Unexpected work during chain building in crypto/x509

Summary

CVE	CVE-2026-32280
State	PUBLISHED
Assigner	Go
Source Priority	CVE Program / NVD first with legacy fallback
Published	2026-04-08 02:16:03 UTC
Updated	2026-07-10 12:16:38 UTC
Description	During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.

Risk And Classification

Primary CVSS: v3.1 7.5 HIGH from ADP

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.000210000 probability, percentile 0.054910000 (date 2026-04-14)

Problem Types: CWE-770 | CWE-770: Allocation of Resources Without Limits or Throttling | CWE-770 CWE-770 Allocation of Resources Without Limits or Throttling | CWE-770 Allocation of Resources Without Limits or Throttling

Version	Source	Type	Score	Severity	Vector
3.1	ADP	DECLARED	7.5	HIGH	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
3.1	ADP	CVSS	7.5	HIGH	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
3.1	134c704f-9b21-4f2e-91b3-4a467353bcc0	Secondary	7.5	HIGH	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
3.1	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	Secondary	7.5	HIGH	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`

CVSS v3.1 Breakdown

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Golang	Go	All	All	All	All

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Go Standard Library	Crypto/x509	affected 1.25.9 semver	Not specified
CNA	Go Standard Library	Crypto/x509	affected 1.26.0-0 1.26.2 semver	Not specified
ADP	Red Hat	Red Hat Ansible Automation Platform 2.6 For RHEL 10	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux Server V. 7 ELS	Not specified	Not specified
ADP	Red Hat	Red Hat Ansible Automation Platform 2.5 For RHEL 8	Not specified	Not specified
ADP	Red Hat	Red Hat OpenShift Container Platform 4.14	Not specified	Not specified
ADP	Red Hat	Red Hat OpenShift Container Platform 4.15	Not specified	Not specified
ADP	Red Hat	Red Hat OpenShift Container Platform 4.17	Not specified	Not specified
ADP	Red Hat	Red Hat OpenShift Container Platform 4.18	Not specified	Not specified
ADP	Red Hat	Red Hat Satellite 6.16 For RHEL 8	Not specified	Not specified
ADP	Red Hat	Red Hat Ansible Automation Platform 2.5 For RHEL 9	Not specified	Not specified
ADP	Red Hat	Red Hat Ansible Automation Platform 2.6 For RHEL 9	Not specified	Not specified
ADP	Red Hat	Cryostat 4 On RHEL 9	Not specified	Not specified
ADP	Red Hat	RHEM 1.0 For RHEL 9	Not specified	Not specified
ADP	Red Hat	Red Hat OpenStack Platform 17.1	Not specified	Not specified
ADP	Red Hat	Red Hat OpenShift Container Platform 4.19	Not specified	Not specified
ADP	Red Hat	Red Hat Satellite 6.16 For RHEL 9	Not specified	Not specified
ADP	Red Hat	Red Hat Satellite 6.19 For RHEL 9	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux AppStream EUS V. 10.0	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux AppStream V. 10	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux AppStream V. 8	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux AppStream AUS V.8.6	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux AppStream E4S V.8.6	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux AppStream TUS V.8.6	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux AppStream E4S V.9.4	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux AppStream EUS V.9.4	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux AppStream EUS V.9.6	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux AppStream V. 9	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux CodeReady Linux Builder EUS V. 10.0	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux CodeReady Linux Builder V. 10	Not specified	Not specified
