Distrust compromised intermediate certificates in crypto/x509
Collected exploitation and prediction evidence
Risk source coverageCISA KEV is observed exploitation evidence. FIRST EPSS is a dated prediction of exploitation in the next 30 days. Missing scores are unknown. This collector requests predictions only for explicit CVE aliases in the public NuGet archive; Microsoft release views retain their existing prediction scope.
No collected risk observation for these identifiers. This does not establish absence of exploitation or a zero probability.
cve-program · CVE-2026-111943
PublishedOn most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.
- Source published
- 21 Oct 2026 00:52:18 UTC
- Source modified
- 30 Oct 2026 13:08:13 UTC
- Observed here
- 30 Oct 2026 15:45:26 UTC
- Source terms
- CVE Program Terms of Use
Original source record · Cite this exact observation · Complete original publisher JSON
This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: cve-program · CVE Program Terms of Use. Source text is retained; field grouping and change labels are provided by ChangeIntel.
euvd · EUVD-2026-106926
PublishedOn most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.
EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.
Original publisher date fields
datePublished: Oct 21, 2026, 12:52:18 AM
dateUpdated: Oct 30, 2026, 1:08:13 PM
206 related source bulletins · separate from aliases
RHSA-2026:92217: Red Hat Security Advisory: rhc security update
CVE-2024-9355 · CVE-2024-45336 · CVE-2025-68121 · CVE-2026-27145 · CVE-2026-32280 · CVE-2026-32282 · CVE-2026-32283 · CVE-2026-33811 · CVE-2026-33818 · CVE-2026-39821 · CVE-2026-42504 · CVE-2026-56858 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:86978: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:90329: Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 security advisory
CVE-2025-61726 · CVE-2026-25679 · CVE-2026-27145 · CVE-2026-32280 · CVE-2026-32283 · CVE-2026-33811 · CVE-2026-33818 · CVE-2026-39821 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-73500 · CVE-2026-78669 · CVE-2026-111943
RHSA-2026:92860: Red Hat Security Advisory: Satellite 6.18 security update
CVE-2026-8924 · CVE-2026-18660 · CVE-2026-19203 · CVE-2026-56852 · CVE-2026-59646 · CVE-2026-63072 · CVE-2026-63076 · CVE-2026-68494 · CVE-2026-68497 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-89407 · CVE-2026-89425 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:86839: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:89741: Red Hat Security Advisory: rhc security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:89726: Red Hat Security Advisory: OpenShift Container Platform 4.18.59 bug fix and security update
CVE-2026-33814 · CVE-2026-75888 · CVE-2026-93017 · CVE-2026-111943
openSUSE-SU-2026:12236-1: docker-compose-5.6.1-1.1 on GA media
CVE-2026-111943
RHSA-2026:89921: Red Hat Security Advisory: git-lfs security update
CVE-2026-111943
RHSA-2026:86733: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:91191: Red Hat Security Advisory: Red Hat build of MicroShift 4.19.53 security update
CVE-2026-33818 · CVE-2026-42504 · CVE-2026-56858 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-111943
RHSA-2026:88262: Red Hat Security Advisory: buildah security update
CVE-2025-11395 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-111943
openSUSE-SU-2026:12298-1: kubelogin-0.2.22-1.1 on GA media
CVE-2026-111943
RHSA-2026:92286: Red Hat Security Advisory: OpenShift Container Platform 4.21.41 packages and security update
CVE-2026-111943
RHSA-2026:95206: Red Hat Security Advisory: Updated Red Hat OpenStack Platform 16.2 director Operator container images
CVE-2026-27145 · CVE-2026-32283 · CVE-2026-33811 · CVE-2026-33818 · CVE-2026-42504 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-111943
RHSA-2026:88280: Red Hat Security Advisory: golang-github-openprinting-ipp-usb security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:89752: Red Hat Security Advisory: oci-seccomp-bpf-hook security update
CVE-2026-56853 · CVE-2026-78667 · CVE-2026-111943
RHSA-2026:90493: Red Hat Security Advisory: osbuild-composer security update
CVE-2026-25681 · CVE-2026-27136 · CVE-2026-33186 · CVE-2026-42502 · CVE-2026-55677 · CVE-2026-111943
