{"id":"EUVD-2026-8538","enisaUuid":"ffc5bd7a-8bf4-3dd0-a486-7bfa08ef2c13","description":"NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. The WebSockets handling of NATS messages handles compressed messages via the WebSockets negotiated compression. Prior to versions 2.11.2 and 2.12.3, the implementation bound the memory size of a NATS message but did not independently bound the memory consumption of the memory stream when constructing a NATS message which might then fail validation for size reasons. An attacker can use a compression bomb to cause excessive memory consumption, often resulting in the operating system terminating the server process. The use of compression is negotiated before authentication, so this does not require valid NATS credentials to exploit. The fix, present in versions 2.11.2 and 2.12.3, was to bounds the decompression to fail once the message was too large, instead of continuing on. The vulnerability only affects deployments which use WebSockets and which expose the network port to untrusted end-points.","datePublished":"Feb 24, 2026, 3:59:17 PM","dateUpdated":"Feb 26, 2026, 9:33:40 PM","baseScore":5.9,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/nats-io/nats-server/security/advisories/GHSA-qrvq-68c2-7grw\nhttps://github.com/nats-io/nats-server/commit/f77fb7c4535e6727cc1a2899cd8e6bbdd8ba2017\nhttps://github.com/nats-io/nats-server/releases/tag/v2.11.12\nhttps://github.com/nats-io/nats-server/releases/tag/v2.12.3\n","aliases":"CVE-2026-27571\nGHSA-qrvq-68c2-7grw\n","assigner":"GitHub_M","epss":0.54,"enisaIdProduct":[{"id":"5386f7a8-ba1e-3fd0-97ff-1878b4a50958","product":{"name":"nats-server","vendor":{"name":"nats-io"}},"product_version":"\u003c 2.11.12"},{"id":"bfa784d9-b63b-32ee-a5e3-4b5d4819dcc5","product":{"name":"nats-server","vendor":{"name":"nats-io"}},"product_version":"2.12.0-RC.1, \u003c 2.12.3"}],"enisaIdVendor":[{"id":"66bbd223-1761-3136-9f0f-025a2d1ed486","vendor":{"name":"nats-io"}}],"enisaIdVulnerability":[{"id":"a1b2eb1f-43ba-348e-9d7e-8e144d9bd791","vulnerability":{"id":"CVE-2026-27571","description":"NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. The WebSockets handling of NATS messages handles compressed messages via the WebSockets negotiated compression. Prior to versions 2.11.2 and 2.12.3, the implementation bound the memory size of a NATS message but did not independently bound the memory consumption of the memory stream when constructing a NATS message which might then fail validation for size reasons. An attacker can use a compression bomb to cause excessive memory consumption, often resulting in the operating system terminating the server process. The use of compression is negotiated before authentication, so this does not require valid NATS credentials to exploit. The fix, present in versions 2.11.2 and 2.12.3, was to bounds the decompression to fail once the message was too large, instead of continuing on. The vulnerability only affects deployments which use WebSockets and which expose the network port to untrusted end-points.","datePublished":"Feb 24, 2026, 3:59:17 PM","dateUpdated":"Feb 26, 2026, 9:33:40 PM","status":"PUBLISHED","baseScore":5.9,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/nats-io/nats-server/security/advisories/GHSA-qrvq-68c2-7grw\nhttps://github.com/nats-io/nats-server/commit/f77fb7c4535e6727cc1a2899cd8e6bbdd8ba2017\nhttps://github.com/nats-io/nats-server/releases/tag/v2.11.12\nhttps://github.com/nats-io/nats-server/releases/tag/v2.12.3\n","enisa_id":"EUVD-2026-8538\n","assigner":"GitHub_M","epss":0.54,"dataProcessed":"Nov 15, 2026, 7:21:11 AM","vulnerabilityProduct":[{"id":"2e944e56-5053-394d-81b0-75a3727c112b","product":{"name":"nats-server","vendor":{"name":"nats-io"}},"product_version":"2.12.0-RC.1, \u003c 2.12.3"},{"id":"be9092ca-b5f5-33ca-af5e-275ca9a9332c","product":{"name":"nats-server","vendor":{"name":"nats-io"}},"product_version":"\u003c 2.11.12"}],"vulnerabilityVendor":[{"id":"186b33ac-3649-31ea-a6f9-4aa7540223b3","vendor":{"name":"nats-io"}}]}},{"id":"e0adf7df-105d-31d7-9c77-0767b20f718b","vulnerability":{"id":"GHSA-qrvq-68c2-7grw","description":"nats-server websockets