ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 274/275 feeds/APIs · 469/469 docs · 9/9 advisories · checked 08:57 UTC Customize Public modeDiscuss ChangeIntel on Discord
CVE-2026-111943ModerateNetworkRevised 1 Nov

Go: CVE-2026-111943 Distrust compromised intermediate certificates in crypto/x509

MSRC advisory NVD CVE.org

Assessment

Severity
Moderate
CVSS base score
7.4CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U
Impact
Not stated
EPSS · 30-day forecast
No EPSS score collected
Public detection template
No Nuclei template is listed in the current collected catalog
Exploitation detected
Unknown: not stated by MSRC
Exploitability
Not assessed
Publicly disclosed
Unknown: not stated by MSRC
Customer action
Required: follow the MSRC remediation guidance
Component
Mariner
Weakness
—
Issued by
Go
Published
28 Oct 2026 · October 2026
Last revised
1 Nov 2026Information published.
CVSS 3.1 base metricsRed raises the risk · green lowers it
Attack vector
NetworkAV:N
Attack complexity
HighAC:H
Privileges required
NonePR:N
User interaction
NoneUI:N
Scope
UnchangedS:U
Confidentiality
HighC:H
Integrity
HighI:H
Availability
NoneA:N

Updates that fix it

0 KBs

No KB listed

No KB update is listed in the collected MSRC record. Check the MSRC advisory for product releases and other remedies.

Affected products

Open Source Software
4 affected products
  • azl3 golang 1.26.10-1 on Azure Linux 3.0
  • azl3 golang 1.26.7-1 on Azure Linux 3.0
  • azl3 golang 1.27.1-1 on Azure Linux 3.0
  • azl3 golang 1.27.3-1 on Azure Linux 3.0

What changed

  1. Detection template: Unknown: detection-template evidence is incomplete or retained → No Nuclei template listed
  2. Detection template: No Nuclei template listed → Unknown: detection-template evidence is incomplete or retained
  3. Detection template: Unknown: detection-template evidence is incomplete or retained → No Nuclei template listed
  4. Detection template: No Nuclei template listed → Unknown: detection-template evidence is incomplete or retained
  5. Affected products: azl3 golang 1.26.7-1 on Azure Linux 3.0, azl3 golang 1.27.1-1 on Azure Linux 3.0 → azl3 golang 1.26.10-1 on Azure Linux 3.0, azl3 golang 1.26.7-1 on Azure Linux 3.0, azl3 golang 1.27.1-1 on Azure Linux 3.0, azl3 golang 1.27.3-1 on Azure Linux 3.0
  6. Affected products: azl3 golang 1.26.7-1 on Azure Linux 3.0 → azl3 golang 1.26.7-1 on Azure Linux 3.0, azl3 golang 1.27.1-1 on Azure Linux 3.0
  7. Detection template: No Nuclei template listed · Affected products: azl3 gcc 13.2.0-7 on Azure Linux 3.0, azl3 golang 1.26.7-1 on Azure Linux 3.0, azl3 golang 1.27.1-1 on Azure Linux 3.0, azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0, azl3 tensorflow 2.16.1-11 on Azure Linux 3.0 → azl3 golang 1.26.7-1 on Azure Linux 3.0 · Customer action: Required: apply the update → Required: follow the MSRC remediation guidance · Public disclosure: No → Unknown: not stated by MSRC · Exploitation detected: Not reported by MSRC → Unknown: not stated by MSRC · CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N → CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U · Severity: Important → Moderate
  8. Title changed
  9. Detection template: Unknown: exploit-code evidence is incomplete or retained → No Nuclei template listed · CISA KEV: Unknown: catalog evidence is incomplete or retained → Not listed in the collected catalog
  10. Detection template: No Nuclei template listed → Unknown: exploit-code evidence is incomplete or retained · CISA KEV: Not listed in the collected catalog → Unknown: catalog evidence is incomplete or retained
Page history

Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.

Cite this version
Field-level log (46)

Up to 100 recent field edits are shown; older edits may be outside retention.

