Stack buffer overflow in CMS (Auth)EnvelopedData parsing

MITRE NVD CVE.ORG JSON API Print: PDF PDF

Summary

CVECVE-2025-15467
StatePUBLISHED
Assigneropenssl
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-01-27 16:16:14 UTC
Updated2026-11-10 13:17:30 UTC
DescriptionIssue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is copied into a fixed-size stack buffer without verifying that its length fits the destination. An attacker can supply a crafted CMS message with an oversized IV, causing a stack-based out-of-bounds write before any authentication or tag verification occurs. Applications and services that parse untrusted CMS or PKCS#7 content using AEAD ciphers (e.g., S/MIME (Auth)EnvelopedData with AES-GCM) are vulnerable. Because the overflow occurs prior to authentication, no valid key material is required to trigger it. While exploitability to remote code execution depends on platform and toolchain mitigations, the stack-based write primitive represents a severe risk. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue. OpenSSL 1.1.1 and 1.0.2 are not affected by this issue.

Risk And Classification

Primary CVSS: v3.1 8.8 HIGH from ADP

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Problem Types: CWE-787 | CWE-120 | CWE-787 CWE-787 Out-of-bounds Write | CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

VersionSourceTypeScoreSeverityVector
3.1ADPDECLARED8.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
3.1ADPCVSS9.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1134c704f-9b21-4f2e-91b3-4a467353bcc0Secondary8.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
3.10b0ca135-0b70-47e7-9f44-1890c2a1c46cSecondary9.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 Breakdown

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Application Openssl Openssl All All All All