ADP	Red Hat	Red Hat CodeReady Linux Builder EUS V.9.6	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux CodeReady Linux Builder V. 9	Not specified	Not specified
ADP	Red Hat	Custom Metric Autoscaler 2.19	Not specified	Not specified
ADP	Red Hat	HawtIO HawtIO 4.4.0	Not specified	Not specified
ADP	Red Hat	Logging Subsystem For Red Hat OpenShift 6.0	Not specified	Not specified
ADP	Red Hat	Logging Subsystem For Red Hat OpenShift 6.4	Not specified	Not specified
ADP	Red Hat	Multicluster Global Hub 1.4.5	Not specified	Not specified
ADP	Red Hat	Multicluster Global Hub 1.5.4	Not specified	Not specified
ADP	Red Hat	Multicluster Global Hub 1.6.2	Not specified	Not specified
ADP	Red Hat	Network Observability NETOBSERV 1.11.2	Not specified	Not specified
ADP	Red Hat	OpenShift API For Data Protection 1.4	Not specified	Not specified
ADP	Red Hat	OpenShift API For Data Protection 1.5	Not specified	Not specified
ADP	Red Hat	OpenShift Compliance Operator 1	Not specified	Not specified
ADP	Red Hat	Red Hat Advanced Cluster Management For Kubernetes 2.14	Not specified	Not specified
ADP	Red Hat	Red Hat Advanced Cluster Security For Kubernetes 4.10	Not specified	Not specified
ADP	Red Hat	Red Hat Advanced Cluster Security For Kubernetes 4.9	Not specified	Not specified
ADP	Red Hat	Red Hat Ansible Automation Platform 2.6	Not specified	Not specified
ADP	Red Hat	Red Hat Developer Hub 1.8	Not specified	Not specified
ADP	Red Hat	Red Hat Developer Hub 1.9	Not specified	Not specified
ADP	Red Hat	Red Hat Edge Manager 1.0	Not specified	Not specified
ADP	Red Hat	Red Hat Lightspeed Formerly Insights For Runtimes 1	Not specified	Not specified
ADP	Red Hat	Red Hat OpenShift AI 2.25	Not specified	Not specified
ADP	Red Hat	Red Hat OpenShift Builds 1.7.4	Not specified	Not specified
ADP	Red Hat	Red Hat OpenShift Dev Spaces 3.28	Not specified	Not specified
ADP	Red Hat	Red Hat OpenShift Service Mesh 2.6	Not specified	Not specified
ADP	Red Hat	Red Hat OpenShift Service Mesh 3.1	Not specified	Not specified
ADP	Red Hat	Red Hat OpenShift Service Mesh 3.2	Not specified	Not specified
ADP	Red Hat	Red Hat OpenShift Service Mesh 3.3	Not specified	Not specified
ADP	Red Hat	Red Hat OpenShift Service Mesh 3	Not specified	Not specified
ADP	Red Hat	Red Hat OpenShift Distributed Tracing 3.9.3	Not specified	Not specified
ADP	Red Hat	Red Hat OpenStack 1.5	Not specified	Not specified
ADP	Red Hat	Red Hat Quay 3.10	Not specified	Not specified
ADP	Red Hat	Red Hat Quay 3.14	Not specified	Not specified
ADP	Red Hat	Red Hat Quay 3.15	Not specified	Not specified
ADP	Red Hat	Red Hat Quay 3.16	Not specified	Not specified
ADP	Red Hat	Red Hat Quay 3.17	Not specified	Not specified
ADP	Red Hat	Red Hat Quay 3.9	Not specified	Not specified
ADP	Red Hat	Red Hat Trusted Artifact Signer 1.3	Not specified	Not specified
ADP	Red Hat	Red Hat Web Terminal 1.11	Not specified	Not specified
ADP	Red Hat	Red Hat Web Terminal 1.12	Not specified	Not specified
ADP	Red Hat	Red Hat Web Terminal 1.13	Not specified	Not specified
ADP	Red Hat	Red Hat Web Terminal 1.14	Not specified	Not specified
ADP	Red Hat	Red Hat Web Terminal 1.15	Not specified	Not specified
ADP	Red Hat	Mirror Registry For Red Hat OpenShift 2.0	Not specified	Not specified
ADP	Red Hat	Multicluster Engine For Kubernetes 2.10	Not specified	Not specified
ADP	Red Hat	Multicluster Engine For Kubernetes 2.11	Not specified	Not specified
ADP	Red Hat	Multicluster Engine For Kubernetes 2.17	Not specified	Not specified
ADP	Red Hat	Multicluster Engine For Kubernetes 2.6	Not specified	Not specified
ADP	Red Hat	Multicluster Engine For Kubernetes 2.8	Not specified	Not specified
ADP	Red Hat	Assisted Installer For Red Hat OpenShift Container Platform 2	Not specified	Not specified
ADP	Red Hat	Cert-manager Operator For Red Hat OpenShift	Not specified	Not specified