  1. 6 Nov 2026 · 17:32:22 UTC Public detection templateUnknown: detection-template evidence is incomplete or retained → No Nuclei template listed
  2. 6 Nov 2026 · 17:32:22 UTC Source coverage: public-exploit-codeIncomplete → Current
  3. 6 Nov 2026 · 17:32:22 UTC Source coverage: first-epssIncomplete → Current
  4. 6 Nov 2026 · 17:32:22 UTC Source coverage: msrc-cvrfIncomplete → Current
  5. 6 Nov 2026 · 16:31:02 UTC Public detection templateNo Nuclei template listed → Unknown: detection-template evidence is incomplete or retained
  6. 6 Nov 2026 · 16:31:02 UTC Source coverage: public-exploit-codeCurrent → Incomplete
  7. 6 Nov 2026 · 16:31:02 UTC Source coverage: first-epssCurrent → Incomplete
  8. 6 Nov 2026 · 16:31:02 UTC Source coverage: msrc-cvrfCurrent → Incomplete
  9. 2 Nov 2026 · 17:30:39 UTC Public detection templateUnknown: detection-template evidence is incomplete or retained → No Nuclei template listed
  10. 2 Nov 2026 · 17:30:39 UTC Source coverage: public-exploit-codeIncomplete → Current
  11. 2 Nov 2026 · 17:30:39 UTC Source coverage: first-epssIncomplete → Current
  12. 2 Nov 2026 · 17:30:39 UTC Source coverage: msrc-cvrfIncomplete → Current
  13. 2 Nov 2026 · 16:27:39 UTC Public detection templateNo Nuclei template listed → Unknown: detection-template evidence is incomplete or retained
  14. 2 Nov 2026 · 16:27:39 UTC Source coverage: public-exploit-codeCurrent → Incomplete
  15. 2 Nov 2026 · 16:27:39 UTC Source coverage: first-epssCurrent → Incomplete
  16. 2 Nov 2026 · 16:27:39 UTC Source coverage: msrc-cvrfCurrent → Incomplete
  17. 2 Nov 2026 · 09:04:36 UTC Last revised1 Nov 2026 02:44 UTC → 1 Nov 2026 14:54 UTC
  18. 2 Nov 2026 · 09:04:36 UTC Affected productsazl3 golang 1.26.7-1 on Azure Linux 3.0, azl3 golang 1.27.1-1 on Azure Linux 3.0 → azl3 golang 1.26.10-1 on Azure Linux 3.0, azl3 golang 1.26.7-1 on Azure Linux 3.0, azl3 golang 1.27.1-1 on Azure Linux 3.0, azl3 golang 1.27.3-1 on Azure Linux 3.0
  19. 1 Nov 2026 · 07:59:15 UTC Last revised31 Oct 2026 01:45 UTC → 1 Nov 2026 02:44 UTC
  20. 1 Nov 2026 · 07:59:15 UTC Affected productsazl3 golang 1.26.7-1 on Azure Linux 3.0 → azl3 golang 1.26.7-1 on Azure Linux 3.0, azl3 golang 1.27.1-1 on Azure Linux 3.0
  21. 31 Oct 2026 · 08:05:42 UTC Last revised23 Oct 2026 01:08 UTC → 31 Oct 2026 01:45 UTC
  22. 31 Oct 2026 · 08:05:42 UTC Published23 Oct 2026 01:08 UTC → 28 Oct 2026 01:47 UTC
  23. 31 Oct 2026 · 08:05:42 UTC Public detection templateNo Nuclei template listed
  24. 31 Oct 2026 · 08:05:42 UTC EPSSNot scored → No EPSS score collected
  25. 31 Oct 2026 · 08:05:42 UTC Affected productsazl3 gcc 13.2.0-7 on Azure Linux 3.0, azl3 golang 1.26.7-1 on Azure Linux 3.0, azl3 golang 1.27.1-1 on Azure Linux 3.0, azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0, azl3 tensorflow 2.16.1-11 on Azure Linux 3.0 → azl3 golang 1.26.7-1 on Azure Linux 3.0
  26. 31 Oct 2026 · 08:05:42 UTC Customer actionRequired: apply the update → Required: follow the MSRC remediation guidance
  27. 31 Oct 2026 · 08:05:42 UTC ComponentVisual Studio → Mariner
  28. 31 Oct 2026 · 08:05:42 UTC Publicly disclosedNo → Unknown: not stated by MSRC
  29. 31 Oct 2026 · 08:05:42 UTC Exploitation detectedNot reported by MSRC → Unknown: not stated by MSRC
  30. 31 Oct 2026 · 08:05:42 UTC CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N → CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U
  31. 31 Oct 2026 · 08:05:42 UTC SeverityImportant → Moderate
  32. 24 Oct 2026 · 07:49:07 UTC ComponentMariner → Visual Studio
  33. 24 Oct 2026 · 07:49:07 UTC SummaryDistrust compromised intermediate certificates in crypto/x509 → Go: CVE-2026-111943 Distrust compromised intermediate certificates in crypto/x509
  34. 24 Oct 2026 · 07:49:07 UTC TitleDistrust compromised intermediate certificates in crypto/x509 → Go: CVE-2026-111943 Distrust compromised intermediate certificates in crypto/x509
  35. 23 Oct 2026 · 09:33:49 UTC Public exploit codeUnknown: exploit-code evidence is incomplete or retained → No Nuclei template listed
  36. 23 Oct 2026 · 09:33:49 UTC CISA KEVUnknown: catalog evidence is incomplete or retained → Not listed in the collected catalog
  37. 23 Oct 2026 · 09:33:49 UTC Source coverage: public-exploit-codeIncomplete → Current
  38. 23 Oct 2026 · 09:33:49 UTC Source coverage: first-epssIncomplete → Current
  39. 23 Oct 2026 · 09:33:49 UTC Source coverage: cisa-kevIncomplete → Current
  40. 23 Oct 2026 · 09:33:49 UTC Source coverage: msrc-cvrfIncomplete → Current
  41. 23 Oct 2026 · 08:31:50 UTC Public exploit codeNo Nuclei template listed → Unknown: exploit-code evidence is incomplete or retained
  42. 23 Oct 2026 · 08:31:50 UTC CISA KEVNot listed in the collected catalog → Unknown: catalog evidence is incomplete or retained
  43. 23 Oct 2026 · 08:31:50 UTC Source coverage: public-exploit-codeCurrent → Incomplete
  44. 23 Oct 2026 · 08:31:50 UTC Source coverage: first-epssCurrent → Incomplete
  45. 23 Oct 2026 · 08:31:50 UTC Source coverage: cisa-kevCurrent → Incomplete
  46. 23 Oct 2026 · 08:31:50 UTC Source coverage: msrc-cvrfCurrent → Incomplete

Explore global source statements, affected packages and advisory history for CVE-2026-111943. The catalog has a separate collection scope from Microsoft release records.

Collected exploitation and prediction evidence

Risk source coverage

CISA KEV is observed exploitation evidence. FIRST EPSS is a dated prediction of exploitation in the next 30 days. Missing scores are unknown. This collector requests predictions only for explicit CVE aliases in the public NuGet archive; Microsoft release views retain their existing prediction scope.