are vulnerable to pre-auth memory DoS","datePublished":"Feb 24, 2026, 4:04:53 PM","dateUpdated":"Feb 27, 2026, 8:03:26 PM","baseScore":0.0,"references":"https://github.com/nats-io/nats-server/security/advisories/GHSA-qrvq-68c2-7grw\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-27571\nhttps://github.com/nats-io/nats-server/commit/f77fb7c4535e6727cc1a2899cd8e6bbdd8ba2017\nhttps://github.com/nats-io/nats-server\nhttps://github.com/nats-io/nats-server/releases/tag/v2.11.12\nhttps://github.com/nats-io/nats-server/releases/tag/v2.12.3\nhttps://pkg.go.dev/vuln/GO-2026-4533\n","enisa_id":"EUVD-2026-8538\n","aliases":"GHSA-qrvq-68c2-7grw\nCVE-2026-27571\n","epss":0.0,"dataProcessed":"Nov 15, 2026, 2:48:04 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"26789de9-d2ac-311b-8431-d19fc601fbb6","advisory":{"id":"msrc_CVE-2026-27571","description":"nats-server websockets are vulnerable to pre-auth memory DoS","datePublished":"Feb 2, 2026, 12:00:00 AM","dateUpdated":"Feb 28, 2026, 1:39:54 AM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-27571.json\n","aliases":"CVE-2026-27571\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"1781580f-7a03-3143-b147-f72382c045c4","product":{"name":"Azure Linux","vendor":{"name":"Microsoft"}}},{"id":"31fbc811-4e73-319a-93ed-e35b49720ffa","product":{"name":"3.0","vendor":{"name":"Wind River"}}},{"id":"5514c669-ab3e-31e8-88a0-0dbcd6ebe674","product":{"name":"2.0","vendor":{"name":"Smiths Medical"}}},{"id":"78d61ba1-c7f9-3d55-b331-2f83f6e70210","product":{"name":"telegraf","vendor":{"name":"Microsoft"}}},{"id":"d2484d6e-fc18-3913-9e23-89f7c0aea82d","product":{"name":"azl3 telegraf 1.31.0-12","vendor":{"name":"Microsoft"}}},{"id":"d48a5b8a-ed43-368f-92a1-28c6d213759e","product":{"name":"cbl2 telegraf 1.29.4-18","vendor":{"name":"Microsoft"}}}]}},{"id":"843ca365-cd17-3af1-af09-3c8d6d94b4b1","advisory":{"id":"RHSA-2026:5110","description":"Red Hat Security Advisory: Multicluster Global Hub 1.5.4 security update","summary":"Multicluster Global Hub v1.5.4 general availability release images, which provide security fixes, bug fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Important. \nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.","datePublished":"Mar 19, 2026, 10:27:09 AM","dateUpdated":"Nov 14, 2026, 12:27:26 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:5110\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5110.json\n","aliases":"CVE-2025-61726\nCVE-2025-61728\nCVE-2025-61729\nCVE-2025-68121\nCVE-2026-25679\nCVE-2026-27137\nCVE-2026-27571\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"02c71395-df0a-3849-b670-26ae041ff37c","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64","vendor":{"name":"Red Hat"}}},{"id":"051c4510-b62f-35c6-a1a0-55509f48fcef","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x","vendor":{"name":"Red Hat"}}},{"id":"08a3da16-ceff-32b5-bccd-d79e933b1a01","product":{"name":"Red Hat multicluster global hub 1.5.2","vendor":{"name":"Red Hat"}}},{"id":"09986f6d-48d4-34af-a960-27cb69e7333a","product":{"name":"Red Hat multicluster global hub 1.5.3","vendor":{"name":"Red Hat"}}},{"id":"09f02153-b8c3-374d-9b81-fb719eb88cce","product":{"name":"Multicluster Global Hub 1.5.6","vendor":{"name":"Red Hat"}}},{"id":"15d7554b-ea70-35a1-8e7a-8b81960e1525","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64","vendor":{"name":"Red Hat"}}},{"id":"1c2bb111-24e5-3f7e-884b-6e74879040e2","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64","vendor":{"name":"Red Hat"}}},{"id":"212679b3-2954-3c3a-9b07-0f581a902221","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"278a3349-a98c-3f71-adc6-6bee221e93de","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64","vendor":{"name":"Red Hat"}}},{"id":"3332dccd-ee92-3d7e-a593-d7fb387fdf35","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"3a097167-7e87-3bd6-9a6e-869717148902","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"4d2e27ee-62ad-3f8d-9235-e1f928450580","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64","vendor":{"name":"Red Hat"}}},{"id":"5beabf5f-4a89-3b0b-895e-0f2b263460b9","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64","vendor":{"name":"Red