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA OpenSSL OpenSSL affected 3.6.0 3.6.1 semver Not specified
CNA OpenSSL OpenSSL affected 3.5.0 3.5.5 semver Not specified
CNA OpenSSL OpenSSL affected 3.4.0 3.4.4 semver Not specified
CNA OpenSSL OpenSSL affected 3.3.0 3.3.6 semver Not specified
CNA OpenSSL OpenSSL affected 3.0.0 3.0.19 semver Not specified
ADP Siemens AI Lightweight Inference Server affected * custom Not specified
ADP Siemens Connector For Azure affected V1.8.0 custom Not specified
ADP Siemens Databus affected V3.3.2 custom Not specified
ADP Siemens Desigo CC Family V7 affected * custom Not specified
ADP Siemens Desigo CC Family V8 affected * custom Not specified
ADP Siemens Desigo CC Family V9 affected V9.0 QU1 custom Not specified
ADP Siemens HiMed Cockpit affected * custom Not specified
ADP Siemens RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 affected * custom Not specified
ADP Siemens RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 affected * custom Not specified
ADP Siemens RUGGEDCOM ROX MX5000 unaffected * custom Not specified
ADP Siemens RUGGEDCOM ROX MX5000RE unaffected * custom Not specified
ADP Siemens RUGGEDCOM ROX RX1400 unaffected * custom Not specified
ADP Siemens RUGGEDCOM ROX RX1500 unaffected * custom Not specified
ADP Siemens RUGGEDCOM ROX RX1501 unaffected * custom Not specified
ADP Siemens RUGGEDCOM ROX RX1510 unaffected * custom Not specified
ADP Siemens RUGGEDCOM ROX RX1511 unaffected * custom Not specified
ADP Siemens RUGGEDCOM ROX RX1512 unaffected * custom Not specified
ADP Siemens RUGGEDCOM ROX RX1524 unaffected * custom Not specified
ADP Siemens RUGGEDCOM ROX RX1536 unaffected * custom Not specified
ADP Siemens RUGGEDCOM ROX RX5000 unaffected * custom Not specified
ADP Siemens SCALANCE LPE9403 6GK5998-3GS00-2AC2 affected * custom Not specified
ADP Siemens SCALANCE LPE9413 6GK5998-3GS01-2AC2 affected * custom Not specified
ADP Siemens SCALANCE LPE9433 6GK5998-3GS11-2AC2 affected * custom Not specified
ADP Siemens SCALANCE M804PB 6GK5804-0AP00-2AA2 affected * custom Not specified
ADP Siemens SCALANCE M812-1 ADSL-Router Family affected * custom Not specified
ADP Siemens SCALANCE M816-1 ADSL-Router Family affected * custom Not specified
ADP Siemens SCALANCE M826-2 SHDSL-Router 6GK5826-2AB00-2AB2 affected * custom Not specified
ADP Siemens SCALANCE M874-2 6GK5874-2AA00-2AA2 affected * custom Not specified
ADP Siemens SCALANCE M874-3 6GK5874-3AA00-2AA2 affected * custom Not specified
ADP Siemens SCALANCE M874-3 3G-Router CN 6GK5874-3AA00-2FA2 affected * custom Not specified
ADP Siemens SCALANCE M876-3 6GK5876-3AA02-2BA2 affected * custom Not specified
ADP Siemens SCALANCE M876-3 ROK 6GK5876-3AA02-2EA2 affected * custom Not specified
ADP Siemens SCALANCE M876-4 6GK5876-4AA10-2BA2 affected * custom Not specified
ADP Siemens SCALANCE M876-4 EU 6GK5876-4AA00-2BA2 affected * custom Not specified
ADP Siemens SCALANCE M876-4 NAM 6GK5876-4AA00-2DA2 affected * custom Not specified
ADP Siemens SCALANCE MUB852-1 A1 6GK5852-1EA10-1AA1 affected * custom Not specified
ADP Siemens SCALANCE MUB852-1 B1 6GK5852-1EA10-1BA1 affected * custom Not specified
ADP Siemens SCALANCE MUM853-1 A1 6GK5853-2EA10-2AA1 affected * custom Not specified
ADP Siemens SCALANCE MUM853-1 B1 6GK5853-2EA10-2BA1 affected * custom Not specified
ADP Siemens SCALANCE MUM853-1 EU 6GK5853-2EA00-2DA1 affected * custom Not specified
ADP Siemens SCALANCE MUM856-1 A1 6GK5856-2EA10-3AA1 affected * custom Not specified
ADP Siemens SCALANCE MUM856-1 B1 6GK5856-2EA10-3BA1 affected * custom Not specified
ADP Siemens SCALANCE MUM856-1 CN 6GK5856-2EA00-3FA1 affected * custom Not specified
ADP Siemens SCALANCE MUM856-1 EU 6GK5856-2EA00-3DA1 affected * custom Not specified
ADP Siemens SCALANCE MUM856-1 RoW 6GK5856-2EA00-3AA1 affected * custom Not specified
ADP Siemens SCALANCE S615 EEC LAN-Router 6GK5615-0AA01-2AA2 affected * custom Not specified
ADP Siemens SCALANCE S615 LAN-Router 6GK5615-0AA00-2AA2 affected * custom Not specified
ADP Siemens SCALANCE SC622-2C 6GK5622-2GS00-2AC2 unaffected * custom Not specified
ADP Siemens SCALANCE SC626-2C 6GK5626-2GS00-2AC2 unaffected * custom Not specified
ADP Siemens SCALANCE SC632-2C 6GK5632-2GS00-2AC2 unaffected * custom Not specified
ADP Siemens SCALANCE SC636-2C 6GK5636-2GS00-2AC2 unaffected * custom Not specified
ADP Siemens SCALANCE SC642-2C 6GK5642-2GS00-2AC2 unaffected * custom Not specified
ADP Siemens SCALANCE SC646-2C 6GK5646-2GS00-2AC2 unaffected * custom Not specified
ADP Siemens SCALANCE WAB762-1 6GK5762-1AJ00-6AA0 affected * custom Not specified
ADP Siemens SCALANCE WAM763-1 6GK5763-1AL00-7DA0 affected * custom Not specified
ADP Siemens SCALANCE WAM763-1 ME 6GK5763-1AL00-7DC0 affected * custom Not specified
ADP Siemens SCALANCE WAM763-1 US 6GK5763-1AL00-7DB0 affected * custom Not specified
ADP Siemens SCALANCE WAM766-1 6GK5766-1GE00-7DA0 affected * custom Not specified