No collected risk observation for these identifiers. This does not establish absence of exploitation or a zero probability.

cve-program · CVE-2026-111943

Published

Distrust compromised intermediate certificates in crypto/x509

On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.

Source published
21 Oct 2026 00:52:18 UTC
Source modified
30 Oct 2026 13:08:13 UTC
Observed here
30 Oct 2026 15:45:26 UTC
Source terms
CVE Program Terms of Use

Original source record · Cite this exact observation · Complete original publisher JSON

This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: cve-program · CVE Program Terms of Use. Source text is retained; field grouping and change labels are provided by ChangeIntel.

euvd · EUVD-2026-106926

Published

On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denyl…

On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.

EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.

Original publisher date fields

datePublished: Oct 21, 2026, 12:52:18 AM

dateUpdated: Oct 30, 2026, 1:08:13 PM

206 related source bulletins · separate from aliases

RHSA-2026:92217: Red Hat Security Advisory: rhc security update

CVE-2024-9355 · CVE-2024-45336 · CVE-2025-68121 · CVE-2026-27145 · CVE-2026-32280 · CVE-2026-32282 · CVE-2026-32283 · CVE-2026-33811 · CVE-2026-33818 · CVE-2026-39821 · CVE-2026-42504 · CVE-2026-56858 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:86978: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:90329: Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 security advisory

CVE-2025-61726 · CVE-2026-25679 · CVE-2026-27145 · CVE-2026-32280 · CVE-2026-32283 · CVE-2026-33811 · CVE-2026-33818 · CVE-2026-39821 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-73500 · CVE-2026-78669 · CVE-2026-111943

RHSA-2026:92860: Red Hat Security Advisory: Satellite 6.18 security update

CVE-2026-8924 · CVE-2026-18660 · CVE-2026-19203 · CVE-2026-56852 · CVE-2026-59646 · CVE-2026-63072 · CVE-2026-63076 · CVE-2026-68494 · CVE-2026-68497 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-89407 · CVE-2026-89425 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:86839: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:89741: Red Hat Security Advisory: rhc security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:89726: Red Hat Security Advisory: OpenShift Container Platform 4.18.59 bug fix and security update

CVE-2026-33814 · CVE-2026-75888 · CVE-2026-93017 · CVE-2026-111943

openSUSE-SU-2026:12236-1: docker-compose-5.6.1-1.1 on GA media

CVE-2026-111943

RHSA-2026:89921: Red Hat Security Advisory: git-lfs security update

CVE-2026-111943

RHSA-2026:86733: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:91191: Red Hat Security Advisory: Red Hat build of MicroShift 4.19.53 security update

CVE-2026-33818 · CVE-2026-42504 · CVE-2026-56858 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-111943

RHSA-2026:88262: Red Hat Security Advisory: buildah security update

CVE-2025-11395 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-111943

openSUSE-SU-2026:12298-1: kubelogin-0.2.22-1.1 on GA media

CVE-2026-111943

RHSA-2026:92286: Red Hat Security Advisory: OpenShift Container Platform 4.21.41 packages and security update

CVE-2026-111943

RHSA-2026:95206: Red Hat Security Advisory: Updated Red Hat OpenStack Platform 16.2 director Operator container images

CVE-2026-27145 · CVE-2026-32283 · CVE-2026-33811 · CVE-2026-33818 · CVE-2026-42504 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-111943

RHSA-2026:88280: Red Hat Security Advisory: golang-github-openprinting-ipp-usb security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:89752: Red Hat Security Advisory: oci-seccomp-bpf-hook security update

CVE-2026-56853 · CVE-2026-78667 · CVE-2026-111943

RHSA-2026:90493: Red Hat Security Advisory: osbuild-composer security update

CVE-2026-25681 · CVE-2026-27136 · CVE-2026-33186 · CVE-2026-42502 · CVE-2026-55677 · CVE-2026-111943

RHSA-2026:86918: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:87732: Red Hat Security Advisory: grafana security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943

msrc_CVE-2026-111943: Go: CVE-2026-111943 Distrust compromised intermediate certificates in crypto/x509

CVE-2026-111943

RHSA-2026:86930: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:91958: Red Hat Security Advisory: osbuild-composer security update

CVE-2026-41178 · CVE-2026-42504 · CVE-2026-55677 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:89740: Red Hat Security Advisory: rhc security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943

RHBA-2026:92273: Red Hat Bug Fix Advisory: zero trust workload identity manager for Red Hat OpenShift 1.0.4

CVE-2026-33818 · CVE-2026-111943

RHSA-2026:95209: Red Hat Security Advisory: Updated Red Hat OpenStack Platform 17.1 director Operator container images

CVE-2026-111943

RHSA-2026:86948: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:93596: Red Hat Security Advisory: opentelemetry-collector security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:86952: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:94575: Red Hat Security Advisory: zero trust workload identity manager for Red Hat OpenShift 1.1.3

CVE-2026-111943

RHSA-2026:90462: Red Hat Security Advisory: skopeo security update

CVE-2025-11395 · CVE-2026-78667 · CVE-2026-111943

RHSA-2026:88339: Red Hat Security Advisory: grafana security update

CVE-2024-45336 · CVE-2025-22866 · CVE-2025-68121 · CVE-2026-27137 · CVE-2026-32280 · CVE-2026-32281 · CVE-2026-32282 · CVE-2026-32283 · CVE-2026-33810 · CVE-2026-33818 · CVE-2026-39820 · CVE-2026-39821 · CVE-2026-42499 · CVE-2026-42504 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:89832: Red Hat Security Advisory: rhc security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:88187: Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.11.3 release