Hat"}}},{"id":"640e545f-a7ea-3d91-a3e8-3209e540f39c","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64","vendor":{"name":"Red Hat"}}},{"id":"825cc3a3-b8a0-340f-b399-fb471b367e2f","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"86b98732-92ce-37f8-9179-c47c9be66147","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x","vendor":{"name":"Red Hat"}}},{"id":"94cf5b57-b6c7-38af-a88c-3057094c7e8e","product":{"name":"Multicluster Global Hub 1.5.4","vendor":{"name":"Red Hat"}}},{"id":"9703daea-4fcd-3f78-bfc8-9463f6129306","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x","vendor":{"name":"Red Hat"}}},{"id":"9717bb2d-4d86-3c94-b9ed-ffe49580bf8f","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"a5551500-13a1-3f2e-9494-0feb0f378297","product":{"name":"Red Hat multicluster global hub 1.5.1","vendor":{"name":"Red Hat"}}},{"id":"ae51b18d-c224-367f-a232-4f3d52e6c786","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x","vendor":{"name":"Red Hat"}}},{"id":"bafdcad9-372a-3b90-90bc-68ab3ac01b6b","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x","vendor":{"name":"Red Hat"}}},{"id":"c9d72b7d-9f8b-3273-9715-7ccc0e1ffeb7","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64","vendor":{"name":"Red Hat"}}},{"id":"d4b2b66c-71aa-30b9-b068-7e8fe345945d","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64","vendor":{"name":"Red Hat"}}},{"id":"dfed0a83-36a3-3a3b-8fc9-c48018eea640","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64","vendor":{"name":"Red Hat"}}},{"id":"e73fc954-5eb5-3d45-9a21-314e15cd86d9","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64","vendor":{"name":"Red Hat"}}},{"id":"ebca84e6-7b53-325e-9df5-1033085a4d12","product":{"name":"Multicluster Global Hub 1.5.8","vendor":{"name":"Red Hat"}}}]}},{"id":"b051cbad-c72c-34aa-b43b-2b75002e6366","advisory":{"id":"RHSA-2026:6226","description":"Red Hat Security Advisory: Multicluster Global Hub 1.6.2 security update","summary":"Multicluster Global Hub v1.6.2 general availability release images, which provide security fixes, bug fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Important. \nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.","datePublished":"Mar 31, 2026, 2:53:32 AM","dateUpdated":"Nov 14, 2026, 12:27:41 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:6226\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6226.json\n","aliases":"CVE-2025-47907\nCVE-2025-57810\nCVE-2025-58183\nCVE-2025-58754\nCVE-2025-59343\nCVE-2025-61726\nCVE-2025-61728\nCVE-2025-61729\nCVE-2025-68121\nCVE-2026-27571\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"07448562-657e-3c88-b435-0f5beb84b8c9","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b59011fdb03a6f9696d6a27b35fd05f0cdb87243e4aac824a309ff8e077361c6_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"1626b4ad-d3f9-3db0-963b-8970a5d3bc7d","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:2e122bde4ebe81137cc444ee6f320bdb9ecc44f04a6f7cc8bddc4118cefcf93c_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"1e535768-b033-3450-9b86-0f0770c3782e","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d4329b36c0c1dda7dbbcfeb826b045df9d1aadd4d606ac62a70a8f7740c445d5_amd64","vendor":{"name":"Red Hat"}}},{"id":"306fc232-863e-38e0-b2ea-3f617da83013","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:be5fe7a5bb171515bbdd7f747f76aa0cf8486ed62f7a1ee80405b602a810aef7_arm64","vendor":{"name":"Red Hat"}}},{"id":"3e6a218f-5341-39d4-95cf-37c22b3bef93","product":{"name":"Multicluster Global Hub 1.6.2","vendor":{"name":"Red Hat"}}},{"id":"3f3bc416-3c36-3e6b-bd33-632e337e1b28","product":{"name":"Multicluster Global Hub 1.6.6","vendor":{"name":"Red Hat"}}},{"id":"57e308e9-edde-3083-b3b7-bea4d4fa379f","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:9ce0cdeed264fe07ae4372d898bf4842aa54983206967748d00bdc835555d25f_amd64","vendor":{"name":"Red Hat"}}},{"id":"6510529f-d693-3a59-a560-34dc9f7ab484","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:7a15c7d86a736b47e5622eab05a3afc503211987f6f43a3dbc84e78bbf669571_s390x","vendor":{"name":"Red