{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian 8 ppc64le",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server - AUS 8.4 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems 8 s390x",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.22 for RHEL 8 s390x",
      "product": {
        "name": "Red Hat OpenShift Container Platform",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.8 aarch64",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2 ppc64le",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 8 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat OpenShift Container Platform 4.22 for RHEL 9 x86_64",
      "product": {
        "name": "Red Hat OpenShift Container Platform",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 10 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Real Time 8 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat OpenShift Container Platform for ARM 64 4.22 for RHEL 9 aarch64",
      "product": {
        "name": "Red Hat OpenShift Container Platform",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat OpenShift Container Platform for Power 4.22 for RHEL 8 ppc64le",
      "product": {
        "name": "Red Hat OpenShift Container Platform",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 9 aarch64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat OpenShift Container Platform for ARM 64 4.22 for RHEL 8 aarch64",
      "product": {
        "name": "Red Hat OpenShift Container Platform",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat OpenShift Container Platform 4.22 for RHEL 8 x86_64",
      "product": {
        "name": "Red Hat OpenShift Container Platform",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for x86_64 10 x86_64",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.22 for RHEL 9 s390x",
      "product": {
        "name": "Red Hat OpenShift Container Platform",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 x86_64",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for ARM 64 9 aarch64",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Real Time for x86_64 - Extended Life Cycle Support 7 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 8 aarch64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 10 aarch64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for ARM 64 8 aarch64",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2 s390x",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Real Time for NFV 8 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server - AUS 9.4 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2 aarch64",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for x86_64 8 x86_64",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems 9 s390x",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.8 s390x",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for ARM 64 10 aarch64",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat OpenShift Container Platform for Power 4.22 for RHEL 9 ppc64le",
      "product": {
        "name": "Red Hat OpenShift Container Platform",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian 9 ppc64le",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 x86_64",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems 10 s390x",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for x86_64 9 x86_64",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 9 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian 10 ppc64le",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.4 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-40026",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40026"
    },
    {
      "name": "CVE-2026-31787",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31787"
    },
    {
      "name": "CVE-2026-31613",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31613"
    },
    {
      "name": "CVE-2026-52993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-52993"
    },
    {
      "name": "CVE-2026-12505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12505"
    },
    {
      "name": "CVE-2026-43279",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43279"
    },
    {
      "name": "CVE-2026-46209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46209"
    },
    {
      "name": "CVE-2026-57231",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57231"
    },
    {
      "name": "CVE-2026-53006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53006"
    },
    {
      "name": "CVE-2026-46116",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46116"
    },
    {
      "name": "CVE-2026-43500",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43500"
    },
    {
      "name": "CVE-2026-46189",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46189"
    },
    {
      "name": "CVE-2025-68724",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68724"
    },
    {
      "name": "CVE-2026-31684",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31684"
    },
    {
      "name": "CVE-2025-68183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68183"
    },
    {
      "name": "CVE-2025-10263",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-10263"
    },
    {
      "name": "CVE-2026-52950",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-52950"
    },
    {
      "name": "CVE-2026-53059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53059"
    },
    {
      "name": "CVE-2025-38085",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38085"
    },
    {
      "name": "CVE-2026-46135",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46135"
    },
    {
      "name": "CVE-2026-52976",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-52976"
    },
    {
      "name": "CVE-2026-31488",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31488"
    },
    {
      "name": "CVE-2026-46086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46086"
    },
    {
      "name": "CVE-2026-43037",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43037"
    },
    {
      "name": "CVE-2026-43027",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43027"
    },
    {
      "name": "CVE-2026-64530",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64530"
    },
    {
      "name": "CVE-2026-53281",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53281"
    },
    {
      "name": "CVE-2026-52923",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-52923"
    }
  ],
  "initial_release_date": "2026-07-31T00:00:00",
  "last_revision_date": "2026-07-31T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0955",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-07-31T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le noyau Linux de Red Hat. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de Red Hat",
  "vendor_advisories": [
    {
      "published_at": "2026-07-24",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:45115",
      "url": "https://access.redhat.com/errata/RHSA-2026:45115"
    },
    {
      "published_at": "2026-07-28",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:47010",
      "url": "https://access.redhat.com/errata/RHSA-2026:47010"
    },
    {
      "published_at": "2026-07-28",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:47017",
      "url": "https://access.redhat.com/errata/RHSA-2026:47017"
    },
    {
      "published_at": "2026-07-24",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:45116",
      "url": "https://access.redhat.com/errata/RHSA-2026:45116"
    },
    {
      "published_at": "2026-07-28",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:47248",
      "url": "https://access.redhat.com/errata/RHSA-2026:47248"
    },
    {
      "published_at": "2026-07-28",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:47011",
      "url": "https://access.redhat.com/errata/RHSA-2026:47011"
    },
    {
      "published_at": "2026-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:47632",
      "url": "https://access.redhat.com/errata/RHSA-2026:47632"
    },
    {
      "published_at": "2026-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:47633",
      "url": "https://access.redhat.com/errata/RHSA-2026:47633"
    },
    {
      "published_at": "2026-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:48222",
      "url": "https://access.redhat.com/errata/RHSA-2026:48222"
    },
    {
      "published_at": "2026-07-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:46461",
      "url": "https://access.redhat.com/errata/RHSA-2026:46461"
    },
    {
      "published_at": "2026-07-30",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:48386",
      "url": "https://access.redhat.com/errata/RHSA-2026:48386"
    },
    {
      "published_at": "2026-07-28",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:44232",
      "url": "https://access.redhat.com/errata/RHSA-2026:44232"
    },
    {
      "published_at": "2026-07-24",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:45192",
      "url": "https://access.redhat.com/errata/RHSA-2026:45192"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "WebSphere Application Server Liberty versions 17.0.0.3 \u00e0 26.0.0.7 sans le correctif de s\u00e9curit\u00e9 PH71585",
      "product": {
        "name": "WebSphere",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "QRadar SIEM versions 7.5.x ant\u00e9rieures \u00e0 7.5.0 UP15 IF06",
      "product": {
        "name": "QRadar",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Tivoli System Automation Application Manager version 4.1 avec WebSphere Application Server sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "Tivoli",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Control Center version 6.3.1.0 ant\u00e9rieure \u00e0 6.3.1.0 iFix11",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Db2 versions 11.5.x ant\u00e9rieures \u00e0 11.5.9 sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "Db2",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Connect:Direct File Agent versions 1.4.0.3x \u00e0 1.4.0.5x ant\u00e9rieures \u00e0 1.4.0.5_iFix016",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Db2 versions 12.1.x ant\u00e9rieures \u00e0 12.1.4 sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "Db2",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Spectrum Control versions ant\u00e9rieures \u00e0 5.5",