ADP	Red Hat	Confidential Compute Attestation	Not specified	Not specified
ADP	Red Hat	Deployment Validation Operator	Not specified	Not specified
ADP	Red Hat	External Secrets Operator For Red Hat OpenShift	Not specified	Not specified
ADP	Red Hat	ExternalDNS Operator	Not specified	Not specified
ADP	Red Hat	Fence Agents Remediation Operator	Not specified	Not specified
ADP	Red Hat	File Integrity Operator	Not specified	Not specified
ADP	Red Hat	Gatekeeper 3	Not specified	Not specified
ADP	Red Hat	Logging Subsystem For Red Hat OpenShift	Not specified	Not specified
ADP	Red Hat	Logical Volume Manager Storage	Not specified	Not specified
ADP	Red Hat	Machine Deletion Remediation Operator	Not specified	Not specified
ADP	Red Hat	Migration Toolkit For Containers	Not specified	Not specified
ADP	Red Hat	Mirror Registry For Red Hat OpenShift	Not specified	Not specified
ADP	Red Hat	Multicluster Engine For Kubernetes	Not specified	Not specified
ADP	Red Hat	OpenShift Developer Tools And Services	Not specified	Not specified
ADP	Red Hat	OpenShift Lightspeed	Not specified	Not specified
ADP	Red Hat	OpenShift Pipelines	Not specified	Not specified
ADP	Red Hat	OpenShift Serverless	Not specified	Not specified
ADP	Red Hat	Red Hat 3scale API Management Platform 2	Not specified	Not specified
ADP	Red Hat	Red Hat Advanced Cluster Management For Kubernetes 2	Not specified	Not specified
ADP	Red Hat	Red Hat AI Inference Server	Not specified	Not specified
ADP	Red Hat	Red Hat Certification Program For Red Hat Enterprise Linux 9	Not specified	Not specified
ADP	Red Hat	Red Hat Connectivity Link 1	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 10	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 7	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 8	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 9	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux AI RHEL AI 3	Not specified	Not specified
ADP	Red Hat	Red Hat OpenShift AI RHOAI	Not specified	Not specified
ADP	Red Hat	Red Hat OpenShift Cluster Manager CLI	Not specified	Not specified
ADP	Red Hat	Red Hat OpenShift Container Platform 4	Not specified	Not specified
ADP	Red Hat	Red Hat Openshift Data Foundation 4	Not specified	Not specified
ADP	Red Hat	Red Hat OpenShift Dev Workspaces Operator	Not specified	Not specified
ADP	Red Hat	Red Hat OpenShift GitOps	Not specified	Not specified
ADP	Red Hat	Red Hat OpenShift On AWS	Not specified	Not specified
ADP	Red Hat	Red Hat OpenShift Virtualization 4	Not specified	Not specified
ADP	Red Hat	Red Hat OpenStack Platform 16.2	Not specified	Not specified
ADP	Red Hat	Red Hat OpenStack Platform 18.0	Not specified	Not specified
ADP	Red Hat	Red Hat Satellite 6	Not specified	Not specified
ADP	Red Hat	Security Profiles Operator	Not specified	Not specified
ADP	Red Hat	Zero Trust Workload Identity Manager	Not specified	Not specified
ADP	Red Hat	Zero Trust Workload Identity Manager - Tech Preview	Not specified	Not specified
ADP	Red Hat	Migration Toolkit For Applications 8	Not specified	Not specified
ADP	Red Hat	Node HealthCheck Operator	Not specified	Not specified
ADP	Red Hat	OpenShift Service Mesh 2	Not specified	Not specified
ADP	Red Hat	OpenShift Service Mesh 3	Not specified	Not specified
ADP	Red Hat	Power Monitoring For Red Hat OpenShift	Not specified	Not specified
ADP	Red Hat	Red Hat Ansible Automation Platform 2	Not specified	Not specified
ADP	Red Hat	Red Hat Hardened Images	Not specified	Not specified
ADP	Red Hat	Red Hat OpenShift For Windows Containers	Not specified	Not specified
ADP	Red Hat	Red Hat Quay 3	Not specified	Not specified
ADP	Red Hat	Red Hat Service Interconnect 1	Not specified	Not specified
ADP	Red Hat	Red Hat Service Interconnect 2	Not specified	Not specified
ADP	Red Hat	Streams For Apache Kafka 3	Not specified	Not specified