Hat"}}},{"id":"69a44096-d2f2-3d8e-b8e4-16d1d61f1b9b","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4bc6678736ae57b9980042fa1890226fa0e9850c780815ec641425af6c24c121_amd64","vendor":{"name":"Red Hat"}}},{"id":"6b63db73-d85d-39b7-850d-d476b0a78c46","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:4bc7e3ff6dbf302216dc178f810b05d7a2111dc282f0f750756cf0bf6087500a_arm64","vendor":{"name":"Red Hat"}}},{"id":"75fec068-9f81-3a7c-a87d-4e6cf8fb8e22","product":{"name":"Multicluster Global Hub 1.6.5","vendor":{"name":"Red Hat"}}},{"id":"785c8370-621a-3b4f-9fdc-5d41d03ca923","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7a0ed5f55190d1688180a775074916bb6f3a4cb4dde71b48481c9858b514b7e_amd64","vendor":{"name":"Red Hat"}}},{"id":"83e31ace-a599-3a71-8daf-0f8a05d2f20a","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:239e83fb26062ff6f3f7a50e299e54e272e6342660bb3f387f952edf9e354763_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"9078d7e4-847b-3daf-acf5-a18b0b395eac","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:cbeb3fb1de219e3e515ba7e02f34836ebd1717d2dced4a6f1f46058f57e6d5eb_s390x","vendor":{"name":"Red Hat"}}},{"id":"9d276c5a-c724-32b4-b918-1eb1614eab79","product":{"name":"Red Hat multicluster global hub 1.6.0","vendor":{"name":"Red Hat"}}},{"id":"a7b2ba24-3554-3f66-8a18-bbb96ffbd84c","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:437e02ffbc088d65e6697c2fd1d45ffd52c24828846a793661eacf2a26e297bc_s390x","vendor":{"name":"Red Hat"}}},{"id":"a926117e-504f-378c-b937-6dcf32c0212b","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:39c70f4fcd2ad2bb8495de3e748f8ec60d0dad9e2f7e4d41ebcfde777d99cc0c_s390x","vendor":{"name":"Red Hat"}}},{"id":"b5be408e-0e1b-3b4a-a17e-11341dc5c38d","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:48c808f50398202bcac609f760af2289df8e190cdf6c51165debe4354602573b_arm64","vendor":{"name":"Red Hat"}}},{"id":"badfc05f-4c01-34d7-bf07-9674eaf6a586","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f244199ed6bfaa0b2402a94d1b68b7249cf3eda9d0147316c3d8879d1f897986_amd64","vendor":{"name":"Red Hat"}}},{"id":"bfabcb67-9760-3910-a95a-71d0d5f2e092","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:4736201438be34ef50de48b9a3d66db5afc5e5831f43c03b0997868601f6a9df_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"c6735883-49cb-30c1-8a92-dcef4069aa17","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9d6c8bd778da4dd6e45730d8a6c00b8e24e930de6c7b64461d348315495134f4_amd64","vendor":{"name":"Red Hat"}}},{"id":"c73443c1-177c-3d1d-9bf5-7c26b9ba15dd","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:035d205705b2efd62713bea9d05cffdc5db7a437f050c4a3e3f12746b05c29d4_arm64","vendor":{"name":"Red Hat"}}},{"id":"c8b8f1f9-3839-3bca-9da7-f9373af8b402","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b5eb668bca1c305eb096d72da69bcb7588e5da5ccd4a6ca765f9075f38699a7a_s390x","vendor":{"name":"Red Hat"}}},{"id":"c9d844c0-1a6c-3764-9abc-be2ab3acaa52","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:78651ded14b7828ba304579cc335543b993b395d0725c1980ea388b2130076d2_arm64","vendor":{"name":"Red Hat"}}},{"id":"d60722de-0074-3dff-96cc-d2b90479d02c","product":{"name":"registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3ad24c00931c4024f1acf777d5b4abe874fd90f41a7d16053b11b0a24542ff97_ppc64le","vendor":{"name":"Red Hat"}}}]}},{"id":"e82c649b-1238-308e-9552-b38848f65373","advisory":{"id":"WID-SEC-W-2026-0487","description":"NATS Server: Schwachstelle ermöglicht Denial of Service","summary":"Ein entfernter, anonymer Angreifer kann eine Schwachstelle in NATS Server ausnutzen, um einen Denial of Service Angriff durchzuführen.","datePublished":"Feb 23, 2026, 11:00:00 PM","dateUpdated":"Feb 24, 2026, 11:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0487.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-0487\n","aliases":"CVE-2026-27571\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"1bb4dae3-d598-361d-8b8d-1f6e335c7650","product":{"name":"NATS Server","vendor":{"name":"open source"}}},{"id":"1f13d84a-0ca0-3fc3-b54b-9668e6f566b3","product":{"name":"2.11.12","vendor":{"name":"open source"}}},{"id":"243d5cd3-5b28-32dc-8536-9707618f9c72","product":{"name":"2.12.3","vendor":{"name":"Rancher"}}}]}}]}