      "product": {
        "name": "Spectrum",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Control Center version 6.4.2.0 ant\u00e9rieure \u00e0 6.4.2.0 iFix06",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "QRadar SIEM versions 7.6.x ant\u00e9rieures \u00e0 7.6.0.3",
      "product": {
        "name": "QRadar",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Security QRadar EDR versions 3.12.x ant\u00e9rieures \u00e0 3.12.26",
      "product": {
        "name": "QRadar",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "WebSphere Hybrid Edition version 5.1 sans les correctifs de s\u00e9curit\u00e9 APAR DT496328, DT496327 et DT497580",
      "product": {
        "name": "WebSphere",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Db2 Genius Hub \u0026 Agentics versions 1.1.x ant\u00e9rieures \u00e0 1.1.4",
      "product": {
        "name": "Db2",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Tivoli Application Dependency Discovery Manager versions 7.3.0.0 \u00e0 7.3.0.12 avec WebSphere Application Server Liberty versions ant\u00e9rieures \u00e0 26.0.0.8",
      "product": {
        "name": "Tivoli",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "WebSphere Extreme Scale versions 8.6.1.x ant\u00e9rieures \u00e0 8.6.1.6 avec le correctif de s\u00e9curit\u00e9 PH72588",
      "product": {
        "name": "WebSphere",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Connect:Direct for Unix versions 6.3.0.x ant\u00e9rieures \u00e0 6.3.0.7.iFix026",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Connect:Direct for Unix versions 6.4.0.x ant\u00e9rieures \u00e0 6.4.0.6.iFix014",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "QRadar Suite Software versions 1.10.12.0 \u00e0 1.11.10.0 ant\u00e9rieures \u00e0 1.11.12.0",
      "product": {
        "name": "QRadar",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "QRadar AI Assistant versions ant\u00e9rieures \u00e0 2.2.0",
      "product": {
        "name": "QRadar",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-41411",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41411"
    },
    {
      "name": "CVE-2026-14380",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14380"
    },
    {
      "name": "CVE-2026-26007",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-26007"
    },
    {
      "name": "CVE-2026-43198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43198"
    },
    {
      "name": "CVE-2026-54293",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54293"
    },
    {
      "name": "CVE-2026-49978",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49978"
    },
    {
      "name": "CVE-2026-9697",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9697"
    },
    {
      "name": "CVE-2026-53540",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53540"
    },
    {
      "name": "CVE-2026-54283",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54283"
    },
    {
      "name": "CVE-2026-54369",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54369"
    },
    {
      "name": "CVE-2026-40466",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40466"
    },
    {
      "name": "CVE-2026-59724",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59724"
    },
    {
      "name": "CVE-2026-45505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45505"
    },
    {
      "name": "CVE-2026-4878",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4878"
    },
    {
      "name": "CVE-2026-49476",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49476"
    },
    {
      "name": "CVE-2026-42588",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42588"
    },
    {
      "name": "CVE-2026-27205",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27205"
    },
    {
      "name": "CVE-2026-59205",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59205"
    },
    {
      "name": "CVE-2026-33845",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33845"
    },
    {
      "name": "CVE-2026-41254",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41254"
    },
    {
      "name": "CVE-2026-42253",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42253"
    },
    {
      "name": "CVE-2026-44405",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44405"
    },
    {
      "name": "CVE-2026-50645",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50645"
    },
    {
      "name": "CVE-2026-44289",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44289"
    },
    {
      "name": "CVE-2026-42041",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42041"
    },
    {
      "name": "CVE-2026-9679",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9679"
    },
    {
      "name": "CVE-2026-39892",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39892"
    },
    {
      "name": "CVE-2026-10050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10050"
    },
    {
      "name": "CVE-2024-24762",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-24762"
    },
    {
      "name": "CVE-2026-42402",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42402"
    },
    {
      "name": "CVE-2026-42561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42561"
    },
    {
      "name": "CVE-2025-14505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14505"
    },
    {
      "name": "CVE-2026-16184",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16184"
    },
    {
      "name": "CVE-2026-15328",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15328"
    },
    {
      "name": "CVE-2026-32286",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32286"
    },
    {
      "name": "CVE-2026-46227",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46227"
    },
    {
      "name": "CVE-2026-57455",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57455"
    },
    {
      "name": "CVE-2026-54514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54514"
    },
    {
      "name": "CVE-2026-44293",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44293"
    },
    {
      "name": "CVE-2026-44290",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44290"
    },
    {
      "name": "CVE-2021-23336",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-23336"
    },
    {
      "name": "CVE-2026-55276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55276"
    },
    {
      "name": "CVE-2026-48710",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48710"
    },
    {
      "name": "CVE-2026-16243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16243"
    },
    {
      "name": "CVE-2026-9171",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9171"
    },
    {
      "name": "CVE-2025-47279",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47279"
    },
    {
      "name": "CVE-2025-40026",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40026"
    },
    {
      "name": "CVE-2026-47010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47010"
    },
    {
      "name": "CVE-2026-69249",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-69249"
    },
    {
      "name": "CVE-2026-54058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54058"
    },
    {
      "name": "CVE-2026-55653",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55653"
    },
    {
      "name": "CVE-2026-41239",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41239"
    },
    {
      "name": "CVE-2026-46117",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46117"
    },
    {
      "name": "CVE-2026-59084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59084"
    },
    {
      "name": "CVE-2026-45740",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45740"
    },
    {
      "name": "CVE-2025-14920",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14920"
    },
    {
      "name": "CVE-2026-52993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-52993"
    },
    {
      "name": "CVE-2026-59725",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59725"
    },
    {
      "name": "CVE-2026-14739",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14739"
    },
    {
      "name": "CVE-2026-39824",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39824"
    },
    {
      "name": "CVE-2026-46605",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46605"
    },
    {
      "name": "CVE-2026-54275",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54275"
    },
    {
      "name": "CVE-2026-22013",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22013"
    },
    {
      "name": "CVE-2026-47057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47057"
    },
    {
      "name": "CVE-2026-10846",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10846"
    },
    {
      "name": "CVE-2026-22018",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22018"
    },
    {
      "name": "CVE-2026-12505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12505"
    },
    {
      "name": "CVE-2026-35469",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-35469"
    },
    {
      "name": "CVE-2026-9698",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9698"
    },
    {
      "name": "CVE-2026-42015",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42015"
    },
    {
      "name": "CVE-2026-14528",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14528"
    },
    {
      "name": "CVE-2026-54278",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54278"
    },
    {
      "name": "CVE-2026-53538",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53538"
