product":{"name":"spire1.15-0:1.15.2-0.4.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"bb0013e6-f57c-3f2e-84e7-243efd7bbd11","product":{"name":"spire1.15-agent-0:1.15.2-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"c04b527a-8997-3aad-a529-a54db46b1066","product":{"name":"spire1.15-0:1.15.2-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"c1c2276e-b921-3d15-9e92-303e013dc55c","product":{"name":"spire1.15-0:1.15.2-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"c4ffd3d0-2389-3c14-9ac3-05e2c3030c7a","product":{"name":"spire1.15-agent-0:1.15.2-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"e3eb65e0-d252-363a-99d3-154be73c9dcb","product":{"name":"spire1.15-oidc-discovery-provider-0:1.15.2-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"e66aa92c-f76a-322b-926f-b7b21e1cefe9","product":{"name":"spire1-15-main@aarch64","vendor":{"name":"Red Hat"}}}]}},{"id":"fe78363f-fb37-3433-aa12-6759a0a3fc45","advisory":{"id":"openSUSE-SU-2026:11810-1","description":"warewulf4-4.7.1-1.1 on GA media","summary":"warewulf4-4.7.1-1.1 on GA media","datePublished":"Sep 17, 2026, 12:00:00 AM","dateUpdated":"Sep 18, 2026, 9:18:27 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11810-1.json\nhttps://www.suse.com/security/cve/CVE-2026-72815/\nhttps://www.suse.com/security/cve/CVE-2026-72817/\n","aliases":"CVE-2026-72815\nCVE-2026-72817\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"16ad083d-af51-3617-a2ba-f0b243a33b4e","product":{"name":"warewulf4-overlay-0:4.7.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"1ef65020-f3e3-375e-8e81-cda9a44d7729","product":{"name":"warewulf4-overlay-rke2-0:4.7.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"214a0a9c-da78-30ed-b510-3eb748bdbb10","product":{"name":"warewulf4-dracut-0:4.7.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"29b13315-cb3b-3e7d-8086-70bfe33f02f7","product":{"name":"warewulf4-0:4.7.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"364c1f5d-30bd-3dee-b171-3e1636dbfe24","product":{"name":"warewulf4-man-0:4.7.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"3c34ed9c-698f-390b-bcf9-14f195ebbff2","product":{"name":"warewulf4-overlay-0:4.7.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"5f4e2749-c8cb-3a88-a46c-e6b7aa50c911","product":{"name":"warewulf4-dracut-0:4.7.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"61c806d6-e6c4-39d3-86a6-84044fb28a6e","product":{"name":"warewulf4-overlay-0:4.7.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"63ac6e00-feb6-316f-a380-31c8a642a0a6","product":{"name":"warewulf4-overlay-rke2-0:4.7.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"668d6583-a431-311e-9550-abb93da3afa2","product":{"name":"warewulf4-0:4.7.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"6e1d13f4-fe4d-3ab6-8f2c-f5f2458eeeea","product":{"name":"warewulf4-man-0:4.7.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"894e0366-912f-30ff-92cc-608d0d6195a2","product":{"name":"warewulf4-dracut-0:4.7.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"90ed836f-8a77-3b59-9c49-02ef3f4b531b","product":{"name":"warewulf4-0:4.7.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"912d992e-8cb1-310e-a9c9-6f76de8dd812","product":{"name":"warewulf4-dracut-0:4.7.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"963d65ee-31db-3130-a11b-afdae9adac0e","product":{"name":"warewulf4-man-0:4.7.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"98966abb-749c-36fe-8042-82cbcfc170e3","product":{"name":"warewulf4-man-0:4.7.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"ab05040f-7661-3e8b-be60-9f95afd3783e","product":{"name":"warewulf4-overlay-0:4.7.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"b8a9d935-078a-39f3-b063-ab65d0e86f94","product":{"name":"warewulf4-overlay-rke2-0:4.7.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"c09a0a0a-9b47-3660-bbc6-abafb3e39147","product":{"name":"warewulf4-reference-doc-0:4.7.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"cbcf435d-9b2e-3a19-89ae-ffedc2311398","product":{"name":"warewulf4-reference-doc-0:4.7.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"dfd59d59-dcbe-39c1-877e-c1882957b00e","product":{"name":"warewulf4-0:4.7.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"e48d743f-88c7-35ad-be94-2cd05e168bfc","product":{"name":"warewulf4-overlay-rke2-0:4.7.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"ef30979e-71c1-3eea-be3e-62dd66627512","product":{"name":"warewulf4-reference-doc-0:4.7.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"f592e14a-595d-3dbe-935e-7d20ba8c788a","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"f90afe64-50a5-3539-a596-83be079e7349","product":{"name":"warewulf4-reference-doc-0:4.7.1-1.1.s390x","vendor":{"name":"SUSE"}}}]}}]}