ADP Siemens SCALANCE WAM766-1 ME 6GK5766-1GE00-7DC0 affected * custom Not specified
ADP Siemens SCALANCE WAM766-1 US 6GK5766-1GE00-7DB0 affected * custom Not specified
ADP Siemens SCALANCE WAM766-1 EEC 6GK5766-1GE00-7TA0 affected * custom Not specified
ADP Siemens SCALANCE WAM766-1 EEC ME 6GK5766-1GE00-7TC0 affected * custom Not specified
ADP Siemens SCALANCE WAM766-1 EEC US 6GK5766-1GE00-7TB0 affected * custom Not specified
ADP Siemens SCALANCE WUB762-1 6GK5762-1AJ00-1AA0 affected * custom Not specified
ADP Siemens SCALANCE WUB762-1 IFeatures 6GK5762-1AJ00-2AA0 affected * custom Not specified
ADP Siemens SCALANCE WUM763-1 6GK5763-1AL00-3AA0 affected * custom Not specified
ADP Siemens SCALANCE WUM763-1 6GK5763-1AL00-3DA0 affected * custom Not specified
ADP Siemens SCALANCE WUM763-1 US 6GK5763-1AL00-3AB0 affected * custom Not specified
ADP Siemens SCALANCE WUM763-1 US 6GK5763-1AL00-3DB0 affected * custom Not specified
ADP Siemens SCALANCE WUM766-1 6GK5766-1GE00-3DA0 affected * custom Not specified
ADP Siemens SCALANCE WUM766-1 ME 6GK5766-1GE00-3DC0 affected * custom Not specified
ADP Siemens SCALANCE WUM766-1 USA 6GK5766-1GE00-3DB0 affected * custom Not specified
ADP Siemens SCALANCE X200-4P IRT 6GK5200-4AH00-2BA3 unaffected * custom Not specified
ADP Siemens SCALANCE X200-4P IRT 6GK5200-4AH10-2BA3 unaffected * custom Not specified
ADP Siemens SCALANCE X201-3P IRT 6GK5201-3BH00-2BA3 unaffected * custom Not specified
ADP Siemens SCALANCE X201-3P IRT 6GK5201-3BH10-2BA3 unaffected * custom Not specified
ADP Siemens SCALANCE X201-3P IRT PRO 6GK5201-3JR00-2BA6 unaffected * custom Not specified
ADP Siemens SCALANCE X201-3P IRT PRO 6GK5201-3JR10-2BA6 unaffected * custom Not specified
ADP Siemens SCALANCE X202-2IRT 6GK5202-2BB00-2BA3 unaffected * custom Not specified
ADP Siemens SCALANCE X202-2IRT 6GK5202-2BB10-2BA3 unaffected * custom Not specified
ADP Siemens SCALANCE X202-2P IRT 6GK5202-2BH00-2BA3 unaffected * custom Not specified
ADP Siemens SCALANCE X202-2P IRT 6GK5202-2BH10-2BA3 unaffected * custom Not specified
ADP Siemens SCALANCE X202-2P IRT PRO 6GK5202-2JR00-2BA6 unaffected * custom Not specified
ADP Siemens SCALANCE X202-2P IRT PRO 6GK5202-2JR10-2BA6 unaffected * custom Not specified
ADP Siemens SCALANCE X204-2 6GK5204-2BB10-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X204-2FM 6GK5204-2BB11-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X204-2LD 6GK5204-2BC10-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X204-2LD TS 6GK5204-2BC10-2CA2 unaffected * custom Not specified
ADP Siemens SCALANCE X204-2TS 6GK5204-2BB10-2CA2 unaffected * custom Not specified
ADP Siemens SCALANCE X204IRT 6GK5204-0BA00-2BA3 unaffected * custom Not specified
ADP Siemens SCALANCE X204IRT 6GK5204-0BA10-2BA3 unaffected * custom Not specified
ADP Siemens SCALANCE X204IRT PRO 6GK5204-0JA00-2BA6 unaffected * custom Not specified
ADP Siemens SCALANCE X204IRT PRO 6GK5204-0JA10-2BA6 unaffected * custom Not specified
ADP Siemens SCALANCE X204RNA HSR 6GK5204-0BA00-2MB2 unaffected * custom Not specified
ADP Siemens SCALANCE X204RNA PRP 6GK5204-0BA00-2KB2 unaffected * custom Not specified
ADP Siemens SCALANCE X204RNA EEC HSR 6GK5204-0BS00-2NA3 unaffected * custom Not specified
ADP Siemens SCALANCE X204RNA EEC PRP 6GK5204-0BS00-3LA3 unaffected * custom Not specified
ADP Siemens SCALANCE X204RNA EEC PRP/HSR 6GK5204-0BS00-3PA3 unaffected * custom Not specified
ADP Siemens SCALANCE X206-1 6GK5206-1BB10-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X206-1LD 6GK5206-1BC10-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X208 6GK5208-0BA10-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X208PRO 6GK5208-0HA10-2AA6 unaffected * custom Not specified
ADP Siemens SCALANCE X212-2 6GK5212-2BB00-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X212-2LD 6GK5212-2BC00-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X216 6GK5216-0BA00-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X224 6GK5224-0BA00-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X302-7 EEC 230V Coated 6GK5302-7GD00-3GA3 unaffected * custom Not specified
ADP Siemens SCALANCE X302-7 EEC 230V 6GK5302-7GD00-3EA3 unaffected * custom Not specified
ADP Siemens SCALANCE X302-7 EEC 24V Coated 6GK5302-7GD00-1GA3 unaffected * custom Not specified
ADP Siemens SCALANCE X302-7 EEC 24V 6GK5302-7GD00-1EA3 unaffected * custom Not specified
ADP Siemens SCALANCE X302-7 EEC 2x 230V Coated 6GK5302-7GD00-4GA3 unaffected * custom Not specified
ADP Siemens SCALANCE X302-7 EEC 2x 230V 6GK5302-7GD00-4EA3 unaffected * custom Not specified
ADP Siemens SCALANCE X302-7 EEC 2x 24V Coated 6GK5302-7GD00-2GA3 unaffected * custom Not specified
ADP Siemens SCALANCE X302-7 EEC 2x 24V 6GK5302-7GD00-2EA3 unaffected * custom Not specified
ADP Siemens SCALANCE X304-2FE 6GK5304-2BD00-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X306-1LD FE 6GK5306-1BF00-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X307-2 EEC 230V Coated 6GK5307-2FD00-3GA3 unaffected * custom Not specified