    },
    {
      "name": "CVE-2026-18499",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-18499"
    },
    {
      "name": "CVE-2026-46113",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46113"
    },
    {
      "name": "CVE-2026-54515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54515"
    },
    {
      "name": "CVE-2026-53550",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53550"
    },
    {
      "name": "CVE-2026-43279",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43279"
    },
    {
      "name": "CVE-2026-53071",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53071"
    },
    {
      "name": "CVE-2026-49157",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49157"
    },
    {
      "name": "CVE-2026-16221",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16221"
    },
    {
      "name": "CVE-2026-55798",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55798"
    },
    {
      "name": "CVE-2026-6790",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6790"
    },
    {
      "name": "CVE-2026-7246",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7246"
    },
    {
      "name": "CVE-2026-15308",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15308"
    },
    {
      "name": "CVE-2026-66143",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66143"
    },
    {
      "name": "CVE-2026-46331",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46331"
    },
    {
      "name": "CVE-2026-66144",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66144"
    },
    {
      "name": "CVE-2026-44494",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
    },
    {
      "name": "CVE-2026-55153",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55153"
    },
    {
      "name": "CVE-2026-46209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46209"
    },
    {
      "name": "CVE-2026-11541",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11541"
    },
    {
      "name": "CVE-2026-34282",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34282"
    },
    {
      "name": "CVE-2026-44618",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44618"
    },
    {
      "name": "CVE-2026-42036",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42036"
    },
    {
      "name": "CVE-2026-33236",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33236"
    },
    {
      "name": "CVE-2026-54475",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54475"
    },
    {
      "name": "CVE-2026-31692",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31692"
    },
    {
      "name": "CVE-2026-44240",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44240"
    },
    {
      "name": "CVE-2026-55443",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55443"
    },
    {
      "name": "CVE-2026-65900",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65900"
    },
    {
      "name": "CVE-2026-33558",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33558"
    },
    {
      "name": "CVE-2026-53916",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53916"
    },
    {
      "name": "CVE-2026-53006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53006"
    },
    {
      "name": "CVE-2026-43450",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43450"
    },
    {
      "name": "CVE-2026-33846",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33846"
    },
    {
      "name": "CVE-2026-42403",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42403"
    },
    {
      "name": "CVE-2026-34043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34043"
    },
    {
      "name": "CVE-2026-59880",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59880"
    },
    {
      "name": "CVE-2026-15057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15057"
    },
    {
      "name": "CVE-2026-59890",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59890"
    },
    {
      "name": "CVE-2026-53266",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53266"
    },
    {
      "name": "CVE-2025-64718",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-64718"
    },
    {
      "name": "CVE-2026-46116",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46116"
    },
    {
      "name": "CVE-2026-14742",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14742"
    },
    {
      "name": "CVE-2025-62718",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
    },
    {
      "name": "CVE-2026-44990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
    },
    {
      "name": "CVE-2026-47265",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47265"
    },
    {
      "name": "CVE-2026-49458",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49458"
    },
    {
      "name": "CVE-2026-54282",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54282"
    },
    {
      "name": "CVE-2026-46259",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46259"
    },
    {
      "name": "CVE-2026-0540",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0540"
    },
    {
      "name": "CVE-2026-45149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45149"
    },
    {
      "name": "CVE-2026-45249",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45249"
    },
    {
      "name": "CVE-2026-23865",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23865"
    },
    {
      "name": "CVE-2026-48988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48988"
    },
    {
      "name": "CVE-2026-43499",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43499"
    },
    {
      "name": "CVE-2026-11525",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11525"
    },
    {
      "name": "CVE-2026-15325",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15325"
    },
    {
      "name": "CVE-2026-59199",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59199"
    },
    {
      "name": "CVE-2026-69247",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-69247"
    },
    {
      "name": "CVE-2026-33671",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33671"
    },
    {
      "name": "CVE-2026-34515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34515"
    },
    {
      "name": "CVE-2026-14976",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14976"
    },
    {
      "name": "CVE-2026-48864",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48864"
    },
    {
      "name": "CVE-2026-34519",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34519"
    },
    {
      "name": "CVE-2026-42033",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42033"
    },
    {
      "name": "CVE-2026-42035",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42035"
    },
    {
      "name": "CVE-2026-54277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54277"
    },
    {
      "name": "CVE-2026-69248",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-69248"
    },
    {
      "name": "CVE-2026-18446",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-18446"
    },
    {
      "name": "CVE-2026-5450",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5450"
    },
    {
      "name": "CVE-2026-14512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14512"
    },
    {
      "name": "CVE-2026-5260",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5260"
    },
    {
      "name": "CVE-2026-42009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42009"
    },
    {
      "name": "CVE-2026-54059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54059"
    },
    {
      "name": "CVE-2026-10842",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10842"
    },
    {
      "name": "CVE-2026-46189",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46189"
    },
    {
      "name": "CVE-2026-33750",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33750"
    },
    {
      "name": "CVE-2026-5038",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5038"
    },
    {
      "name": "CVE-2026-40186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40186"
    },
    {
      "name": "CVE-2026-2359",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2359"
    },
    {
      "name": "CVE-2026-42043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42043"
    },
    {
      "name": "CVE-2026-44288",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44288"
    },
    {
      "name": "CVE-2026-41603",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41603"
    },
    {
      "name": "CVE-2026-8646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8646"
    },
    {
      "name": "CVE-2026-45822",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45822"
    },
    {
      "name": "CVE-2026-6918",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6918"
    },
    {
      "name": "CVE-2026-55380",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55380"
    },
    {
      "name": "CVE-2026-54280",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54280"
    },
    {
      "name": "CVE-2026-46625",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46625"
    },
    {
      "name": "CVE-2026-25749",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25749"
    },
    {
      "name": "CVE-2026-44489",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44489"
    },
    {
      "name": "CVE-2026-12413",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12413"
    },
    {
      "name": "CVE-2026-59869",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59869"
    },
    {
      "name": "CVE-2026-3833",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3833"
    },
    {
      "name": "CVE-2025-13151",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-13151"
    },
    {
      "name": "CVE-2026-9320",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9320"
    },
    {
      "name": "CVE-2026-49459",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49459"