CVE-2026-108859 · CVE-2026-111943

RHBA-2026:89332: Red Hat Bug Fix Advisory: OpenShift Container Platform 4.20.44 packages update

CVE-2026-111943

RHSA-2026:89884: Red Hat Security Advisory: delve security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:86927: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:90513: Red Hat Security Advisory: ignition security update

CVE-2026-111943

openSUSE-SU-2026:12239-1: go1.27-1.27.3-1.1 on GA media

CVE-2026-111943

RHSA-2026:89915: Red Hat Security Advisory: rhc security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943

openSUSE-SU-2026:12291-1: hcloud-cli-1.70.2-1.1 on GA media

CVE-2026-111943

openSUSE-SU-2026:12253-1: tekton-cli-0.46.2-1.1 on GA media

CVE-2026-111943 · CVE-2026-84304

RHSA-2026:86960: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:86029: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

CVE-2026-94440 · CVE-2026-97030 · CVE-2026-111943

RHSA-2026:91587: Red Hat Security Advisory: osbuild-composer security update

CVE-2026-42504 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:87008: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:89839: Red Hat Security Advisory: OpenShift Container Platform 4.14.77 bug fix and security update

CVE-2026-14362 · CVE-2026-33814 · CVE-2026-39821 · CVE-2026-55204 · CVE-2026-59887 · CVE-2026-111943

RHSA-2026:92372: Red Hat Security Advisory: osbuild-composer security update

CVE-2026-42504 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:88189: Red Hat Security Advisory: grafana-pcp security update

CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:90274: Red Hat Security Advisory: OpenShift Container Platform 4.12.102 bug fix and security update

CVE-2026-33186 · CVE-2026-33814 · CVE-2026-39829 · CVE-2026-39830 · CVE-2026-39831 · CVE-2026-39832 · CVE-2026-46597 · CVE-2026-55204 · CVE-2026-75888 · CVE-2026-83589 · CVE-2026-93017 · CVE-2026-111943

RHSA-2026:88394: Red Hat Security Advisory: grafana-pcp security update

CVE-2024-45336 · CVE-2025-22866 · CVE-2025-68121 · CVE-2026-27137 · CVE-2026-32280 · CVE-2026-32281 · CVE-2026-32282 · CVE-2026-32283 · CVE-2026-33810 · CVE-2026-33818 · CVE-2026-39821 · CVE-2026-42504 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:86946: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:86987: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:89031: Red Hat Security Advisory: Red Hat OpenShift Builds 1.8.3

CVE-2026-46600 · CVE-2026-56851 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:89041: Red Hat Security Advisory: Red Hat OpenShift Builds 1.9.2

CVE-2026-33818 · CVE-2026-39821 · CVE-2026-40161 · CVE-2026-40938 · CVE-2026-46600 · CVE-2026-56851 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84304 · CVE-2026-84445 · CVE-2026-97031 · CVE-2026-111943

WID-SEC-W-2026-4049: Golang Go: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

CVE-2026-111943

RHSA-2026:91719: Red Hat Security Advisory: ignition security update

CVE-2026-111943

RHSA-2026:86944: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:89925: Red Hat Security Advisory: git-lfs security update

CVE-2026-111943

RHBA-2026:92274: Red Hat Bug Fix Advisory: zero trust workload identity manager for Red Hat OpenShift 1.0.4

CVE-2026-33818 · CVE-2026-111943

RHSA-2026:92859: Red Hat Security Advisory: Satellite 6.17 security update

CVE-2026-8924 · CVE-2026-18660 · CVE-2026-19203 · CVE-2026-56852 · CVE-2026-59646 · CVE-2026-63072 · CVE-2026-63076 · CVE-2026-68494 · CVE-2026-68497 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-89407 · CVE-2026-89425 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:89744: Red Hat Security Advisory: grafana security update

CVE-2026-17183 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:90518: Red Hat Security Advisory: ignition security update

CVE-2026-111943

RHSA-2026:94254: Red Hat Security Advisory: zero trust workload identity manager for Red Hat OpenShift 1.1.3

CVE-2026-111943

RHSA-2026:89341: Red Hat Security Advisory: OpenShift Container Platform 4.20.44 bug fix and security update

CVE-2026-33814 · CVE-2026-34986 · CVE-2026-39821 · CVE-2026-46597 · CVE-2026-104795 · CVE-2026-107176 · CVE-2026-111943

RHSA-2026:89131: Red Hat Security Advisory: Red Hat OpenShift Builds 1.9.2

CVE-2026-33818 · CVE-2026-39821 · CVE-2026-40161 · CVE-2026-40938 · CVE-2026-46600 · CVE-2026-56851 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84304 · CVE-2026-84445 · CVE-2026-97031 · CVE-2026-111943 · CVE-2026-114406

RHSA-2026:89761: Red Hat Security Advisory: skopeo security update

CVE-2025-11395 · CVE-2026-78667 · CVE-2026-111943

RHSA-2026:90725: Red Hat Security Advisory: rhc security update

CVE-2024-9355 · CVE-2024-45336 · CVE-2025-68121 · CVE-2026-27145 · CVE-2026-32280 · CVE-2026-32282 · CVE-2026-32283 · CVE-2026-33811 · CVE-2026-33818 · CVE-2026-39821 · CVE-2026-42504 · CVE-2026-56858 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943

RHBA-2026:89649: Red Hat Bug Fix Advisory: OpenShift Container Platform 4.19.53 packages update

CVE-2026-111943

openSUSE-SU-2026:22152-1: Security update for go1.26

CVE-2026-111943 · CVE-2026-78663 · CVE-2026-78669

RHSA-2026:89198: Red Hat Security Advisory: OpenShift Container Platform 4.22.20 bug fix and security update