ADP Siemens SCALANCE X307-2 EEC 230V 6GK5307-2FD00-3EA3 unaffected * custom Not specified
ADP Siemens SCALANCE X307-2 EEC 24V Coated 6GK5307-2FD00-1GA3 unaffected * custom Not specified
ADP Siemens SCALANCE X307-2 EEC 24V 6GK5307-2FD00-1EA3 unaffected * custom Not specified
ADP Siemens SCALANCE X307-2 EEC 2x 230V Coated 6GK5307-2FD00-4GA3 unaffected * custom Not specified
ADP Siemens SCALANCE X307-2 EEC 2x 230V 6GK5307-2FD00-4EA3 unaffected * custom Not specified
ADP Siemens SCALANCE X307-2 EEC 2x 24V Coated 6GK5307-2FD00-2GA3 unaffected * custom Not specified
ADP Siemens SCALANCE X307-2 EEC 2x 24V 6GK5307-2FD00-2EA3 unaffected * custom Not specified
ADP Siemens SCALANCE X307-3 6GK5307-3BL00-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X307-3 6GK5307-3BL10-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X307-3LD 6GK5307-3BM00-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X307-3LD 6GK5307-3BM10-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X308-2 6GK5308-2FL00-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X308-2 6GK5308-2FL10-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X308-2LD 6GK5308-2FM00-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X308-2LD 6GK5308-2FM10-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X308-2LH 6GK5308-2FN00-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X308-2LH 6GK5308-2FN10-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X308-2LH 6GK5308-2FP00-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X308-2LH 6GK5308-2FP10-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X308-2M 6GK5308-2GG00-2AA2 unaffected * custom Not specified
ADP Siemens SCALANCE X308-2M 6GK5308-2GG10-2AA2 unaffected * custom Not specified
ADP Siemens SCALANCE X308-2M PoE 6GK5308-2QG00-2AA2 unaffected * custom Not specified
ADP Siemens SCALANCE X308-2M PoE 6GK5308-2QG10-2AA2 unaffected * custom Not specified
ADP Siemens SCALANCE X308-2M TS 6GK5308-2GG00-2CA2 unaffected * custom Not specified
ADP Siemens SCALANCE X308-2M TS 6GK5308-2GG10-2CA2 unaffected * custom Not specified
ADP Siemens SCALANCE X310 6GK5310-0FA00-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X310 6GK5310-0FA10-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X310FE 6GK5310-0BA00-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X310FE 6GK5310-0BA10-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X320-1 FE 6GK5320-1BD00-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X320-1-2LD FE 6GK5320-3BF00-2AA3 unaffected * custom Not specified
ADP Siemens SCALANCE X408-2 6GK5408-2FD00-2AA2 unaffected * custom Not specified
ADP Siemens SCALANCE XC316-8 6GK5324-8TS00-2AC2 affected * custom Not specified
ADP Siemens SCALANCE XC324-4 6GK5328-4TS00-2AC2 affected * custom Not specified
ADP Siemens SCALANCE XC324-4 EEC 6GK5328-4TS00-2EC2 affected * custom Not specified
ADP Siemens SCALANCE XC332 6GK5332-0GA00-2AC2 affected * custom Not specified
ADP Siemens SCALANCE XC416-8 6GK5424-8TR00-2AC2 affected * custom Not specified
ADP Siemens SCALANCE XC424-4 6GK5428-4TR00-2AC2 affected * custom Not specified
ADP Siemens SCALANCE XC432 6GK5432-0GR00-2AC2 affected * custom Not specified
ADP Siemens SCALANCE XF201-3P IRT 6GK5201-3BH00-2BD2 unaffected * custom Not specified
ADP Siemens SCALANCE XF202-2P IRT 6GK5202-2BH00-2BD2 unaffected * custom Not specified
ADP Siemens SCALANCE XF204 6GK5204-0BA00-2AF2 unaffected * custom Not specified
ADP Siemens SCALANCE XF204-2 6GK5204-2BC00-2AF2 unaffected * custom Not specified
ADP Siemens SCALANCE XF204-2BA IRT 6GK5204-2AA00-2BD2 unaffected * custom Not specified
ADP Siemens SCALANCE XF204IRT 6GK5204-0BA00-2BF2 unaffected * custom Not specified
ADP Siemens SCALANCE XF204IRT 6GK5204-0BA10-2BF2 unaffected * custom Not specified
ADP Siemens SCALANCE XF206-1 6GK5206-1BC00-2AF2 unaffected * custom Not specified
ADP Siemens SCALANCE XF208 6GK5208-0BA00-2AF2 unaffected * custom Not specified
ADP Siemens SCALANCE XR302-32 6GK5334-5TS00-2AR3 affected * custom Not specified
ADP Siemens SCALANCE XR302-32 6GK5334-5TS00-3AR3 affected * custom Not specified
ADP Siemens SCALANCE XR302-32 6GK5334-5TS00-4AR3 affected * custom Not specified
ADP Siemens SCALANCE XR322-12 6GK5334-3TS00-2AR3 affected * custom Not specified
ADP Siemens SCALANCE XR322-12 6GK5334-3TS00-3AR3 affected * custom Not specified
ADP Siemens SCALANCE XR322-12 6GK5334-3TS00-4AR3 affected * custom Not specified