    },
    {
      "name": "CVE-2026-66053",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66053"
    },
    {
      "name": "CVE-2026-41044",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41044"
    },
    {
      "name": "CVE-2026-41043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41043"
    },
    {
      "name": "CVE-2026-5079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5079"
    },
    {
      "name": "CVE-2026-34518",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34518"
    },
    {
      "name": "CVE-2026-50734",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50734"
    },
    {
      "name": "CVE-2026-44930",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44930"
    },
    {
      "name": "CVE-2026-14974",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14974"
    },
    {
      "name": "CVE-2026-41240",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41240"
    },
    {
      "name": "CVE-2026-42010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42010"
    },
    {
      "name": "CVE-2026-5435",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5435"
    },
    {
      "name": "CVE-2026-4427",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4427"
    },
    {
      "name": "CVE-2026-59887",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59887"
    },
    {
      "name": "CVE-2026-59203",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59203"
    },
    {
      "name": "CVE-2025-10263",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-10263"
    },
    {
      "name": "CVE-2026-42040",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42040"
    },
    {
      "name": "CVE-2026-47027",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47027"
    },
    {
      "name": "CVE-2026-23216",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23216"
    },
    {
      "name": "CVE-2026-47058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47058"
    },
    {
      "name": "CVE-2026-42013",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42013"
    },
    {
      "name": "CVE-2026-62389",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62389"
    },
    {
      "name": "CVE-2026-12151",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12151"
    },
    {
      "name": "CVE-2026-5928",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5928"
    },
    {
      "name": "CVE-2026-16441",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16441"
    },
    {
      "name": "CVE-2026-27903",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27903"
    },
    {
      "name": "CVE-2026-14981",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14981"
    },
    {
      "name": "CVE-2026-6734",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6734"
    },
    {
      "name": "CVE-2026-12243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12243"
    },
    {
      "name": "CVE-2025-6170",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6170"
    },
    {
      "name": "CVE-2026-46150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46150"
    },
    {
      "name": "CVE-2026-46090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46090"
    },
    {
      "name": "CVE-2026-14529",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14529"
    },
    {
      "name": "CVE-2026-34525",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34525"
    },
    {
      "name": "CVE-2025-71089",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71089"
    },
    {
      "name": "CVE-2026-54274",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54274"
    },
    {
      "name": "CVE-2026-54512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54512"
    },
    {
      "name": "CVE-2026-59197",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59197"
    },
    {
      "name": "CVE-2026-57819",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57819"
    },
    {
      "name": "CVE-2026-53059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53059"
    },
    {
      "name": "CVE-2026-65899",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65899"
    },
    {
      "name": "CVE-2026-4539",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4539"
    },
    {
      "name": "CVE-2026-34197",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34197"
    },
    {
      "name": "CVE-2026-55956",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55956"
    },
    {
      "name": "CVE-2026-54060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54060"
    },
    {
      "name": "CVE-2026-41140",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41140"
    },
    {
      "name": "CVE-2025-48913",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48913"
    },
    {
      "name": "CVE-2026-59858",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59858"
    },
    {
      "name": "CVE-2026-42404",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42404"
    },
    {
      "name": "CVE-2026-45984",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45984"
    },
    {
      "name": "CVE-2026-53537",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53537"
    },
    {
      "name": "CVE-2026-40046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40046"
    },
    {
      "name": "CVE-2026-16192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16192"
    },
    {
      "name": "CVE-2026-50722",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50722"
    },
    {
      "name": "CVE-2026-3304",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3304"
    },
    {
      "name": "CVE-2026-46145",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46145"
    },
    {
      "name": "CVE-2026-54273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54273"
    },
    {
      "name": "CVE-2026-40895",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40895"
    },
    {
      "name": "CVE-2026-42198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42198"
    },
    {
      "name": "CVE-2026-47063",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47063"
    },
    {
      "name": "CVE-2026-14515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14515"
    },
    {
      "name": "CVE-2026-22016",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22016"
    },
    {
      "name": "CVE-2026-22021",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22021"
    },
    {
      "name": "CVE-2026-59083",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59083"
    },
    {
      "name": "CVE-2026-25243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25243"
    },
    {
      "name": "CVE-2026-46135",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46135"
    },
    {
      "name": "CVE-2026-22007",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22007"
    },
    {
      "name": "CVE-2026-58016",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58016"
    },
    {
      "name": "CVE-2026-43056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43056"
    },
    {
      "name": "CVE-2026-59888",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59888"
    },
    {
      "name": "CVE-2026-13149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13149"
    },
    {
      "name": "CVE-2026-47021",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47021"
    },
    {
      "name": "CVE-2025-54410",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-54410"
    },
    {
      "name": "CVE-2026-46054",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46054"
    },
    {
      "name": "CVE-2025-69873",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69873"
    },
    {
      "name": "CVE-2026-49434",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49434"
    },
    {
      "name": "CVE-2026-42011",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42011"
    },
    {
      "name": "CVE-2026-34268",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34268"
    },
    {
      "name": "CVE-2026-16440",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16440"
    },
    {
      "name": "CVE-2026-64958",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64958"
    },
    {
      "name": "CVE-2026-50721",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50721"
    },
    {
      "name": "CVE-2025-71066",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71066"
    },
    {
      "name": "CVE-2026-44291",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44291"
    },
    {
      "name": "CVE-2026-15043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15043"
    },
    {
      "name": "CVE-2026-66373",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66373"
    },
    {
      "name": "CVE-2026-3520",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3520"
    },
    {
      "name": "CVE-2026-55693",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55693"
    },
    {
      "name": "CVE-2026-57456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57456"
    },
    {
      "name": "CVE-2026-29786",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-29786"
    },
    {
      "name": "CVE-2026-44487",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
    },
    {
      "name": "CVE-2026-2482",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2482"
    },
    {
      "name": "CVE-2026-11897",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11897"
    },
    {
      "name": "CVE-2026-42038",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42038"
    },
    {
      "name": "CVE-2026-49844",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49844"
    },
    {
      "name": "CVE-2026-31419",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31419"
    },
    {
      "name": "CVE-2026-41680",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41680"
    },
    {
      "name": "CVE-2026-44292",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44292"
    },
    {