RHSA-2026:86918: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:87732: Red Hat Security Advisory: grafana security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943
msrc_CVE-2026-111943: Go: CVE-2026-111943 Distrust compromised intermediate certificates in crypto/x509
CVE-2026-111943
RHSA-2026:86930: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:91958: Red Hat Security Advisory: osbuild-composer security update
CVE-2026-41178 · CVE-2026-42504 · CVE-2026-55677 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:89740: Red Hat Security Advisory: rhc security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943
RHBA-2026:92273: Red Hat Bug Fix Advisory: zero trust workload identity manager for Red Hat OpenShift 1.0.4
CVE-2026-33818 · CVE-2026-111943
RHSA-2026:95209: Red Hat Security Advisory: Updated Red Hat OpenStack Platform 17.1 director Operator container images
CVE-2026-111943
RHSA-2026:86948: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:93596: Red Hat Security Advisory: opentelemetry-collector security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:86952: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:94575: Red Hat Security Advisory: zero trust workload identity manager for Red Hat OpenShift 1.1.3
CVE-2026-111943
RHSA-2026:90462: Red Hat Security Advisory: skopeo security update
CVE-2025-11395 · CVE-2026-78667 · CVE-2026-111943
RHSA-2026:88339: Red Hat Security Advisory: grafana security update
CVE-2024-45336 · CVE-2025-22866 · CVE-2025-68121 · CVE-2026-27137 · CVE-2026-32280 · CVE-2026-32281 · CVE-2026-32282 · CVE-2026-32283 · CVE-2026-33810 · CVE-2026-33818 · CVE-2026-39820 · CVE-2026-39821 · CVE-2026-42499 · CVE-2026-42504 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:89832: Red Hat Security Advisory: rhc security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:88187: Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.11.3 release
CVE-2026-108859 · CVE-2026-111943
RHBA-2026:89332: Red Hat Bug Fix Advisory: OpenShift Container Platform 4.20.44 packages update
CVE-2026-111943
RHSA-2026:89884: Red Hat Security Advisory: delve security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:86927: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:90513: Red Hat Security Advisory: ignition security update
CVE-2026-111943
openSUSE-SU-2026:12239-1: go1.27-1.27.3-1.1 on GA media
CVE-2026-111943
RHSA-2026:89915: Red Hat Security Advisory: rhc security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943
openSUSE-SU-2026:12291-1: hcloud-cli-1.70.2-1.1 on GA media
CVE-2026-111943
openSUSE-SU-2026:12253-1: tekton-cli-0.46.2-1.1 on GA media
CVE-2026-111943 · CVE-2026-84304
RHSA-2026:86960: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:86029: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
CVE-2026-94440 · CVE-2026-97030 · CVE-2026-111943
RHSA-2026:91587: Red Hat Security Advisory: osbuild-composer security update
CVE-2026-42504 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:87008: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:89839: Red Hat Security Advisory: OpenShift Container Platform 4.14.77 bug fix and security update
CVE-2026-14362 · CVE-2026-33814 · CVE-2026-39821 · CVE-2026-55204 · CVE-2026-59887 · CVE-2026-111943
RHSA-2026:92372: Red Hat Security Advisory: osbuild-composer security update
CVE-2026-42504 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:88189: Red Hat Security Advisory: grafana-pcp security update
CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:90274: Red Hat Security Advisory: OpenShift Container Platform 4.12.102 bug fix and security update
CVE-2026-33186 · CVE-2026-33814 · CVE-2026-39829 · CVE-2026-39830 · CVE-2026-39831 · CVE-2026-39832 · CVE-2026-46597 · CVE-2026-55204 · CVE-2026-75888 · CVE-2026-83589 · CVE-2026-93017 · CVE-2026-111943
RHSA-2026:88394: Red Hat Security Advisory: grafana-pcp security update
CVE-2024-45336 · CVE-2025-22866 · CVE-2025-68121 · CVE-2026-27137 · CVE-2026-32280 · CVE-2026-32281 · CVE-2026-32282 · CVE-2026-32283 · CVE-2026-33810 · CVE-2026-33818 · CVE-2026-39821 · CVE-2026-42504 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:86946: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:86987: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:89031: Red Hat Security Advisory: Red Hat OpenShift Builds 1.8.3