CVE-2026-33814 · CVE-2026-39821 · CVE-2026-42502 · CVE-2026-63209 · CVE-2026-93017 · CVE-2026-104795 · CVE-2026-107176 · CVE-2026-111943

openSUSE-SU-2026:12226-1: gotosocial-0.22.3-1.1 on GA media

CVE-2026-111943

openSUSE-SU-2026:12320-1: fleet-cli-0.16.3-1.1 on GA media

CVE-2026-111943 · CVE-2026-78659 · CVE-2026-78660

RHSA-2026:92497: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.2.11

CVE-2026-56857 · CVE-2026-56866 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

RHSA-2026:89888: Red Hat Security Advisory: delve security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:89892: Red Hat Security Advisory: rhc security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:88336: Red Hat Security Advisory: podman security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-111943

openSUSE-SU-2026:12264-1: okteto-3.24.1-1.1 on GA media

CVE-2026-111943

openSUSE-SU-2026:12260-1: buildpacks-cli-0.40.10-1.1 on GA media

CVE-2026-111943 · CVE-2026-17106 · CVE-2026-61801 · CVE-2026-78659 · CVE-2026-78662

RHSA-2026:86738: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:89196: Red Hat Security Advisory: OpenShift Container Platform 4.22.20 packages and security update

CVE-2026-111943

RHSA-2026:87065: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:87042: Red Hat Security Advisory: golang security, bug fix, and enhancement update

CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

RHSA-2026:93617: Red Hat Security Advisory: opentelemetry-collector security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:88317: Red Hat Security Advisory: grafana-pcp security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:89818: Red Hat Security Advisory: Red Hat build of MicroShift 4.21.40 security update

CVE-2026-111943

RHSA-2026:86929: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:91329: Red Hat Security Advisory: Red Hat Service Interconnect 2.2.4 Release (rpms)

CVE-2026-111943

RHSA-2026:89922: Red Hat Security Advisory: git-lfs security update

CVE-2026-111943

RHSA-2026:86776: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:87153: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:86972: Red Hat Security Advisory: grafana-pcp security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:87043: Red Hat Security Advisory: golang security, bug fix, and enhancement update

CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

RHSA-2026:87040: Red Hat Security Advisory: golang security, bug fix, and enhancement update

CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

RHSA-2026:87246: Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update

CVE-2024-45336 · CVE-2025-4673 · CVE-2025-22866 · CVE-2025-22874 · CVE-2025-68121 · CVE-2026-27137 · CVE-2026-27143 · CVE-2026-27144 · CVE-2026-27145 · CVE-2026-32280 · CVE-2026-32281 · CVE-2026-32282 · CVE-2026-32283 · CVE-2026-33810 · CVE-2026-33811 · CVE-2026-33814 · CVE-2026-33818 · CVE-2026-39820 · CVE-2026-39821 · CVE-2026-42499 · CVE-2026-42504 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

RHSA-2026:86922: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:86939: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

openSUSE-SU-2026:12238-1: gitoxide-0.61.0-1.1 on GA media

CVE-2026-111943

RHSA-2026:86990: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:88395: Red Hat Security Advisory: grafana-pcp security update

CVE-2024-45336 · CVE-2025-22866 · CVE-2025-68121 · CVE-2026-27137 · CVE-2026-32280 · CVE-2026-32281 · CVE-2026-32282 · CVE-2026-32283 · CVE-2026-33810 · CVE-2026-33818 · CVE-2026-39821 · CVE-2026-42504 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

openSUSE-SU-2026:12303-1: pinact-5.0.2-1.1 on GA media

CVE-2026-111943

RHSA-2026:88397: Red Hat Security Advisory: grafana security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:91651: Red Hat Security Advisory: Red Hat Developer Hub 1.9.10 release.

CVE-2026-47683 · CVE-2026-47686 · CVE-2026-47698 · CVE-2026-84445 · CVE-2026-92934 · CVE-2026-92935 · CVE-2026-92937 · CVE-2026-92938 · CVE-2026-92939 · CVE-2026-92940 · CVE-2026-92941 · CVE-2026-92942 · CVE-2026-92944 · CVE-2026-92946 · CVE-2026-92947 · CVE-2026-92948 · CVE-2026-92950 · CVE-2026-92951 · CVE-2026-92953 · CVE-2026-92954 · CVE-2026-92955 · CVE-2026-92956 · CVE-2026-92957 · CVE-2026-92958 · CVE-2026-92959 · CVE-2026-92960 · CVE-2026-92961 · CVE-2026-93603 · CVE-2026-93604 · CVE-2026-93605 · CVE-2026-93606 · CVE-2026-111943

RHSA-2026:89713: Red Hat Security Advisory: OpenShift Container Platform 4.16.74 packages and security update

CVE-2026-33814 · CVE-2026-62146 · CVE-2026-111943

RHSA-2026:89885: Red Hat Security Advisory: delve security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:90994: Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update

CVE-2024-45336 · CVE-2025-22866 · CVE-2025-22874 · CVE-2025-68121 · CVE-2026-27137 · CVE-2026-27143 · CVE-2026-27144 · CVE-2026-27145 · CVE-2026-32280 · CVE-2026-32281 · CVE-2026-32282 · CVE-2026-32283 · CVE-2026-33810 · CVE-2026-33811 · CVE-2026-33814 · CVE-2026-33818 · CVE-2026-39820 · CVE-2026-39821 · CVE-2026-42499 · CVE-2026-42504 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

RHSA-2026:91342: Red Hat Security Advisory: Red Hat Service Interconnect 2.2.4 Release (images)