      "name": "CVE-2026-54370",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54370"
    },
    {
      "name": "CVE-2026-42039",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42039"
    },
    {
      "name": "CVE-2026-49432",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49432"
    },
    {
      "name": "CVE-2026-59879",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59879"
    },
    {
      "name": "CVE-2026-46968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46968"
    },
    {
      "name": "CVE-2025-15599",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15599"
    },
    {
      "name": "CVE-2026-55379",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55379"
    },
    {
      "name": "CVE-2026-31488",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31488"
    },
    {
      "name": "CVE-2026-9358",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9358"
    },
    {
      "name": "CVE-2026-44417",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44417"
    },
    {
      "name": "CVE-2026-14446",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14446"
    },
    {
      "name": "CVE-2026-54279",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54279"
    },
    {
      "name": "CVE-2026-33672",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33672"
    },
    {
      "name": "CVE-2026-6238",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6238"
    },
    {
      "name": "CVE-2026-8723",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8723"
    },
    {
      "name": "CVE-2026-75838",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75838"
    },
    {
      "name": "CVE-2026-59200",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59200"
    },
    {
      "name": "CVE-2025-58181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58181"
    },
    {
      "name": "CVE-2025-47914",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47914"
    },
    {
      "name": "CVE-2026-59877",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59877"
    },
    {
      "name": "CVE-2026-9678",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9678"
    },
    {
      "name": "CVE-2026-39304",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39304"
    },
    {
      "name": "CVE-2026-48713",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48713"
    },
    {
      "name": "CVE-2026-49270",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49270"
    },
    {
      "name": "CVE-2026-34516",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34516"
    },
    {
      "name": "CVE-2026-46086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46086"
    },
    {
      "name": "CVE-2026-15064",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15064"
    },
    {
      "name": "CVE-2026-42044",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42044"
    },
    {
      "name": "CVE-2026-14476",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14476"
    },
    {
      "name": "CVE-2026-53359",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53359"
    },
    {
      "name": "CVE-2026-16439",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16439"
    },
    {
      "name": "CVE-2018-16487",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16487"
    },
    {
      "name": "CVE-2026-44728",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44728"
    },
    {
      "name": "CVE-2026-55955",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55955"
    },
    {
      "name": "CVE-2026-34517",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34517"
    },
    {
      "name": "CVE-2026-49477",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49477"
    },
    {
      "name": "CVE-2026-42034",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42034"
    },
    {
      "name": "CVE-2026-9322",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9322"
    },
    {
      "name": "CVE-2025-5889",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-5889"
    },
    {
      "name": "CVE-2026-31411",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31411"
    },
    {
      "name": "CVE-2026-54513",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54513"
    },
    {
      "name": "CVE-2026-34591",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34591"
    },
    {
      "name": "CVE-2026-48779",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
    },
    {
      "name": "CVE-2025-14914",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14914"
    },
    {
      "name": "CVE-2026-9563",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9563"
    },
    {
      "name": "CVE-2026-13676",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
    },
    {
      "name": "CVE-2026-54276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54276"
    },
    {
      "name": "CVE-2026-53434",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53434"
    },
    {
      "name": "CVE-2026-40347",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40347"
    },
    {
      "name": "CVE-2026-43112",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43112"
    },
    {
      "name": "CVE-2025-66168",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66168"
    },
    {
      "name": "CVE-2026-66142",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66142"
    },
    {
      "name": "CVE-2026-10051",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10051"
    },
    {
      "name": "CVE-2026-6322",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
    },
    {
      "name": "CVE-2026-34513",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34513"
    },
    {
      "name": "CVE-2026-43869",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43869"
    },
    {
      "name": "CVE-2026-8400",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8400"
    },
    {
      "name": "CVE-2026-14980",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14980"
    },
    {
      "name": "CVE-2026-5078",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5078"
    },
    {
      "name": "CVE-2026-12143",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
    },
    {
      "name": "CVE-2026-55655",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55655"
    },
    {
      "name": "CVE-2026-34514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34514"
    },
    {
      "name": "CVE-2026-44431",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44431"
    },
    {
      "name": "CVE-2026-27601",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27601"
    },
    {
      "name": "CVE-2026-26996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-26996"
    },
    {
      "name": "CVE-2026-44486",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
    },
    {
      "name": "CVE-2026-33227",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33227"
    },
    {
      "name": "CVE-2026-48775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48775"
    },
    {
      "name": "CVE-2026-44496",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
    },
    {
      "name": "CVE-2026-60081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-60081"
    },
    {
      "name": "CVE-2026-10879",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10879"
    },
    {
      "name": "CVE-2026-64530",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64530"
    },
    {
      "name": "CVE-2026-44492",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
    },
    {
      "name": "CVE-2026-45736",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45736"
    },
    {
      "name": "CVE-2026-54225",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54225"
    },
    {
      "name": "CVE-2026-34520",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34520"
    },
    {
      "name": "CVE-2026-41238",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41238"
    },
    {
      "name": "CVE-2026-42037",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42037"
    },
    {
      "name": "CVE-2026-53404",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53404"
    },
    {
      "name": "CVE-2026-33416",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33416"
    },
    {
      "name": "CVE-2026-42042",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42042"
    },
    {
      "name": "CVE-2026-9071",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9071"
    },
    {
      "name": "CVE-2026-34993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34993"
    },
    {
      "name": "CVE-2026-59198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59198"
    },
    {
      "name": "CVE-2026-11806",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11806"
    },
    {
      "name": "CVE-2026-44294",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44294"
    },
    {
      "name": "CVE-2026-6321",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6321"
    },
    {
      "name": "CVE-2026-33231",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33231"
    },
    {
      "name": "CVE-2026-48801",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48801"
    },
    {
      "name": "CVE-2026-52923",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-52923"
    },
    {
      "name": "CVE-2026-42012",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42012"
    },
    {
      "name": "CVE-2026-44490",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44490"
    },
    {
      "name": "CVE-2026-46917",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46917"
    },
    {
      "name": "CVE-2026-43116",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43116"
    },
    {
      "name": "CVE-2026-60147",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-60147"
    },
    {
      "name": "CVE-2026-22815",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22815"
    },
    {
      "name": "CVE-2026-15280",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15280"