CVE-2026-46600 · CVE-2026-56851 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:89041: Red Hat Security Advisory: Red Hat OpenShift Builds 1.9.2
CVE-2026-33818 · CVE-2026-39821 · CVE-2026-40161 · CVE-2026-40938 · CVE-2026-46600 · CVE-2026-56851 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84304 · CVE-2026-84445 · CVE-2026-97031 · CVE-2026-111943
WID-SEC-W-2026-4049: Golang Go: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
CVE-2026-111943
RHSA-2026:91719: Red Hat Security Advisory: ignition security update
CVE-2026-111943
RHSA-2026:86944: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:89925: Red Hat Security Advisory: git-lfs security update
CVE-2026-111943
RHBA-2026:92274: Red Hat Bug Fix Advisory: zero trust workload identity manager for Red Hat OpenShift 1.0.4
CVE-2026-33818 · CVE-2026-111943
RHSA-2026:92859: Red Hat Security Advisory: Satellite 6.17 security update
CVE-2026-8924 · CVE-2026-18660 · CVE-2026-19203 · CVE-2026-56852 · CVE-2026-59646 · CVE-2026-63072 · CVE-2026-63076 · CVE-2026-68494 · CVE-2026-68497 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-89407 · CVE-2026-89425 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:89744: Red Hat Security Advisory: grafana security update
CVE-2026-17183 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:90518: Red Hat Security Advisory: ignition security update
CVE-2026-111943
RHSA-2026:94254: Red Hat Security Advisory: zero trust workload identity manager for Red Hat OpenShift 1.1.3
CVE-2026-111943
RHSA-2026:89341: Red Hat Security Advisory: OpenShift Container Platform 4.20.44 bug fix and security update
CVE-2026-33814 · CVE-2026-34986 · CVE-2026-39821 · CVE-2026-46597 · CVE-2026-104795 · CVE-2026-107176 · CVE-2026-111943
RHSA-2026:89131: Red Hat Security Advisory: Red Hat OpenShift Builds 1.9.2
CVE-2026-33818 · CVE-2026-39821 · CVE-2026-40161 · CVE-2026-40938 · CVE-2026-46600 · CVE-2026-56851 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84304 · CVE-2026-84445 · CVE-2026-97031 · CVE-2026-111943 · CVE-2026-114406
RHSA-2026:89761: Red Hat Security Advisory: skopeo security update
CVE-2025-11395 · CVE-2026-78667 · CVE-2026-111943
RHSA-2026:90725: Red Hat Security Advisory: rhc security update
CVE-2024-9355 · CVE-2024-45336 · CVE-2025-68121 · CVE-2026-27145 · CVE-2026-32280 · CVE-2026-32282 · CVE-2026-32283 · CVE-2026-33811 · CVE-2026-33818 · CVE-2026-39821 · CVE-2026-42504 · CVE-2026-56858 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943
RHBA-2026:89649: Red Hat Bug Fix Advisory: OpenShift Container Platform 4.19.53 packages update
CVE-2026-111943
openSUSE-SU-2026:22152-1: Security update for go1.26
CVE-2026-111943 · CVE-2026-78663 · CVE-2026-78669
RHSA-2026:89198: Red Hat Security Advisory: OpenShift Container Platform 4.22.20 bug fix and security update
CVE-2026-33814 · CVE-2026-39821 · CVE-2026-42502 · CVE-2026-63209 · CVE-2026-93017 · CVE-2026-104795 · CVE-2026-107176 · CVE-2026-111943
openSUSE-SU-2026:12226-1: gotosocial-0.22.3-1.1 on GA media
CVE-2026-111943
openSUSE-SU-2026:12320-1: fleet-cli-0.16.3-1.1 on GA media
CVE-2026-111943 · CVE-2026-78659 · CVE-2026-78660
RHSA-2026:92497: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.2.11
CVE-2026-56857 · CVE-2026-56866 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943
RHSA-2026:89888: Red Hat Security Advisory: delve security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:89892: Red Hat Security Advisory: rhc security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:88336: Red Hat Security Advisory: podman security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-111943
openSUSE-SU-2026:12264-1: okteto-3.24.1-1.1 on GA media
CVE-2026-111943
openSUSE-SU-2026:12260-1: buildpacks-cli-0.40.10-1.1 on GA media
CVE-2026-111943 · CVE-2026-17106 · CVE-2026-61801 · CVE-2026-78659 · CVE-2026-78662
RHSA-2026:86738: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:89196: Red Hat Security Advisory: OpenShift Container Platform 4.22.20 packages and security update
CVE-2026-111943
RHSA-2026:87065: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:87042: Red Hat Security Advisory: golang security, bug fix, and enhancement update
CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943
RHSA-2026:93617: Red Hat Security Advisory: opentelemetry-collector security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:88317: Red Hat Security Advisory: grafana-pcp security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:89818: Red Hat Security Advisory: Red Hat build of MicroShift 4.21.40 security update
CVE-2026-111943
RHSA-2026:86929: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:91329: Red Hat Security Advisory: Red Hat Service Interconnect 2.2.4 Release (rpms)
CVE-2026-111943
RHSA-2026:89922: Red Hat Security Advisory: git-lfs security update
CVE-2026-111943
RHSA-2026:86776: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:87153: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:86972: Red Hat Security Advisory: grafana-pcp security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:87043: Red Hat Security Advisory: golang security, bug fix, and enhancement update
CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943
RHSA-2026:87040: Red Hat Security Advisory: golang security, bug fix, and enhancement update
CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943
RHSA-2026:87246: Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update
CVE-2024-45336 · CVE-2025-4673 · CVE-2025-22866 · CVE-2025-22874 · CVE-2025-68121 · CVE-2026-27137 · CVE-2026-27143 · CVE-2026-27144 · CVE-2026-27145 · CVE-2026-32280 · CVE-2026-32281 · CVE-2026-32282 · CVE-2026-32283 · CVE-2026-33810 · CVE-2026-33811 · CVE-2026-33814 · CVE-2026-33818 · CVE-2026-39820 · CVE-2026-39821 · CVE-2026-42499 · CVE-2026-42504 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943
RHSA-2026:86922: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:86939: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
openSUSE-SU-2026:12238-1: gitoxide-0.61.0-1.1 on GA media
CVE-2026-111943
RHSA-2026:86990: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:88395: Red Hat Security Advisory: grafana-pcp security update
CVE-2024-45336 · CVE-2025-22866 · CVE-2025-68121 · CVE-2026-27137 · CVE-2026-32280 · CVE-2026-32281 · CVE-2026-32282 · CVE-2026-32283 · CVE-2026-33810 · CVE-2026-33818 · CVE-2026-39821 · CVE-2026-42504 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
openSUSE-SU-2026:12303-1: pinact-5.0.2-1.1 on GA media
CVE-2026-111943
RHSA-2026:88397: Red Hat Security Advisory: grafana security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:91651: Red Hat Security Advisory: Red Hat Developer Hub 1.9.10 release.
CVE-2026-47683 · CVE-2026-47686 · CVE-2026-47698 · CVE-2026-84445 · CVE-2026-92934 · CVE-2026-92935 · CVE-2026-92937 · CVE-2026-92938 · CVE-2026-92939 · CVE-2026-92940 · CVE-2026-92941 · CVE-2026-92942 · CVE-2026-92944 · CVE-2026-92946 · CVE-2026-92947 · CVE-2026-92948 · CVE-2026-92950 · CVE-2026-92951 · CVE-2026-92953 · CVE-2026-92954 · CVE-2026-92955 · CVE-2026-92956 · CVE-2026-92957 · CVE-2026-92958 · CVE-2026-92959 · CVE-2026-92960 · CVE-2026-92961 · CVE-2026-93603 · CVE-2026-93604 · CVE-2026-93605 · CVE-2026-93606 · CVE-2026-111943
RHSA-2026:89713: Red Hat Security Advisory: OpenShift Container Platform 4.16.74 packages and security update
CVE-2026-33814 · CVE-2026-62146 · CVE-2026-111943
RHSA-2026:89885: Red Hat Security Advisory: delve security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:90994: Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update
CVE-2024-45336 · CVE-2025-22866 · CVE-2025-22874 · CVE-2025-68121 · CVE-2026-27137 · CVE-2026-27143 · CVE-2026-27144 · CVE-2026-27145 · CVE-2026-32280 · CVE-2026-32281 · CVE-2026-32282 · CVE-2026-32283 · CVE-2026-33810 · CVE-2026-33811 · CVE-2026-33814 · CVE-2026-33818 · CVE-2026-39820 · CVE-2026-39821 · CVE-2026-42499 · CVE-2026-42504 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943
RHSA-2026:91342: Red Hat Security Advisory: Red Hat Service Interconnect 2.2.4 Release (images)
CVE-2026-111943
RHSA-2026:87028: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:89837: Red Hat Security Advisory: OpenShift Container Platform 4.14.77 packages and security update
CVE-2026-33814 · CVE-2026-39821 · CVE-2026-111943
RHSA-2026:94572: Red Hat Security Advisory: zero trust workload identity manager for Red Hat OpenShift 1.1.3
CVE-2026-111943