ADP Siemens SCALANCE XR324-12M 230V Ports On Front 6GK5324-0GG00-3AR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-12M 230V Ports On Front 6GK5324-0GG10-3AR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-12M 230V Ports On Rear 6GK5324-0GG00-3HR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-12M 230V Ports On Rear 6GK5324-0GG10-3HR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-12M 24V Ports On Front 6GK5324-0GG00-1AR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-12M 24V Ports On Front 6GK5324-0GG10-1AR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-12M 24V Ports On Rear 6GK5324-0GG00-1HR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-12M 24V Ports On Rear 6GK5324-0GG10-1HR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-12M TS 24V 6GK5324-0GG00-1CR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-12M TS 24V 6GK5324-0GG10-1CR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M EEC 100-240VAC/60-250VDC Ports On Front 6GK5324-4GG00-3ER2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M EEC 100-240VAC/60-250VDC Ports On Front 6GK5324-4GG10-3ER2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M EEC 100-240VAC/60-250VDC Ports On Rear 6GK5324-4GG00-3JR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M EEC 100-240VAC/60-250VDC Ports On Rear 6GK5324-4GG10-3JR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M EEC 24V Ports On Front 6GK5324-4GG00-1ER2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M EEC 24V Ports On Front 6GK5324-4GG10-1ER2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M EEC 24V Ports On Rear 6GK5324-4GG00-1JR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M EEC 24V Ports On Rear 6GK5324-4GG10-1JR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M EEC 2x 100-240VAC/60-250VDC Ports On Front 6GK5324-4GG00-4ER2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M EEC 2x 100-240VAC/60-250VDC Ports On Front 6GK5324-4GG10-4ER2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M EEC 2x 100-240VAC/60-250VDC Ports On Rear 6GK5324-4GG00-4JR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M EEC 2x 100-240VAC/60-250VDC Ports On Rear 6GK5324-4GG10-4JR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M EEC 2x 24V Ports On Front 6GK5324-4GG00-2ER2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M EEC 2x 24V Ports On Front 6GK5324-4GG10-2ER2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M EEC 2x 24V Ports On Rear 6GK5324-4GG00-2JR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M EEC 2x 24V Ports On Rear 6GK5324-4GG10-2JR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M PoE 230V Ports On Front 6GK5324-4QG00-3AR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M PoE 230V Ports On Front 6GK5324-4QG10-3AR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M PoE 230V Ports On Rear 6GK5324-4QG00-3HR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M PoE 230V Ports On Rear 6GK5324-4QG10-3HR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M PoE 24V Ports On Front 6GK5324-4QG00-1AR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M PoE 24V Ports On Front 6GK5324-4QG10-1AR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M PoE 24V Ports On Rear 6GK5324-4QG00-1HR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M PoE 24V Ports On Rear 6GK5324-4QG10-1HR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M PoE TS 24V Ports On Front 6GK5324-4QG00-1CR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR324-4M PoE TS 24V Ports On Front 6GK5324-4QG10-1CR2 unaffected * custom Not specified
ADP Siemens SCALANCE XR326-8 6GK5334-2TS00-2AR3 affected * custom Not specified
ADP Siemens SCALANCE XR326-8 6GK5334-2TS00-3AR3 affected * custom Not specified
ADP Siemens SCALANCE XR326-8 6GK5334-2TS00-4AR3 affected * custom Not specified
ADP Siemens SCALANCE XR326-8 EEC 6GK5334-2TS00-2ER3 affected * custom Not specified
ADP Siemens SCALANCE XR502-32 6GK5534-5TR00-2AR3 affected * custom Not specified
ADP Siemens SCALANCE XR502-32 6GK5534-5TR00-3AR3 affected * custom Not specified
ADP Siemens SCALANCE XR502-32 6GK5534-5TR00-4AR3 affected * custom Not specified
ADP Siemens SCALANCE XR522-12 6GK5534-3TR00-2AR3 affected * custom Not specified
ADP Siemens SCALANCE XR522-12 6GK5534-3TR00-3AR3 affected * custom Not specified
ADP Siemens SCALANCE XR522-12 6GK5534-3TR00-4AR3 affected * custom Not specified
ADP Siemens SCALANCE XR524-8WG 6GK5532-2SR00-2AR3 affected * custom Not specified
ADP Siemens SCALANCE XR524-8WG 6GK5532-2SR00-2RR3 affected * custom Not specified
ADP Siemens SCALANCE XR524-8WG 6GK5532-2SR00-3AR3 affected * custom Not specified
ADP Siemens SCALANCE XR524-8WG 6GK5532-2SR00-3RR3 affected * custom Not specified
ADP Siemens SCALANCE XR526-8 6GK5534-2TR00-2AR3 affected * custom Not specified
ADP Siemens SCALANCE XR526-8 6GK5534-2TR00-3AR3 affected * custom Not specified
ADP Siemens SCALANCE XR526-8 6GK5534-2TR00-4AR3 affected * custom Not specified
ADP Siemens Shopfloor IT Suite affected * custom Not specified
ADP Siemens SIDIS Prime affected V4.0.700 * custom Not specified
ADP Siemens Siemens OPC UA Modelling Editor SiOME affected * custom Not specified
ADP Siemens SIMATIC EaSie Core Package V26 affected * custom Not specified
ADP Siemens SIMATIC EaSie PCS 7 Skill Package V26 6DL5424-0BX00-0AV8 affected * custom Not specified
ADP Siemens SIMATIC HMI Basic Panels unaffected * custom Not specified
ADP Siemens SIMATIC HMI Comfort Panels unaffected * custom Not specified