CVE-2026-111943

RHSA-2026:87028: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:89837: Red Hat Security Advisory: OpenShift Container Platform 4.14.77 packages and security update

CVE-2026-33814 · CVE-2026-39821 · CVE-2026-111943

RHSA-2026:94572: Red Hat Security Advisory: zero trust workload identity manager for Red Hat OpenShift 1.1.3

CVE-2026-111943

RHSA-2026:86196: Red Hat Security Advisory: golang security, bug fix, and enhancement update

CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

openSUSE-SU-2026:12212-1: go1.26-1.26.10-1.1 on GA media

CVE-2026-111943 · CVE-2026-78663 · CVE-2026-78669

openSUSE-SU-2026:12284-1: github-mcp-server-2.0.3-1.1 on GA media

CVE-2026-111943

openSUSE-SU-2026:12360-1: diun-4.33.1-1.1 on GA media

CVE-2026-111943

openSUSE-SU-2026:12385-1: bugwarden-0.7.0-1.1 on GA media

CVE-2026-111943

RHSA-2026:87092: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:90362: Red Hat Security Advisory: podman security update

CVE-2025-11395 · CVE-2026-78667 · CVE-2026-111943

RHSA-2026:91172: Red Hat Security Advisory: Red Hat build of MicroShift 4.20.44 security update

CVE-2026-111943

RHSA-2026:87245: Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update

CVE-2024-45336 · CVE-2025-4673 · CVE-2025-22866 · CVE-2025-22874 · CVE-2025-68121 · CVE-2026-27137 · CVE-2026-27143 · CVE-2026-27144 · CVE-2026-27145 · CVE-2026-32280 · CVE-2026-32281 · CVE-2026-32282 · CVE-2026-32283 · CVE-2026-33810 · CVE-2026-33811 · CVE-2026-33814 · CVE-2026-33818 · CVE-2026-39820 · CVE-2026-39821 · CVE-2026-42499 · CVE-2026-42504 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

RHSA-2026:91646: Red Hat Security Advisory: osbuild-composer security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-88031 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:91720: Red Hat Security Advisory: ignition security update

CVE-2026-111943

RHSA-2026:92480: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.1.14

CVE-2026-56857 · CVE-2026-56866 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

RHSA-2026:94573: Red Hat Security Advisory: zero trust workload identity manager for Red Hat OpenShift 1.1.3

CVE-2026-111943

RHSA-2026:95014: Red Hat Security Advisory: opentelemetry-collector security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:86906: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:86956: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:91138: Red Hat Security Advisory: yggdrasil security update

CVE-2026-78669 · CVE-2026-94440 · CVE-2026-111943

RHSA-2026:90332: Red Hat Security Advisory: RHOSO 18.0 os-diff security update

CVE-2026-27145 · CVE-2026-33818 · CVE-2026-42504 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

SUSE-SU-2026:24360-1: Security update for go1.27

CVE-2026-111943

openSUSE-SU-2026:12262-1: istioctl-1.31.3-1.1 on GA media

CVE-2026-111943

RHSA-2026:94569: Red Hat Security Advisory: zero trust workload identity manager for Red Hat OpenShift 1.1.3

CVE-2026-111943

RHSA-2026:86928: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:86886: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHBA-2026:92271: Red Hat Bug Fix Advisory: zero trust workload identity manager for Red Hat OpenShift 1.0.4

CVE-2026-33818 · CVE-2026-111943

RHSA-2026:86093: Red Hat Security Advisory: golang security, bug fix, and enhancement update

CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

RHSA-2026:86908: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:95016: Red Hat Security Advisory: opentelemetry-collector security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:86973: Red Hat Security Advisory: grafana-pcp security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:89626: Red Hat Security Advisory: OpenShift Container Platform 4.21.40 bug fix and security update

CVE-2026-33814 · CVE-2026-39821 · CVE-2026-39829 · CVE-2026-107176 · CVE-2026-111943

RHSA-2026:92516: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.4.4

CVE-2026-56857 · CVE-2026-56866 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

RHSA-2026:86992: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:89751: Red Hat Security Advisory: grafana security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:94570: Red Hat Security Advisory: zero trust workload identity manager for Red Hat OpenShift 1.1.3

CVE-2026-111943

RHSA-2026:86949: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:89926: Red Hat Security Advisory: git-lfs security update

CVE-2026-111943

RHSA-2026:90424: Red Hat Security Advisory: buildah security update

CVE-2025-11395 · CVE-2026-56855 · CVE-2026-78667 · CVE-2026-111943

RHSA-2026:88332: Red Hat Security Advisory: grafana security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:90757: Red Hat Security Advisory: git-lfs security update

CVE-2026-111943

RHSA-2026:89914: Red Hat Security Advisory: rhc security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:86812: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:89724: Red Hat Security Advisory: OpenShift Container Platform 4.18.59 packages and security update

CVE-2026-33814 · CVE-2026-111943

RHSA-2026:88316: Red Hat Security Advisory: grafana-pcp security update

CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:90330: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 security advisory

CVE-2026-33818 · CVE-2026-56852 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-73500 · CVE-2026-78669 · CVE-2026-111943

RHBA-2026:92269: Red Hat Bug Fix Advisory: zero trust workload identity manager for Red Hat OpenShift 1.0.4

CVE-2026-33818 · CVE-2026-111943

RHSA-2026:86914: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:90363: Red Hat Security Advisory: osbuild-composer security update