RHSA-2026:86196: Red Hat Security Advisory: golang security, bug fix, and enhancement update
CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943
openSUSE-SU-2026:12212-1: go1.26-1.26.10-1.1 on GA media
CVE-2026-111943 · CVE-2026-78663 · CVE-2026-78669
openSUSE-SU-2026:12284-1: github-mcp-server-2.0.3-1.1 on GA media
CVE-2026-111943
openSUSE-SU-2026:12360-1: diun-4.33.1-1.1 on GA media
CVE-2026-111943
openSUSE-SU-2026:12385-1: bugwarden-0.7.0-1.1 on GA media
CVE-2026-111943
RHSA-2026:87092: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:90362: Red Hat Security Advisory: podman security update
CVE-2025-11395 · CVE-2026-78667 · CVE-2026-111943
RHSA-2026:91172: Red Hat Security Advisory: Red Hat build of MicroShift 4.20.44 security update
CVE-2026-111943
RHSA-2026:87245: Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update
CVE-2024-45336 · CVE-2025-4673 · CVE-2025-22866 · CVE-2025-22874 · CVE-2025-68121 · CVE-2026-27137 · CVE-2026-27143 · CVE-2026-27144 · CVE-2026-27145 · CVE-2026-32280 · CVE-2026-32281 · CVE-2026-32282 · CVE-2026-32283 · CVE-2026-33810 · CVE-2026-33811 · CVE-2026-33814 · CVE-2026-33818 · CVE-2026-39820 · CVE-2026-39821 · CVE-2026-42499 · CVE-2026-42504 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943
RHSA-2026:91646: Red Hat Security Advisory: osbuild-composer security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-88031 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:91720: Red Hat Security Advisory: ignition security update
CVE-2026-111943
RHSA-2026:92480: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.1.14
CVE-2026-56857 · CVE-2026-56866 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943
RHSA-2026:94573: Red Hat Security Advisory: zero trust workload identity manager for Red Hat OpenShift 1.1.3
CVE-2026-111943
RHSA-2026:95014: Red Hat Security Advisory: opentelemetry-collector security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:86906: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:86956: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:91138: Red Hat Security Advisory: yggdrasil security update
CVE-2026-78669 · CVE-2026-94440 · CVE-2026-111943
RHSA-2026:90332: Red Hat Security Advisory: RHOSO 18.0 os-diff security update
CVE-2026-27145 · CVE-2026-33818 · CVE-2026-42504 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
SUSE-SU-2026:24360-1: Security update for go1.27
CVE-2026-111943
openSUSE-SU-2026:12262-1: istioctl-1.31.3-1.1 on GA media
CVE-2026-111943
RHSA-2026:94569: Red Hat Security Advisory: zero trust workload identity manager for Red Hat OpenShift 1.1.3
CVE-2026-111943
RHSA-2026:86928: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:86886: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHBA-2026:92271: Red Hat Bug Fix Advisory: zero trust workload identity manager for Red Hat OpenShift 1.0.4
CVE-2026-33818 · CVE-2026-111943
RHSA-2026:86093: Red Hat Security Advisory: golang security, bug fix, and enhancement update
CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943
RHSA-2026:86908: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:95016: Red Hat Security Advisory: opentelemetry-collector security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:86973: Red Hat Security Advisory: grafana-pcp security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:89626: Red Hat Security Advisory: OpenShift Container Platform 4.21.40 bug fix and security update
CVE-2026-33814 · CVE-2026-39821 · CVE-2026-39829 · CVE-2026-107176 · CVE-2026-111943
RHSA-2026:92516: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.4.4
CVE-2026-56857 · CVE-2026-56866 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943
RHSA-2026:86992: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:89751: Red Hat Security Advisory: grafana security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:94570: Red Hat Security Advisory: zero trust workload identity manager for Red Hat OpenShift 1.1.3
CVE-2026-111943
RHSA-2026:86949: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:89926: Red Hat Security Advisory: git-lfs security update
CVE-2026-111943
RHSA-2026:90424: Red Hat Security Advisory: buildah security update
CVE-2025-11395 · CVE-2026-56855 · CVE-2026-78667 · CVE-2026-111943