References

Reference	Source	Link	Tags
access.redhat.com/errata/RHSA-2026:19719	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:16535	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:19722	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:28047	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:20889	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:9385	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:22862	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:23103	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:11514	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:20609	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:17287	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:29035	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:10217	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:28196	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:19133	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:20556	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:26568	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:19350	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:26585	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
pkg.go.dev/vuln/GO-2026-4947	[email protected]	pkg.go.dev	Vendor Advisory
access.redhat.com/errata/RHSA-2026:22960	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:24853	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:22422	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:36651	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:29455	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:24359	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:22260	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:29854	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:22130	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:33722	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
go.dev/cl/758320	[email protected]	go.dev	Patch
access.redhat.com/errata/RHSA-2026:28038	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:20570	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:23244	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:14162	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:34197	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32280.json	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	security.access.redhat.com
access.redhat.com/errata/RHSA-2026:24977	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:16476	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:34192	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:19144	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:16101	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:22268	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:29702	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:16542	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:19750	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:11688	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
go.dev/issue/78282	[email protected]	go.dev	Issue Tracking
access.redhat.com/errata/RHSA-2026:21017	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:21769	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:25127	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:16875	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:21655	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:34097	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:19720	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:14391	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:16532	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:16537	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/security/cve/CVE-2026-32280	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:25089	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:17084	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:24762	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:21338	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:19714	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:22962	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:13791	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:28074	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:22959	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:16874	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:24478	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:24716	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:19375	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:22713	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:24337	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:14200	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:22309	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:23345	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:36319	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:29703	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:19634	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:19550	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:22258	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:22415	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:13829	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:22465	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:28886	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:19353	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:22958	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:13826	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:19135	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:16021	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:18027	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:19715	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:34365	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:16024	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:22347	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:25180	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:19721	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:16508	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:22141	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:28961	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:22961	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:20569	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:22709	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:20607	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:28198	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:10704	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:10219	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:26636	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:23361	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:21772	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:22485	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:23102	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:20608	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:16534	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:36796	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
groups.google.com/g/golang-announce/c/0uYbvbPZRWU	[email protected]	groups.google.com	Mailing List, Release Notes
access.redhat.com/errata/RHSA-2026:13545	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:24761	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:16505	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:14020	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
bugzilla.redhat.com/show_bug.cgi	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	bugzilla.redhat.com
access.redhat.com/errata/RHSA-2026:16477	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:34196	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:24470	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:22840	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:20571	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:26571	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:26447	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:11507	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:28441	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:19839	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:27076	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:29195	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:18032	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:19450	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
access.redhat.com/errata/RHSA-2026:15980	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

Vendor Comments And Credit

Discovery Credit

CNA: Jakub Ciolek - https://ciolek.dev (en)

Additional Advisory Data

Source	Time	Event
ADP	2026-04-08T02:01:19.572Z	Reported to Red Hat.
ADP	2026-04-08T01:06:58.595Z	Made public.