CVE-2026-25681 · CVE-2026-27136 · CVE-2026-33186 · CVE-2026-42502 · CVE-2026-55677 · CVE-2026-111943

RHSA-2026:90514: Red Hat Security Advisory: ignition security update

CVE-2026-111943

RHSA-2026:90726: Red Hat Security Advisory: rhc security update

CVE-2024-9355 · CVE-2024-45336 · CVE-2025-68121 · CVE-2026-27145 · CVE-2026-32280 · CVE-2026-32282 · CVE-2026-32283 · CVE-2026-33811 · CVE-2026-33818 · CVE-2026-39821 · CVE-2026-42504 · CVE-2026-56858 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:86893: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

SUSE-SU-2026:24359-1: Security update for go1.26

CVE-2026-111943 · CVE-2026-78663 · CVE-2026-78669

RHSA-2026:87024: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:87041: Red Hat Security Advisory: golang security, bug fix, and enhancement update

CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

RHSA-2026:90271: Red Hat Security Advisory: OpenShift Container Platform 4.12.102 packages and security update

CVE-2026-44918 · CVE-2026-111943

RHSA-2026:94562: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 11.0 product release

CVE-2026-53488 · CVE-2026-54099 · CVE-2026-76654 · CVE-2026-111943 · CVE-2026-114406

RHSA-2026:86936: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:89908: Red Hat Security Advisory: rhc security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:92451: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.0.17

CVE-2026-56857 · CVE-2026-56866 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

RHSA-2026:92858: Red Hat Security Advisory: Satellite 6.16 EUS security update

CVE-2026-8924 · CVE-2026-18660 · CVE-2026-19203 · CVE-2026-56852 · CVE-2026-59646 · CVE-2026-63072 · CVE-2026-63076 · CVE-2026-68494 · CVE-2026-68497 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-89407 · CVE-2026-89425 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:92861: Red Hat Security Advisory: Satellite 6.19 security update

CVE-2026-15307 · CVE-2026-18660 · CVE-2026-19203 · CVE-2026-56853 · CVE-2026-59646 · CVE-2026-68497 · CVE-2026-73619 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-78677 · CVE-2026-84445 · CVE-2026-87819 · CVE-2026-89407 · CVE-2026-89425 · CVE-2026-94440 · CVE-2026-96640 · CVE-2026-96643 · CVE-2026-96778 · CVE-2026-97031 · CVE-2026-97687 · CVE-2026-97689 · CVE-2026-110856 · CVE-2026-110857 · CVE-2026-110858 · CVE-2026-110859 · CVE-2026-111497 · CVE-2026-111943 · CVE-2026-112390 · CVE-2026-112391 · CVE-2026-112392 · CVE-2026-112393 · CVE-2026-112397 · CVE-2026-112398 · CVE-2026-112399 · CVE-2026-112400 · CVE-2026-112402 · CVE-2026-112403 · CVE-2026-112404 · CVE-2026-112405 · CVE-2026-112406 · CVE-2026-112892 · CVE-2026-112893 · CVE-2026-112894 · CVE-2026-112895 · CVE-2026-112896 · CVE-2026-112897 · CVE-2026-114145

RHSA-2026:86958: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:86977: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:87911: Red Hat Security Advisory: grafana-pcp security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:89715: Red Hat Security Advisory: OpenShift Container Platform 4.16.74 bug fix and security update

CVE-2024-24786 · CVE-2026-14362 · CVE-2026-33814 · CVE-2026-39829 · CVE-2026-42151 · CVE-2026-46597 · CVE-2026-49329 · CVE-2026-59887 · CVE-2026-75888 · CVE-2026-83589 · CVE-2026-84292 · CVE-2026-93017 · CVE-2026-111943

RHSA-2026:95015: Red Hat Security Advisory: opentelemetry-collector security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:86938: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:88396: Red Hat Security Advisory: grafana security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:86867: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:86934: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:88188: Red Hat Security Advisory: grafana security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:94571: Red Hat Security Advisory: zero trust workload identity manager for Red Hat OpenShift 1.1.3

CVE-2026-111943

RHBA-2026:92270: Red Hat Bug Fix Advisory: zero trust workload identity manager for Red Hat OpenShift 1.0.4

CVE-2026-33818 · CVE-2026-111943

RHSA-2026:86943: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:89920: Red Hat Security Advisory: git-lfs security update

CVE-2026-111943

RHSA-2026:87053: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:86932: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

openSUSE-SU-2026:12220-1: regclient-0.11.7-1.1 on GA media

CVE-2026-111943

RHSA-2026:85899: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

CVE-2026-94440 · CVE-2026-97030 · CVE-2026-111943

RHSA-2026:89229: Red Hat Security Advisory: OpenShift Container Platform 4.21.40 packages and security update

CVE-2026-111943

RHSA-2026:90519: Red Hat Security Advisory: ignition security update

CVE-2026-111943

RHSA-2026:89817: Red Hat Security Advisory: Red Hat build of MicroShift 4.22.20 security update

CVE-2026-111943

RHSA-2026:89655: Red Hat Security Advisory: OpenShift Container Platform 4.19.53 bug fix and security update

CVE-2026-33814 · CVE-2026-104795 · CVE-2026-111943

RHSA-2026:91632: Red Hat Security Advisory: Release of components for Service Telemetry Framework 1.5.7

CVE-2026-111943

RHSA-2026:89081: Red Hat Security Advisory: Red Hat OpenShift Builds 1.8.3

CVE-2026-46600 · CVE-2026-56851 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-97031 · CVE-2026-111943 · CVE-2026-114406

RHSA-2026:88354: Red Hat Security Advisory: grafana-pcp security update

CVE-2026-78669 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:86858: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:89760: Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update

CVE-2026-78667 · CVE-2026-111943

RHSA-2026:91572: Red Hat Security Advisory: yggdrasil security update

CVE-2026-78669 · CVE-2026-94440 · CVE-2026-111943

RHSA-2026:92509: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.3.9

CVE-2026-56857 · CVE-2026-56866 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