RHSA-2026:88332: Red Hat Security Advisory: grafana security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:90757: Red Hat Security Advisory: git-lfs security update
CVE-2026-111943
RHSA-2026:89914: Red Hat Security Advisory: rhc security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:86812: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:89724: Red Hat Security Advisory: OpenShift Container Platform 4.18.59 packages and security update
CVE-2026-33814 · CVE-2026-111943
RHSA-2026:88316: Red Hat Security Advisory: grafana-pcp security update
CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:90330: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 security advisory
CVE-2026-33818 · CVE-2026-56852 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-73500 · CVE-2026-78669 · CVE-2026-111943
RHBA-2026:92269: Red Hat Bug Fix Advisory: zero trust workload identity manager for Red Hat OpenShift 1.0.4
CVE-2026-33818 · CVE-2026-111943
RHSA-2026:86914: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:90363: Red Hat Security Advisory: osbuild-composer security update
CVE-2026-25681 · CVE-2026-27136 · CVE-2026-33186 · CVE-2026-42502 · CVE-2026-55677 · CVE-2026-111943
RHSA-2026:90514: Red Hat Security Advisory: ignition security update
CVE-2026-111943
RHSA-2026:90726: Red Hat Security Advisory: rhc security update
CVE-2024-9355 · CVE-2024-45336 · CVE-2025-68121 · CVE-2026-27145 · CVE-2026-32280 · CVE-2026-32282 · CVE-2026-32283 · CVE-2026-33811 · CVE-2026-33818 · CVE-2026-39821 · CVE-2026-42504 · CVE-2026-56858 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:86893: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
SUSE-SU-2026:24359-1: Security update for go1.26
CVE-2026-111943 · CVE-2026-78663 · CVE-2026-78669
RHSA-2026:87024: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:87041: Red Hat Security Advisory: golang security, bug fix, and enhancement update
CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943
RHSA-2026:90271: Red Hat Security Advisory: OpenShift Container Platform 4.12.102 packages and security update
CVE-2026-44918 · CVE-2026-111943
RHSA-2026:94562: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 11.0 product release
CVE-2026-53488 · CVE-2026-54099 · CVE-2026-76654 · CVE-2026-111943 · CVE-2026-114406
RHSA-2026:86936: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:89908: Red Hat Security Advisory: rhc security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:92451: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.0.17
CVE-2026-56857 · CVE-2026-56866 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943
RHSA-2026:92858: Red Hat Security Advisory: Satellite 6.16 EUS security update
CVE-2026-8924 · CVE-2026-18660 · CVE-2026-19203 · CVE-2026-56852 · CVE-2026-59646 · CVE-2026-63072 · CVE-2026-63076 · CVE-2026-68494 · CVE-2026-68497 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-89407 · CVE-2026-89425 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:92861: Red Hat Security Advisory: Satellite 6.19 security update
CVE-2026-15307 · CVE-2026-18660 · CVE-2026-19203 · CVE-2026-56853 · CVE-2026-59646 · CVE-2026-68497 · CVE-2026-73619 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-78677 · CVE-2026-84445 · CVE-2026-87819 · CVE-2026-89407 · CVE-2026-89425 · CVE-2026-94440 · CVE-2026-96640 · CVE-2026-96643 · CVE-2026-96778 · CVE-2026-97031 · CVE-2026-97687 · CVE-2026-97689 · CVE-2026-110856 · CVE-2026-110857 · CVE-2026-110858 · CVE-2026-110859 · CVE-2026-111497 · CVE-2026-111943 · CVE-2026-112390 · CVE-2026-112391 · CVE-2026-112392 · CVE-2026-112393 · CVE-2026-112397 · CVE-2026-112398 · CVE-2026-112399 · CVE-2026-112400 · CVE-2026-112402 · CVE-2026-112403 · CVE-2026-112404 · CVE-2026-112405 · CVE-2026-112406 · CVE-2026-112892 · CVE-2026-112893 · CVE-2026-112894 · CVE-2026-112895 · CVE-2026-112896 · CVE-2026-112897 · CVE-2026-114145
RHSA-2026:86958: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:86977: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:87911: Red Hat Security Advisory: grafana-pcp security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:89715: Red Hat Security Advisory: OpenShift Container Platform 4.16.74 bug fix and security update