ADP Siemens SIMATIC HMI Mobile Panels unaffected * custom Not specified
ADP Siemens SIMATIC Industrial Thin Client unaffected * custom Not specified
ADP Siemens SIMATIC IoT2050 Advanced 6ES7647-0BA00-1YA2 unaffected * custom Not specified
ADP Siemens SIMATIC IoT2050 Basic 6ES7647-0BA00-0YA2 unaffected * custom Not specified
ADP Siemens SIMATIC IoT2050 M.2 6ES7647-0BB00-1YA2 unaffected * custom Not specified
ADP Siemens SIMATIC IoT2050 SM 6ES7647-0CA00-1AA2 unaffected * custom Not specified
ADP Siemens SIMATIC IPC BX-21A affected * custom Not specified
ADP Siemens SIMATIC IPC MD-57A affected * custom Not specified
ADP Siemens SIMATIC IPC ORCLA affected * custom Not specified
ADP Siemens SIMATIC Logon V1.6 affected V1.6 Upd12 custom Not specified
ADP Siemens SIMATIC Logon V2.0 affected * custom Not specified
ADP Siemens SIMATIC MV530 H 6GF3530-0GE10 affected * custom Not specified
ADP Siemens SIMATIC MV530 S 6GF3530-0CD10 affected * custom Not specified
ADP Siemens SIMATIC MV540 H 6GF3540-0GE10 affected * custom Not specified
ADP Siemens SIMATIC MV540 H CRANES 6GF3540-0GE30 affected * custom Not specified
ADP Siemens SIMATIC MV540 S 6GF3540-0CD10 affected * custom Not specified
ADP Siemens SIMATIC MV550 H 6GF3550-0GE10 affected * custom Not specified
ADP Siemens SIMATIC MV550 S 6GF3550-0CD10 affected * custom Not specified
ADP Siemens SIMATIC MV560 U 6GF3560-0LE10 affected * custom Not specified
ADP Siemens SIMATIC MV560 X 6GF3560-0HE10 affected * custom Not specified
ADP Siemens SIMATIC PCS Neo V6.0 affected * custom Not specified
ADP Siemens SIMATIC PDM V9.3 affected V9.3 SP2 custom Not specified
ADP Siemens SIMATIC RTLS Locating Manager 6GT2780-0DA00 affected * custom Not specified
ADP Siemens SIMATIC RTLS Locating Manager 6GT2780-0DA10 affected * custom Not specified
ADP Siemens SIMATIC RTLS Locating Manager 6GT2780-0DA20 affected * custom Not specified
ADP Siemens SIMATIC RTLS Locating Manager 6GT2780-0DA30 affected * custom Not specified
ADP Siemens SIMATIC RTLS Locating Manager 6GT2780-1EA10 affected * custom Not specified
ADP Siemens SIMATIC RTLS Locating Manager 6GT2780-1EA20 affected * custom Not specified
ADP Siemens SIMATIC RTLS Locating Manager 6GT2780-1EA30 affected * custom Not specified
ADP Siemens SIMATIC STEP 7 V5 affected V5.7 SP4 custom Not specified
ADP Siemens SIMATIC Target affected * custom Not specified
ADP Siemens SIMATIC WinCC OA V3.19 affected V3.19 P024 custom Not specified
ADP Siemens SIMATIC WinCC OA V3.20 affected V3.20 P012 custom Not specified
ADP Siemens SIMATIC WinCC OA V3.21 affected V3.21 P02 custom Not specified
ADP Siemens SIMATIC WinCC Runtime Advanced V17 affected V17 Update 9 custom Not specified
ADP Siemens SIMATIC WinCC Unified Sequence affected V21 custom Not specified
ADP Siemens SIMATIC WinCC V7.5 affected * custom Not specified
ADP Siemens SIMATIC WinCC V8.0 affected * custom Not specified
ADP Siemens SIMATIC WinCC V8.1 affected * custom Not specified
ADP Siemens SIMOTION OACAMGEN 6AU1820-3EA20-0AB0 affected * custom Not specified
ADP Siemens SIMOVE Fleetmanager V3.1 affected V3.1.13 custom Not specified
ADP Siemens SIMOVE Fleetmanager V3.2 affected V3.2.4 custom Not specified
ADP Siemens SIMOVE Fleetmanager V3.3 affected V3.3.2 custom Not specified
ADP Siemens SINAMICS G200 affected V6.3 * custom Not specified
ADP Siemens SINAMICS G220 affected V6.3 * custom Not specified
ADP Siemens SINAMICS S200 affected V6.3 * custom Not specified
ADP Siemens SINAMICS S210 affected V6.3 * custom Not specified
ADP Siemens SINAMICS S220 affected V6.3 * custom Not specified
ADP Siemens SINEC INS affected V1.0 SP2 Update 5 custom Not specified
ADP Siemens SINEC NMS affected * custom Not specified
ADP Siemens SINEC Security Monitor affected * custom Not specified
ADP Siemens SINUMERIK Access MyMachine /OPC UA affected V4.2 SP3 custom Not specified
ADP Siemens SIPLANT affected * custom Not specified
ADP Siemens SIPLUS NET SCALANCE X202-2P IRT 6AG1202-2BH00-2BA3 unaffected * custom Not specified
ADP Siemens SIPLUS NET SCALANCE X308-2 6AG1308-2FL10-4AA3 unaffected * custom Not specified
ADP Siemens SITRANS ASM IQ affected * custom Not specified
ADP Siemens SITRANS Soft Sensor Engine IQ SITRANS SSE IQ affected * custom Not specified
ADP Siemens User Management Component UMC affected V2.15.3.0 custom Not specified
ADP Siemens Visual Inspection Cockpit affected * custom Not specified
ADP Red Hat Red Hat Enterprise Linux 10 unaffected 1:3.5.1-7.el10_1 * rpm Not specified
ADP Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support unaffected 1:3.2.2-16.el10_0.6 * rpm Not specified
ADP Red Hat Red Hat Enterprise Linux 9 unaffected 1:3.5.1-7.el9_7 * rpm Not specified
ADP Red Hat Red Hat Enterprise Linux 9.0 Update Services For SAP Solutions unaffected 1:3.0.1-46.el9_0.7 * rpm Not specified
ADP Red Hat Red Hat Enterprise Linux 9.2 Update Services For SAP Solutions unaffected 1:3.0.7-18.el9_2.3 * rpm Not specified