    },
    {
      "name": "CVE-2026-22008",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22008"
    },
    {
      "name": "CVE-2026-31802",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31802"
    },
    {
      "name": "CVE-2026-56852",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56852"
    },
    {
      "name": "CVE-2026-6733",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6733"
    },
    {
      "name": "CVE-2026-13311",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13311"
    },
    {
      "name": "CVE-2026-44488",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
    },
    {
      "name": "CVE-2026-33230",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33230"
    },
    {
      "name": "CVE-2026-10535",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10535"
    },
    {
      "name": "CVE-2026-34481",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34481"
    },
    {
      "name": "CVE-2025-47273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47273"
    },
    {
      "name": "CVE-2026-59204",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59204"
    },
    {
      "name": "CVE-2026-27904",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27904"
    },
    {
      "name": "CVE-2026-14474",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14474"
    },
    {
      "name": "CVE-2026-47059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47059"
    },
    {
      "name": "CVE-2026-53539",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53539"
    },
    {
      "name": "CVE-2026-2739",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2739"
    },
    {
      "name": "CVE-2026-65898",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65898"
    },
    {
      "name": "CVE-2026-53917",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53917"
    },
    {
      "name": "CVE-2026-15392",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15392"
    },
    {
      "name": "CVE-2026-8177",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8177"
    }
  ],
  "initial_release_date": "2026-08-28T00:00:00",
  "last_revision_date": "2026-08-28T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1094",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-08-28T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits IBM. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM",
  "vendor_advisories": [
    {
      "published_at": "2026-08-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285382",
      "url": "https://www.ibm.com/support/pages/node/7285382"
    },
    {
      "published_at": "2026-08-24",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7284666",
      "url": "https://www.ibm.com/support/pages/node/7284666"
    },
    {
      "published_at": "2026-08-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285542",
      "url": "https://www.ibm.com/support/pages/node/7285542"
    },
    {
      "published_at": "2026-08-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285272",
      "url": "https://www.ibm.com/support/pages/node/7285272"
    },
    {
      "published_at": "2026-08-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285232",
      "url": "https://www.ibm.com/support/pages/node/7285232"
    },
    {
      "published_at": "2026-08-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285472",
      "url": "https://www.ibm.com/support/pages/node/7285472"
    },
    {
      "published_at": "2026-08-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285291",
      "url": "https://www.ibm.com/support/pages/node/7285291"
    },
    {
      "published_at": "2026-08-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285470",
      "url": "https://www.ibm.com/support/pages/node/7285470"
    },
    {
      "published_at": "2026-08-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285469",
      "url": "https://www.ibm.com/support/pages/node/7285469"
    },
    {
      "published_at": "2026-08-21",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7284528",
      "url": "https://www.ibm.com/support/pages/node/7284528"
    },
    {
      "published_at": "2026-08-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285416",
      "url": "https://www.ibm.com/support/pages/node/7285416"
    },
    {
      "published_at": "2026-08-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285376",
      "url": "https://www.ibm.com/support/pages/node/7285376"
    },
    {
      "published_at": "2026-08-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285380",
      "url": "https://www.ibm.com/support/pages/node/7285380"
    },
    {
      "published_at": "2026-08-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285275",
      "url": "https://www.ibm.com/support/pages/node/7285275"
    },
    {
      "published_at": "2026-08-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285292",
      "url": "https://www.ibm.com/support/pages/node/7285292"
    },
    {
      "published_at": "2026-08-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285234",
      "url": "https://www.ibm.com/support/pages/node/7285234"
    },
    {
      "published_at": "2026-08-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285141",
      "url": "https://www.ibm.com/support/pages/node/7285141"
    },
    {
      "published_at": "2026-08-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7279466",
      "url": "https://www.ibm.com/support/pages/node/7279466"
    },
    {
      "published_at": "2026-08-24",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7284718",
      "url": "https://www.ibm.com/support/pages/node/7284718"
    },
    {
      "published_at": "2026-08-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285509",
      "url": "https://www.ibm.com/support/pages/node/7285509"
    },
    {
      "published_at": "2026-08-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285340",
      "url": "https://www.ibm.com/support/pages/node/7285340"
    },
    {
      "published_at": "2026-08-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285513",
      "url": "https://www.ibm.com/support/pages/node/7285513"
    },
    {
      "published_at": "2026-08-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285420",
      "url": "https://www.ibm.com/support/pages/node/7285420"
    },
    {
      "published_at": "2026-08-24",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7284710",
      "url": "https://www.ibm.com/support/pages/node/7284710"
    },
    {
      "published_at": "2026-08-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285274",
      "url": "https://www.ibm.com/support/pages/node/7285274"
    },
    {
      "published_at": "2026-08-24",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7284653",
      "url": "https://www.ibm.com/support/pages/node/7284653"
    },
    {
      "published_at": "2026-08-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285342",
      "url": "https://www.ibm.com/support/pages/node/7285342"
    },
    {
      "published_at": "2026-08-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7285539",
      "url": "https://www.ibm.com/support/pages/node/7285539"
    },
    {
      "published_at": "2026-08-24",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7284670",
      "url": "https://www.ibm.com/support/pages/node/7284670"
    },
    {
      "published_at": "2026-08-24",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7284806",
      "url": "https://www.ibm.com/support/pages/node/7284806"
    }
  ]
}

{
  "affected": [
    {
      "affectedData": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.2"
          ],
          "defaultStatus": "affected",
          "packageName": "cifs-utils",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:7.6-1.el10_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::crb",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "cifs-utils",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:7.0-5.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "cifs-utils",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:7.6-2.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "cifs-utils",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:7.6-2.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.22.9.8.202607220526-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unknown",
          "packageName": "cifs-utils",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "cifs-utils",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        }
      ],
      "source": "secalert@redhat.com"
    },
    {
      "affectedData": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.2"
          ],
          "defaultStatus": "affected",
          "packageName": "cifs-utils",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:7.6-1.el10_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "cifs-utils",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:7.0-5.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9",
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "cifs-utils",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:7.6-2.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.22::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.22",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.22.9.8.202607220526-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unknown",
          "packageName": "cifs-utils",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "cifs-utils",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        }
      ],
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted request_key payload to trick the root-owned helper into entering a custom environment (namespace) containing a malicious NSS module. This forces the system to load the attacker\u0027s controlled NSS Module and configuration, allowing them to execute arbitrary commands as the root user, elevating their privileges and fully compromising the system."