CVE-2024-24786 · CVE-2026-14362 · CVE-2026-33814 · CVE-2026-39829 · CVE-2026-42151 · CVE-2026-46597 · CVE-2026-49329 · CVE-2026-59887 · CVE-2026-75888 · CVE-2026-83589 · CVE-2026-84292 · CVE-2026-93017 · CVE-2026-111943
RHSA-2026:95015: Red Hat Security Advisory: opentelemetry-collector security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:86938: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:88396: Red Hat Security Advisory: grafana security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:86867: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:86934: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:88188: Red Hat Security Advisory: grafana security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:94571: Red Hat Security Advisory: zero trust workload identity manager for Red Hat OpenShift 1.1.3
CVE-2026-111943
RHBA-2026:92270: Red Hat Bug Fix Advisory: zero trust workload identity manager for Red Hat OpenShift 1.0.4
CVE-2026-33818 · CVE-2026-111943
RHSA-2026:86943: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:89920: Red Hat Security Advisory: git-lfs security update
CVE-2026-111943
RHSA-2026:87053: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:86932: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
openSUSE-SU-2026:12220-1: regclient-0.11.7-1.1 on GA media
CVE-2026-111943
RHSA-2026:85899: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
CVE-2026-94440 · CVE-2026-97030 · CVE-2026-111943
RHSA-2026:89229: Red Hat Security Advisory: OpenShift Container Platform 4.21.40 packages and security update
CVE-2026-111943
RHSA-2026:90519: Red Hat Security Advisory: ignition security update
CVE-2026-111943
RHSA-2026:89817: Red Hat Security Advisory: Red Hat build of MicroShift 4.22.20 security update
CVE-2026-111943
RHSA-2026:89655: Red Hat Security Advisory: OpenShift Container Platform 4.19.53 bug fix and security update
CVE-2026-33814 · CVE-2026-104795 · CVE-2026-111943
RHSA-2026:91632: Red Hat Security Advisory: Release of components for Service Telemetry Framework 1.5.7
CVE-2026-111943
RHSA-2026:89081: Red Hat Security Advisory: Red Hat OpenShift Builds 1.8.3
CVE-2026-46600 · CVE-2026-56851 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-97031 · CVE-2026-111943 · CVE-2026-114406
RHSA-2026:88354: Red Hat Security Advisory: grafana-pcp security update
CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:86858: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:89760: Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update
CVE-2026-78667 · CVE-2026-111943
RHSA-2026:91572: Red Hat Security Advisory: yggdrasil security update
CVE-2026-78669 · CVE-2026-94440 · CVE-2026-111943
RHSA-2026:92509: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.3.9
CVE-2026-56857 · CVE-2026-56866 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943
RHSA-2026:89933: Red Hat Security Advisory: delve security update
CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
RHSA-2026:88340: Red Hat Security Advisory: grafana security update
CVE-2024-45336 · CVE-2025-22866 · CVE-2025-68121 · CVE-2026-27137 · CVE-2026-32280 · CVE-2026-32281 · CVE-2026-32282 · CVE-2026-32283 · CVE-2026-33810 · CVE-2026-33818 · CVE-2026-39820 · CVE-2026-39821 · CVE-2026-42499 · CVE-2026-42504 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943
openSUSE-SU-2026:22153-1: Security update for go1.27
CVE-2026-111943
RHSA-2026:87075: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:86203: Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update
CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943
RHSA-2026:87076: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:86863: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
RHSA-2026:87029: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-111943
- Source published
- Oct 21, 2026, 12:52:18 AM (timezone not stated)
- Source modified
- Oct 30, 2026, 1:08:13 PM (timezone not stated)
- Observed here
- 7 Nov 2026 04:33:25 UTC
- Source terms
- ENISA EUVD · source terms and attribution apply
Original source record · Cite this exact observation · Complete original publisher JSON
This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: euvd · ENISA EUVD · source terms and attribution apply. Source text is retained; field grouping and change labels are provided by ChangeIntel.