Solutions

ADP: RHSA-2026:24762: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9

ADP: RHSA-2026:16101: Red Hat Enterprise Linux Server (v. 7 ELS)

ADP: RHSA-2026:24761: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9

ADP: RHSA-2026:28886: Red Hat OpenShift Container Platform 4.14

ADP: RHSA-2026:28961: Red Hat OpenShift Container Platform 4.15

ADP: RHSA-2026:34097: Red Hat OpenShift Container Platform 4.17

ADP: RHSA-2026:21655: Red Hat OpenShift Container Platform 4.18

ADP: RHSA-2026:25180: Red Hat OpenShift Container Platform 4.18

ADP: RHSA-2026:27076: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9

ADP: RHSA-2026:14391: Cryostat 4 on RHEL 9

ADP: RHSA-2026:36796: RHEM 1.0 for RHEL 9

ADP: RHSA-2026:28047: Red Hat OpenStack Platform 17.1

ADP: RHSA-2026:23244: Red Hat OpenShift Container Platform 4.19

ADP: RHSA-2026:34365: Red Hat Satellite 6.19 for RHEL 9

ADP: RHSA-2026:20569: Red Hat Enterprise Linux AppStream EUS (v. 10.0)

ADP: RHSA-2026:23103: Red Hat Enterprise Linux AppStream EUS (v. 10.0)

ADP: RHSA-2026:19715: Red Hat Enterprise Linux AppStream EUS (v. 10.0)

ADP: RHSA-2026:16024: Red Hat Enterprise Linux AppStream EUS (v. 10.0)

ADP: RHSA-2026:19550: Red Hat Enterprise Linux AppStream EUS (v. 10.0)

ADP: RHSA-2026:18032: Red Hat Enterprise Linux AppStream EUS (v. 10.0)

ADP: RHSA-2026:18027: Red Hat Enterprise Linux AppStream EUS (v. 10.0)

ADP: RHSA-2026:17084: Red Hat Enterprise Linux AppStream EUS (v. 10.0)

ADP: RHSA-2026:19719: Red Hat Enterprise Linux AppStream EUS (v. 10.0)

ADP: RHSA-2026:19750: Red Hat Enterprise Linux AppStream EUS (v. 10.0)

ADP: RHSA-2026:20570: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)

ADP: RHSA-2026:22713: Red Hat Enterprise Linux AppStream EUS (v. 10.0)

ADP: RHSA-2026:19714: Red Hat Enterprise Linux AppStream EUS (v. 10.0)

ADP: RHSA-2026:20571: Red Hat Enterprise Linux AppStream EUS (v. 10.0)

ADP: RHSA-2026:19450: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)

ADP: RHSA-2026:10217: Red Hat Enterprise Linux AppStream (v. 10)

ADP: RHSA-2026:29195: Red Hat Enterprise Linux AppStream (v. 10)

ADP: RHSA-2026:23102: Red Hat Enterprise Linux AppStream (v. 10)

ADP: RHSA-2026:19133: Red Hat Enterprise Linux AppStream (v. 10)

ADP: RHSA-2026:22141: Red Hat Enterprise Linux AppStream (v. 10)

ADP: RHSA-2026:19144: Red Hat Enterprise Linux AppStream (v. 10)

ADP: RHSA-2026:19135: Red Hat Enterprise Linux AppStream (v. 10)

ADP: RHSA-2026:24470: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)

ADP: RHSA-2026:22130: Red Hat Enterprise Linux AppStream (v. 10)

ADP: RHSA-2026:29035: Red Hat Enterprise Linux AppStream (v. 10)

ADP: RHSA-2026:24716: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)

ADP: RHSA-2026:33722: Red Hat Enterprise Linux AppStream (v. 8)

ADP: RHSA-2026:10704: Red Hat Enterprise Linux AppStream (v. 8)

ADP: RHSA-2026:16875: Red Hat Enterprise Linux AppStream (v. 8)