RHSA-2026:89933: Red Hat Security Advisory: delve security update

CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

RHSA-2026:88340: Red Hat Security Advisory: grafana security update

CVE-2024-45336 · CVE-2025-22866 · CVE-2025-68121 · CVE-2026-27137 · CVE-2026-32280 · CVE-2026-32281 · CVE-2026-32282 · CVE-2026-32283 · CVE-2026-33810 · CVE-2026-33818 · CVE-2026-39820 · CVE-2026-39821 · CVE-2026-42499 · CVE-2026-42504 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94440 · CVE-2026-97031 · CVE-2026-111943

openSUSE-SU-2026:22153-1: Security update for go1.27

CVE-2026-111943

RHSA-2026:87075: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:86203: Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update

CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

RHSA-2026:87076: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:86863: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

RHSA-2026:87029: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-111943

Source published
Oct 21, 2026, 12:52:18 AM (timezone not stated)
Source modified
Oct 30, 2026, 1:08:13 PM (timezone not stated)
Observed here
7 Nov 2026 04:33:25 UTC
Source terms
ENISA EUVD · source terms and attribution apply

Original source record · Cite this exact observation · Complete original publisher JSON

This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: euvd · ENISA EUVD · source terms and attribution apply. Source text is retained; field grouping and change labels are provided by ChangeIntel.

EUVD CVSS 3.1 · 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

nvd · CVE-2026-111943

Published

On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denyl…

On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.

NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON.

Source analysis status: Awaiting Analysis

Weakness classifications: CWE-299

Original publisher date fields

published: 2026-10-21T01:17:20.797

lastModified: 2026-10-30T13:18:28.740

Source published
21 Oct 2026 01:17:20 UTC
Source modified
30 Oct 2026 13:18:28 UTC
Observed here
31 Oct 2026 06:57:40 UTC
Source terms
NIST NVD usage terms; underlying source attribution retained

Original source record · Cite this exact observation · Complete original publisher JSON

This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: nvd · NIST NVD usage terms; underlying source attribution retained. Source text is retained; field grouping and change labels are provided by ChangeIntel.

CVSS 3.1 · 134c704f-9b21-4f2e-91b3-4a467353bcc0 · Secondary · 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

osv · GO-2026-6809

Published

Distrust compromised intermediate certificates in crypto/x509

On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.

Source published
21 Oct 2026 00:27:29 UTC
Source modified
29 Oct 2026 10:55:54 UTC
Observed here
29 Oct 2026 11:12:45 UTC
Source terms
OSV · upstream source license applies

Original source record · Cite this exact observation · Complete original publisher JSON

This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: osv · OSV · upstream source license applies. Source text is retained; field grouping and change labels are provided by ChangeIntel.

osv · RUSTSEC-2026-0381

Published

Bundled root certificates allow trust in distrusted emSign intermediates

Affected versions include `emSign ECC Root CA - G3`, which can allow certificate paths through distrusted emSign intermediates. Affected versions may accept certificate paths containing distrusted emSign intermediate public keys. The private keys corresponding to these intermediates are now well known. Version 1.0.10+ removes this root. The `webpki-roots` 0.26.11 compatibility package contains no independent trust store and re-exports the roots from its separately resolved 1.x dependency. That parent dependency must resolve to 1.0.10 or newer; an older parent remains affected by this advisory.

Source published
19 Oct 2026 12:00:00 UTC
Source modified
29 Oct 2026 10:55:54 UTC
Observed here
29 Oct 2026 11:13:03 UTC
Source terms
OSV · upstream source license applies

Original source record · Cite this exact observation · Complete original publisher JSON

This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: osv · OSV · upstream source license applies. Source text is retained; field grouping and change labels are provided by ChangeIntel.

osv · RUSTSEC-2026-0382

Published

Certificate verification may accept distrusted intermediates

Affected versions may accept certificate paths containing distrusted emSign intermediate public keys when the configured trust anchors allow such paths. The private keys corresponding to these intermediates are now well known. Versions 0.103.16 and 0.104.0-alpha.8 reject paths containing these public keys.

Source published
20 Oct 2026 12:00:00 UTC
Source modified
29 Oct 2026 10:55:54 UTC
Observed here
29 Oct 2026 11:13:03 UTC
Source terms
OSV · upstream source license applies

Original source record · Cite this exact observation · Complete original publisher JSON

This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: osv · OSV · upstream source license applies. Source text is retained; field grouping and change labels are provided by ChangeIntel.

osv · RUSTSEC-2026-0383

Published

Bundled root certificates allow trust in distrusted emSign intermediates

Affected versions include `emSign ECC Root CA - G3`, which can allow certificate paths through distrusted emSign intermediates. Affected versions may accept certificate paths containing distrusted emSign intermediate public keys. The private keys corresponding to these intermediates are now well known. Version 1.0.10+ removes this root. Version 0.26.11 is a compatibility wrapper that re-exports `parent::TLS_SERVER_ROOT_CERTS` from its `webpki-root-certs` 1.x dependency; it contains no separate root certificate list. Its resolved 1.x dependency must be updated to 1.0.10 or later.

Source published
19 Oct 2026 12:00:00 UTC
Source modified
29 Oct 2026 10:55:54 UTC
Observed here
29 Oct 2026 11:13:03 UTC
Source terms
OSV · upstream source license applies

Original source record · Cite this exact observation · Complete original publisher JSON

This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: osv · OSV · upstream source license applies. Source text is retained; field grouping and change labels are provided by ChangeIntel.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 7 Nov 08:57 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.