EUVD CVSS 3.1 · 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
nvd · CVE-2026-111943
PublishedOn most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.
NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON.
Source analysis status: Awaiting Analysis
Weakness classifications: CWE-299
Original publisher date fields
published: 2026-10-21T01:17:20.797
lastModified: 2026-10-30T13:18:28.740
- Source published
- 21 Oct 2026 01:17:20 UTC
- Source modified
- 30 Oct 2026 13:18:28 UTC
- Observed here
- 31 Oct 2026 06:57:40 UTC
- Source terms
- NIST NVD usage terms; underlying source attribution retained
Original source record · Cite this exact observation · Complete original publisher JSON
This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: nvd · NIST NVD usage terms; underlying source attribution retained. Source text is retained; field grouping and change labels are provided by ChangeIntel.
CVSS 3.1 · 134c704f-9b21-4f2e-91b3-4a467353bcc0 · Secondary · 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
osv · GO-2026-6809
PublishedOn most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.
- Source published
- 21 Oct 2026 00:27:29 UTC
- Source modified
- 29 Oct 2026 10:55:54 UTC
- Observed here
- 29 Oct 2026 11:12:45 UTC
- Source terms
- OSV · upstream source license applies
Original source record · Cite this exact observation · Complete original publisher JSON
This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: osv · OSV · upstream source license applies. Source text is retained; field grouping and change labels are provided by ChangeIntel.
osv · RUSTSEC-2026-0381
PublishedAffected versions include `emSign ECC Root CA - G3`, which can allow certificate paths through distrusted emSign intermediates. Affected versions may accept certificate paths containing distrusted emSign intermediate public keys. The private keys corresponding to these intermediates are now well known. Version 1.0.10+ removes this root. The `webpki-roots` 0.26.11 compatibility package contains no independent trust store and re-exports the roots from its separately resolved 1.x dependency. That parent dependency must resolve to 1.0.10 or newer; an older parent remains affected by this advisory.
- Source published
- 19 Oct 2026 12:00:00 UTC
- Source modified
- 29 Oct 2026 10:55:54 UTC
- Observed here
- 29 Oct 2026 11:13:03 UTC
- Source terms
- OSV · upstream source license applies
Original source record · Cite this exact observation · Complete original publisher JSON
This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: osv · OSV · upstream source license applies. Source text is retained; field grouping and change labels are provided by ChangeIntel.
osv · RUSTSEC-2026-0382
PublishedAffected versions may accept certificate paths containing distrusted emSign intermediate public keys when the configured trust anchors allow such paths. The private keys corresponding to these intermediates are now well known. Versions 0.103.16 and 0.104.0-alpha.8 reject paths containing these public keys.
- Source published
- 20 Oct 2026 12:00:00 UTC
- Source modified
- 29 Oct 2026 10:55:54 UTC
- Observed here
- 29 Oct 2026 11:13:03 UTC
- Source terms
- OSV · upstream source license applies
Original source record · Cite this exact observation · Complete original publisher JSON
This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: osv · OSV · upstream source license applies. Source text is retained; field grouping and change labels are provided by ChangeIntel.
osv · RUSTSEC-2026-0383
PublishedAffected versions include `emSign ECC Root CA - G3`, which can allow certificate paths through distrusted emSign intermediates. Affected versions may accept certificate paths containing distrusted emSign intermediate public keys. The private keys corresponding to these intermediates are now well known. Version 1.0.10+ removes this root. Version 0.26.11 is a compatibility wrapper that re-exports `parent::TLS_SERVER_ROOT_CERTS` from its `webpki-root-certs` 1.x dependency; it contains no separate root certificate list. Its resolved 1.x dependency must be updated to 1.0.10 or later.
- Source published
- 19 Oct 2026 12:00:00 UTC
- Source modified
- 29 Oct 2026 10:55:54 UTC
- Observed here
- 29 Oct 2026 11:13:03 UTC
- Source terms
- OSV · upstream source license applies
Original source record · Cite this exact observation · Complete original publisher JSON
This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: osv · OSV · upstream source license applies. Source text is retained; field grouping and change labels are provided by ChangeIntel.