ADP Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support unaffected 1:3.0.7-29.el9_4.2 * rpm Not specified
ADP Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support unaffected 1:3.2.2-7.el9_6.2 * rpm Not specified
ADP Red Hat Red Hat JBoss Core Services 2.4.62.SP3 Not specified Not specified
ADP Red Hat Red Hat OpenShift Container Platform 4.13 unaffected 413.92.202602240113-0 * rpm Not specified
ADP Red Hat Red Hat OpenShift Container Platform 4.14 unaffected 414.92.202602171627-0 * rpm Not specified
ADP Red Hat Red Hat OpenShift Container Platform 4.15 unaffected 415.92.202603101737-0 * rpm Not specified
ADP Red Hat Red Hat OpenShift Container Platform 4.16 unaffected 416.94.202602101357-0 * rpm Not specified
ADP Red Hat Red Hat OpenShift Container Platform 4.17 unaffected 417.94.202602090846-0 * rpm Not specified
ADP Red Hat Red Hat OpenShift Container Platform 4.18 unaffected 418.94.202602022246-0 * rpm Not specified
ADP Red Hat Red Hat OpenShift Container Platform 4.19 unaffected 4.19.9.6.202602112047-0 * rpm Not specified
ADP Red Hat Red Hat OpenShift Container Platform 4.20 unaffected 4.20.9.6.202602050328-0 * rpm Not specified
ADP Red Hat Service Interconnect 1 For RHEL 9 unaffected 1.8.8-1 * rpm Not specified
ADP Red Hat Service Interconnect 1 For RHEL 9 unaffected 1.8.8-1 * rpm Not specified
ADP Red Hat Service Interconnect 1 For RHEL 9 unaffected 1.8.8-1 * rpm Not specified
ADP Red Hat Service Interconnect 1 For RHEL 9 unaffected 1.8.8-1 * rpm Not specified
ADP Red Hat Service Interconnect 1 For RHEL 9 unaffected 1.8.8-1 * rpm Not specified
ADP Red Hat Service Interconnect 1 For RHEL 9 unaffected 2.7.6-5 * rpm Not specified
ADP Red Hat Service Interconnect 1 For RHEL 9 unaffected 1.8.8-1 * rpm Not specified
ADP Red Hat Service Interconnect 1 For RHEL 9 unaffected 1.8.8-1 * rpm Not specified
ADP Red Hat Cost Management 4 unaffected 1770836349 * rpm Not specified
ADP Red Hat Red Hat AI Inference Server 3.2 unaffected 1772160593 * rpm Not specified
ADP Red Hat Red Hat AI Inference Server 3.2 unaffected 1772160625 * rpm Not specified
ADP Red Hat Red Hat Discovery 2 unaffected 1769104765 * rpm Not specified
ADP Red Hat Red Hat Discovery 2 unaffected 1769111774 * rpm Not specified
ADP Red Hat Red Hat Hardened Images unaffected 3.5.6-0.1.hum1 * rpm Not specified
ADP Red Hat Red Hat Insights Proxy 1.5 unaffected 1770740405 * rpm Not specified
ADP Red Hat Red Hat OpenShift Dev Spaces RHOSDS 3.26 unaffected 1770494649 * rpm Not specified
ADP Red Hat Red Hat OpenShift Dev Spaces RHOSDS 3.26 unaffected 1770404535 * rpm Not specified
ADP Red Hat Red Hat OpenShift Dev Spaces RHOSDS 3.26 unaffected 1770764461 * rpm Not specified
ADP Red Hat Red Hat OpenShift Dev Spaces RHOSDS 3.26 unaffected 1770494431 * rpm Not specified
ADP Red Hat Red Hat OpenShift Dev Spaces RHOSDS 3.26 unaffected 1770404517 * rpm Not specified
ADP Red Hat Red Hat OpenShift Dev Spaces RHOSDS 3.26 unaffected 1770759517 * rpm Not specified
ADP Red Hat Red Hat OpenShift Dev Spaces RHOSDS 3.26 unaffected 1770404430 * rpm Not specified
ADP Red Hat Red Hat OpenShift Dev Spaces RHOSDS 3.26 unaffected 1770851052 * rpm Not specified
ADP Red Hat Red Hat OpenShift Dev Spaces RHOSDS 3.26 unaffected 1770918006 * rpm Not specified
ADP Red Hat Red Hat OpenShift Dev Spaces RHOSDS 3.26 unaffected 1770494726 * rpm Not specified
ADP Red Hat Red Hat Update Infrastructure 5 unaffected 1770646925 * rpm Not specified
ADP Red Hat Red Hat Update Infrastructure 5 unaffected 1773670073 * rpm Not specified
ADP Red Hat Red Hat Update Infrastructure 5 unaffected 1773672059 * rpm Not specified
ADP Red Hat Red Hat Update Infrastructure 5 unaffected 1773670137 * rpm Not specified
ADP Red Hat Red Hat Enterprise Linux 10 Not specified Not specified
ADP Red Hat Red Hat Enterprise Linux 10 Not specified Not specified
ADP Red Hat Red Hat Enterprise Linux 10 Not specified Not specified
ADP Red Hat Red Hat Enterprise Linux 10 Not specified Not specified
ADP Red Hat Red Hat Enterprise Linux 6 Not specified Not specified
ADP Red Hat Red Hat Enterprise Linux 7 Not specified Not specified
ADP Red Hat Red Hat Enterprise Linux 7 Not specified Not specified
ADP Red Hat Red Hat Enterprise Linux 8 Not specified Not specified
ADP Red Hat Red Hat Enterprise Linux 8 Not specified Not specified
ADP Red Hat Red Hat Enterprise Linux 8 Not specified Not specified
ADP Red Hat Red Hat Enterprise Linux 8 Not specified Not specified
ADP Red Hat Red Hat Enterprise Linux 8 Not specified Not specified
ADP Red Hat Red Hat Enterprise Linux 8 Not specified Not specified
ADP Red Hat Red Hat Enterprise Linux 9 Not specified Not specified
ADP Red Hat Red Hat Enterprise Linux 9 Not specified Not specified
ADP Red Hat Red Hat Enterprise Linux 9 Not specified Not specified
ADP Red Hat Red Hat Enterprise Linux 9 Not specified Not specified
ADP Red Hat Red Hat Enterprise Linux 9 Not specified Not specified
ADP Red Hat Red Hat OpenShift Container Platform 4 Not specified Not specified