ADP: RHSA-2026:11507: Red Hat Enterprise Linux AppStream (v. 8)

ADP: RHSA-2026:11514: Red Hat Enterprise Linux AppStream (v. 8)

ADP: RHSA-2026:15980: Red Hat Enterprise Linux AppStream (v. 8)

ADP: RHSA-2026:19634: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)

ADP: RHSA-2026:34192: Red Hat Enterprise Linux AppStream E4S (v.9.4)

ADP: RHSA-2026:34196: Red Hat Enterprise Linux AppStream E4S (v.9.4)

ADP: RHSA-2026:34197: Red Hat Enterprise Linux AppStream E4S (v.9.4)

ADP: RHSA-2026:19721: Red Hat Enterprise Linux AppStream EUS (v.9.4)

ADP: RHSA-2026:20607: Red Hat Enterprise Linux AppStream EUS (v.9.6)

ADP: RHSA-2026:20608: Red Hat Enterprise Linux AppStream EUS (v.9.6)

ADP: RHSA-2026:19722: Red Hat Enterprise Linux AppStream EUS (v.9.6)

ADP: RHSA-2026:16021: Red Hat Enterprise Linux AppStream EUS (v.9.6)

ADP: RHSA-2026:20556: Red Hat Enterprise Linux AppStream EUS (v.9.6)

ADP: RHSA-2026:19839: Red Hat Enterprise Linux AppStream EUS (v.9.6)

ADP: RHSA-2026:28038: Red Hat Enterprise Linux AppStream EUS (v.9.6)

ADP: RHSA-2026:19720: Red Hat Enterprise Linux AppStream EUS (v.9.6)

ADP: RHSA-2026:22709: Red Hat Enterprise Linux AppStream EUS (v.9.6)

ADP: RHSA-2026:17287: Red Hat Enterprise Linux AppStream EUS (v.9.6)

ADP: RHSA-2026:24337: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)

ADP: RHSA-2026:20609: Red Hat Enterprise Linux AppStream EUS (v.9.6)

ADP: RHSA-2026:14200: Red Hat Enterprise Linux AppStream (v. 9)

ADP: RHSA-2026:10219: Red Hat Enterprise Linux AppStream (v. 9)

ADP: RHSA-2026:29455: Red Hat Enterprise Linux AppStream (v. 9)

ADP: RHSA-2026:29703: Red Hat Enterprise Linux AppStream (v. 9)

ADP: RHSA-2026:19350: Red Hat Enterprise Linux AppStream (v. 9)

ADP: RHSA-2026:19353: Red Hat Enterprise Linux AppStream (v. 9)

ADP: RHSA-2026:26447: Red Hat Enterprise Linux AppStream (v. 9)

ADP: RHSA-2026:22309: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)

ADP: RHSA-2026:29702: Red Hat Enterprise Linux AppStream (v. 9)

ADP: RHSA-2026:28074: Red Hat Enterprise Linux AppStream (v. 9)