    }
  ],
  "id": "CVE-2026-12505",
  "lastModified": "2026-08-25T13:17:48.123",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "secalert@redhat.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-12505",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-06-18T15:50:32.866185Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-06-18T04:16:44.850",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:32990"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:39575"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:39576"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:44232"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/security/cve/CVE-2026-12505"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489805"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://git.samba.org/?p=cifs-utils.git;a=commit;h=972c5b5ff95e3e812bc8daa72d0383654ab0dba7"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:32990"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:39575"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:39576"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:44232"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/security/cve/CVE-2026-12505"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489805"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12505.json"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-250"
        }
      ],
      "source": "secalert@redhat.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-250"
        }
      ],
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "type": "Secondary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2026-12505"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-250"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-06-18T04:16:44Z",
    "severity": "HIGH"
  },
  "details": "A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted request_key payload to trick the root-owned helper into entering a custom environment (namespace) containing a malicious NSS module. This forces the system to load the attacker\u0027s controlled NSS Module and configuration, allowing them to execute arbitrary commands as the root user, elevating their privileges and fully compromising the system.",
  "id": "GHSA-58j9-p7xf-pjx7",
  "modified": "2026-07-28T18:32:40Z",
  "published": "2026-06-18T06:32:20Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12505"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:32990"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:39575"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:39576"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:44232"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/cve/CVE-2026-12505"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489805"
    },
    {
      "type": "WEB",
      "url": "https://git.samba.org/?p=cifs-utils.git;a=commit;h=972c5b5ff95e3e812bc8daa72d0383654ab0dba7"
    },
    {
      "type": "WEB",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12505.json"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2026-12505 Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-12505.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall",
    "tracking": {
      "current_release_date": "2026-06-30T15:40:49.000Z",
      "generator": {
        "date": "2026-07-01T07:19:52.200Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2026-12505",
      "initial_release_date": "2026-06-02T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2026-06-27T01:04:31.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        },
        {
          "date": "2026-06-30T15:40:49.000Z",
          "legacy_version": "2",
          "number": "2",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "3.0",
                "product": {
                  "name": "Azure Linux 3.0",
                  "product_id": "17084"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cazl3 cifs-utils 0:7.3-1.azl3",
                "product": {
                  "name": "\u003cazl3 cifs-utils 0:7.3-1.azl3",
                  "product_id": "1"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 cifs-utils 0:7.3-1.azl3",
                "product": {
                  "name": "azl3 cifs-utils 0:7.3-1.azl3",
                  "product_id": "19355"
                }
              }
            ],
            "category": "product_name",
            "name": "cifs-utils"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 cifs-utils 0:7.3-1.azl3 as a component of Azure Linux 3.0",
          "product_id": "17084-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 cifs-utils 0:7.3-1.azl3 as a component of Azure Linux 3.0",
          "product_id": "19355-17084"
        },
        "product_reference": "19355",
        "relates_to_product_reference": "17084"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-12505",
      "cwe": {
        "id": "CWE-250",
        "name": "Execution with Unnecessary Privileges"
      },
      "notes": [
        {
          "category": "general",
          "text": "redhat",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "fixed": [
          "19355-17084"
        ],
        "known_affected": [
          "17084-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-12505 Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-12505.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-27T01:04:31.000Z",
          "details": "0:7.6-1.azl3:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17084-1"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalsScore": 0.0,
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 7.8,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "17084-1"
          ]
        }
      ],
      "title": "Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for cifs-utils is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The SMB/CIFS protocol is a standard file sharing protocol widely deployed on Microsoft Windows machines. The cifs-utils packages contain tools for mounting shares on Linux using the SMB/CIFS protocol. The tools in this package work in conjunction with support in the kernel to allow one to mount a SMB/CIFS share onto a client and use it as if it were a standard Linux file system.\n\nSecurity Fix(es):\n\n* cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall (CVE-2026-12505)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:32990",
        "url": "https://access.redhat.com/errata/RHSA-2026:32990"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2489805",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489805"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_32990.json"
      }
    ],
    "title": "Red Hat Security Advisory: cifs-utils security update",
    "tracking": {
      "current_release_date": "2026-08-24T13:19:50+00:00",
      "generator": {
        "date": "2026-08-24T13:19:50+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:32990",
      "initial_release_date": "2026-06-29T23:15:30+00:00",
      "revision_history": [
        {
          "date": "2026-06-29T23:15:30+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-29T23:15:30+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-24T13:19:50+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                  "product_id": "AppStream-10.2.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS (v. 10)",
                  "product_id": "BaseOS-10.2.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
                  "product_id": "CRB-10.2.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pam_cifscreds-0:7.6-1.el10_2.x86_64",
                "product": {
                  "name": "pam_cifscreds-0:7.6-1.el10_2.x86_64",
                  "product_id": "pam_cifscreds-0:7.6-1.el10_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds@7.6-1.el10_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debugsource-0:7.6-1.el10_2.x86_64",
                "product": {
                  "name": "cifs-utils-debugsource-0:7.6-1.el10_2.x86_64",
                  "product_id": "cifs-utils-debugsource-0:7.6-1.el10_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debugsource@7.6-1.el10_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debuginfo-0:7.6-1.el10_2.x86_64",
                "product": {
                  "name": "cifs-utils-debuginfo-0:7.6-1.el10_2.x86_64",