References

ReferenceSourceLinkTags
bugzilla.redhat.com/show_bug.cgi 0b0ca135-0b70-47e7-9f44-1890c2a1c46c bugzilla.redhat.com
access.redhat.com/errata/RHSA-2026:3462 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
access.redhat.com/errata/RHSA-2026:2077 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
access.redhat.com/errata/RHSA-2026:7261 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
access.redhat.com/errata/RHSA-2026:1473 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
access.redhat.com/errata/RHSA-2026:2844 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
access.redhat.com/errata/RHSA-2026:1594 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
github.com/guiimoraes/CVE-2025-15467 134c704f-9b21-4f2e-91b3-4a467353bcc0 github.com Exploit, Third Party Advisory
access.redhat.com/errata/RHSA-2026:2671 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
access.redhat.com/errata/RHSA-2026:4419 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15467.json 0b0ca135-0b70-47e7-9f44-1890c2a1c46c security.access.redhat.com
access.redhat.com/errata/RHSA-2026:4943 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
access.redhat.com/errata/RHSA-2026:2995 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
github.com/openssl/openssl/commit/6ced0fe6b10faa560e410e3ee8d6c82f06c65ea3 [email protected] github.com Patch
access.redhat.com/errata/RHSA-2026:6481 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e [email protected] github.com Patch
access.redhat.com/errata/RHSA-2026:3415 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
access.redhat.com/errata/RHSA-2026:1733 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
access.redhat.com/errata/RHSA-2026:1496 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
github.com/openssl/openssl/commit/5f26d4202f5b89664c5c3f3c62086276026ba9a9 [email protected] github.com Patch
access.redhat.com/errata/RHSA-2026:1519 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
access.redhat.com/errata/RHSA-2026:2974 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
access.redhat.com/errata/RHSA-2026:2563 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
cert-portal.siemens.com/productcert/html/ssa-434797.html 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e cert-portal.siemens.com
openssl-library.org/news/secadv/20260127.txt [email protected] openssl-library.org Vendor Advisory
access.redhat.com/errata/RHSA-2026:2659 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
access.redhat.com/errata/RHSA-2026:2485 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
access.redhat.com/errata/RHSA-2026:1736 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
access.redhat.com/errata/RHSA-2026:3228 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
access.redhat.com/errata/RHSA-2026:2633 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
access.redhat.com/security/cve/CVE-2025-15467 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
github.com/openssl/openssl/commit/d0071a0799f20cc8101730145349ed4487c268dc [email protected] github.com Patch
www.openwall.com/lists/oss-security/2026/01/27/10 af854a3a-2127-422b-91ae-364da2661108 www.openwall.com Mailing List
www.openwall.com/lists/oss-security/2026/02/25/6 af854a3a-2127-422b-91ae-364da2661108 www.openwall.com Mailing List
access.redhat.com/errata/RHSA-2026:1472 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
access.redhat.com/errata/RHSA-2026:1503 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
cert-portal.siemens.com/productcert/html/ssa-734552.html 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e cert-portal.siemens.com
github.com/openssl/openssl/commit/2c8f0e5fa9b6ee5508a0349e4572ddb74db5a703 [email protected] github.com Patch
access.redhat.com/errata/RHSA-2026:2072 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
access.redhat.com/errata/RHSA-2026:3461 0b0ca135-0b70-47e7-9f44-1890c2a1c46c access.redhat.com
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

Vendor Comments And Credit

Discovery Credit

CNA: Stanislav Fort (Aisle Research) (en)

CNA: Igor Ustinov (en)

Additional Advisory Data

SourceTimeEvent
ADP2026-01-16T14:21:50.710ZReported to Red Hat.
ADP2026-01-27T14:00:00.000ZMade public.

Solutions

ADP: RHSA-2026:3415: Red Hat OpenShift Container Platform 4.13

ADP: RHSA-2026:2974: Red Hat OpenShift Container Platform 4.14

ADP: RHSA-2026:4419: Red Hat OpenShift Container Platform 4.15

ADP: RHSA-2026:2659: Red Hat OpenShift Container Platform 4.16

ADP: RHSA-2026:2671: Red Hat OpenShift Container Platform 4.17

ADP: RHSA-2026:2072: Red Hat OpenShift Container Platform 4.18

ADP: RHSA-2026:2633: Red Hat OpenShift Container Platform 4.19

ADP: RHSA-2026:2077: Red Hat OpenShift Container Platform 4.20

ADP: RHSA-2026:6481: Red Hat Service Interconnect 1

ADP: RHSA-2026:1496: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0)

ADP: RHSA-2026:1472: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10)

ADP: RHSA-2026:1733: Red Hat Enterprise Linux AppStream E4S (v.9.0), Red Hat Enterprise Linux BaseOS E4S (v.9.0)

ADP: RHSA-2026:1594: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux BaseOS E4S (v.9.2)

ADP: RHSA-2026:1519: Red Hat Enterprise Linux AppStream EUS (v.9.4), Red Hat Enterprise Linux BaseOS EUS (v.9.4)

ADP: RHSA-2026:1503: Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat Enterprise Linux BaseOS EUS (v.9.6)

ADP: RHSA-2026:1473: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9)

ADP: RHSA-2026:3228: Cost Management 4

ADP: RHSA-2026:3461: Red Hat AI Inference Server 3.2

ADP: RHSA-2026:3462: Red Hat AI Inference Server 3.2

ADP: RHSA-2026:1736: Red Hat Discovery 2

ADP: RHSA-2026:7261: Red Hat Hardened Images

ADP: RHSA-2026:2485: Red Hat Insights proxy 1.5

ADP: RHSA-2026:2995: Red Hat JBoss Core Services 2.4.62.SP3

ADP: RHSA-2026:2844: Red Hat OpenShift Dev Spaces (RHOSDS) 3.26

ADP: RHSA-2026:4943: Red Hat Update Infrastructure 5

ADP: RHSA-2026:2563: Red Hat Update Infrastructure 5

Workarounds

ADP: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report