ADP: RHSA-2026:26636: Custom Metric Autoscaler 2.19

ADP: RHSA-2026:25089: HawtIO HawtIO 4.4.0

ADP: RHSA-2026:26585: Logging Subsystem for Red Hat OpenShift 6.0

ADP: RHSA-2026:22862: Logging Subsystem for Red Hat OpenShift 6.4

ADP: RHSA-2026:22347: Multicluster Global Hub 1.4.5

ADP: RHSA-2026:21769: Multicluster Global Hub 1.5.4

ADP: RHSA-2026:23345: Multicluster Global Hub 1.6.2

ADP: RHSA-2026:16874: Network Observability (NETOBSERV) 1.11.2

ADP: RHSA-2026:29854: OpenShift API for Data Protection 1.4

ADP: RHSA-2026:26568: OpenShift API for Data Protection 1.5

ADP: RHSA-2026:26571: OpenShift Compliance Operator 1

ADP: RHSA-2026:25127: Red Hat Advanced Cluster Management for Kubernetes 2.14

ADP: RHSA-2026:13829: Red Hat Advanced Cluster Security for Kubernetes 4.10

ADP: RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10

ADP: RHSA-2026:13791: Red Hat Advanced Cluster Security for Kubernetes 4.9

ADP: RHSA-2026:36319: Red Hat Advanced Cluster Security for Kubernetes 4.9

ADP: RHSA-2026:13545: Red Hat Ansible Automation Platform 2.6

ADP: RHSA-2026:21338: Red Hat Developer Hub 1.8

ADP: RHSA-2026:13826: Red Hat Developer Hub 1.9

ADP: RHSA-2026:36651: Red Hat Edge Manager 1.0

ADP: RHSA-2026:22485: Red Hat Lightspeed (formerly Insights) for Runtimes 1

ADP: RHSA-2026:24977: Red Hat OpenShift AI 2.25

ADP: RHSA-2026:24359: Red Hat OpenShift Builds 1.7.4

ADP: RHSA-2026:21772: Red Hat OpenShift Dev Spaces 3.28

ADP: RHSA-2026:11688: Red Hat OpenShift Service Mesh 2.6

ADP: RHSA-2026:16476: Red Hat OpenShift Service Mesh 2.6

ADP: RHSA-2026:16505: Red Hat OpenShift Service Mesh 3.1

ADP: RHSA-2026:16532: Red Hat OpenShift Service Mesh 3.1

ADP: RHSA-2026:16508: Red Hat OpenShift Service Mesh 3.2

ADP: RHSA-2026:16535: Red Hat OpenShift Service Mesh 3.2

ADP: RHSA-2026:16537: Red Hat OpenShift Service Mesh 3.3

ADP: RHSA-2026:16542: Red Hat OpenShift Service Mesh 3.3

ADP: RHSA-2026:16477: Red Hat OpenShift Service Mesh 3

ADP: RHSA-2026:16534: Red Hat OpenShift Service Mesh 3

ADP: RHSA-2026:14162: Red Hat OpenShift distributed tracing 3.9.3

ADP: RHSA-2026:9385: Red Hat OpenShift distributed tracing 3.9.3

ADP: RHSA-2026:14020: Red Hat OpenStack 1.5

ADP: RHSA-2026:22840: Red Hat Quay 3.10

ADP: RHSA-2026:21017: Red Hat Quay 3.14

ADP: RHSA-2026:24853: Red Hat Quay 3.15

ADP: RHSA-2026:19375: Red Hat Quay 3.16

ADP: RHSA-2026:22465: Red Hat Quay 3.17

ADP: RHSA-2026:23361: Red Hat Quay 3.9

ADP: RHSA-2026:24478: Red Hat Trusted Artifact Signer 1.3

ADP: RHSA-2026:22960: Red Hat Web Terminal 1.11

ADP: RHSA-2026:22958: Red Hat Web Terminal 1.12

ADP: RHSA-2026:22962: Red Hat Web Terminal 1.13

ADP: RHSA-2026:22959: Red Hat Web Terminal 1.14

ADP: RHSA-2026:22961: Red Hat Web Terminal 1.15

ADP: RHSA-2026:28441: mirror registry for Red Hat OpenShift 2.0

ADP: RHSA-2026:22422: multicluster engine for Kubernetes 2.10

ADP: RHSA-2026:22268: multicluster engine for Kubernetes 2.11

ADP: RHSA-2026:22415: multicluster engine for Kubernetes 2.17

ADP: RHSA-2026:28198: multicluster engine for Kubernetes 2.6

ADP: RHSA-2026:28196: multicluster engine for Kubernetes 2.6

ADP: RHSA-2026:22258: multicluster engine for Kubernetes 2.8

ADP: RHSA-2026:22260: multicluster engine for Kubernetes 2.8

There are currently no legacy QID mappings associated with this CVE.