                  "product_id": "cifs-utils-debuginfo-0:7.6-1.el10_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debuginfo@7.6-1.el10_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.x86_64",
                "product": {
                  "name": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.x86_64",
                  "product_id": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds-debuginfo@7.6-1.el10_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-0:7.6-1.el10_2.x86_64",
                "product": {
                  "name": "cifs-utils-0:7.6-1.el10_2.x86_64",
                  "product_id": "cifs-utils-0:7.6-1.el10_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils@7.6-1.el10_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-devel-0:7.6-1.el10_2.x86_64",
                "product": {
                  "name": "cifs-utils-devel-0:7.6-1.el10_2.x86_64",
                  "product_id": "cifs-utils-devel-0:7.6-1.el10_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-devel@7.6-1.el10_2?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pam_cifscreds-0:7.6-1.el10_2.aarch64",
                "product": {
                  "name": "pam_cifscreds-0:7.6-1.el10_2.aarch64",
                  "product_id": "pam_cifscreds-0:7.6-1.el10_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds@7.6-1.el10_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debugsource-0:7.6-1.el10_2.aarch64",
                "product": {
                  "name": "cifs-utils-debugsource-0:7.6-1.el10_2.aarch64",
                  "product_id": "cifs-utils-debugsource-0:7.6-1.el10_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debugsource@7.6-1.el10_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debuginfo-0:7.6-1.el10_2.aarch64",
                "product": {
                  "name": "cifs-utils-debuginfo-0:7.6-1.el10_2.aarch64",
                  "product_id": "cifs-utils-debuginfo-0:7.6-1.el10_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debuginfo@7.6-1.el10_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.aarch64",
                "product": {
                  "name": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.aarch64",
                  "product_id": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds-debuginfo@7.6-1.el10_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-0:7.6-1.el10_2.aarch64",
                "product": {
                  "name": "cifs-utils-0:7.6-1.el10_2.aarch64",
                  "product_id": "cifs-utils-0:7.6-1.el10_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils@7.6-1.el10_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-devel-0:7.6-1.el10_2.aarch64",
                "product": {
                  "name": "cifs-utils-devel-0:7.6-1.el10_2.aarch64",
                  "product_id": "cifs-utils-devel-0:7.6-1.el10_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-devel@7.6-1.el10_2?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pam_cifscreds-0:7.6-1.el10_2.ppc64le",
                "product": {
                  "name": "pam_cifscreds-0:7.6-1.el10_2.ppc64le",
                  "product_id": "pam_cifscreds-0:7.6-1.el10_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds@7.6-1.el10_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debugsource-0:7.6-1.el10_2.ppc64le",
                "product": {
                  "name": "cifs-utils-debugsource-0:7.6-1.el10_2.ppc64le",
                  "product_id": "cifs-utils-debugsource-0:7.6-1.el10_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debugsource@7.6-1.el10_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debuginfo-0:7.6-1.el10_2.ppc64le",
                "product": {
                  "name": "cifs-utils-debuginfo-0:7.6-1.el10_2.ppc64le",
                  "product_id": "cifs-utils-debuginfo-0:7.6-1.el10_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debuginfo@7.6-1.el10_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.ppc64le",
                "product": {
                  "name": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.ppc64le",
                  "product_id": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds-debuginfo@7.6-1.el10_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-0:7.6-1.el10_2.ppc64le",
                "product": {
                  "name": "cifs-utils-0:7.6-1.el10_2.ppc64le",
                  "product_id": "cifs-utils-0:7.6-1.el10_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils@7.6-1.el10_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-devel-0:7.6-1.el10_2.ppc64le",
                "product": {
                  "name": "cifs-utils-devel-0:7.6-1.el10_2.ppc64le",
                  "product_id": "cifs-utils-devel-0:7.6-1.el10_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-devel@7.6-1.el10_2?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pam_cifscreds-0:7.6-1.el10_2.s390x",
                "product": {
                  "name": "pam_cifscreds-0:7.6-1.el10_2.s390x",
                  "product_id": "pam_cifscreds-0:7.6-1.el10_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds@7.6-1.el10_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debugsource-0:7.6-1.el10_2.s390x",
                "product": {
                  "name": "cifs-utils-debugsource-0:7.6-1.el10_2.s390x",
                  "product_id": "cifs-utils-debugsource-0:7.6-1.el10_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debugsource@7.6-1.el10_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debuginfo-0:7.6-1.el10_2.s390x",
                "product": {
                  "name": "cifs-utils-debuginfo-0:7.6-1.el10_2.s390x",
                  "product_id": "cifs-utils-debuginfo-0:7.6-1.el10_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debuginfo@7.6-1.el10_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.s390x",
                "product": {
                  "name": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.s390x",
                  "product_id": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds-debuginfo@7.6-1.el10_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-0:7.6-1.el10_2.s390x",
                "product": {
                  "name": "cifs-utils-0:7.6-1.el10_2.s390x",
                  "product_id": "cifs-utils-0:7.6-1.el10_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils@7.6-1.el10_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-devel-0:7.6-1.el10_2.s390x",
                "product": {
                  "name": "cifs-utils-devel-0:7.6-1.el10_2.s390x",
                  "product_id": "cifs-utils-devel-0:7.6-1.el10_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-devel@7.6-1.el10_2?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cifs-utils-0:7.6-1.el10_2.src",
                "product": {
                  "name": "cifs-utils-0:7.6-1.el10_2.src",
                  "product_id": "cifs-utils-0:7.6-1.el10_2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils@7.6-1.el10_2?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.6-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.aarch64"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.6-1.el10_2.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.6-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.ppc64le"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.6-1.el10_2.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.6-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.s390x"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.6-1.el10_2.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.6-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.x86_64"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.6-1.el10_2.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.6-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.aarch64"
        },
        "product_reference": "cifs-utils-debugsource-0:7.6-1.el10_2.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.6-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.ppc64le"
        },
        "product_reference": "cifs-utils-debugsource-0:7.6-1.el10_2.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.6-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.s390x"
        },
        "product_reference": "cifs-utils-debugsource-0:7.6-1.el10_2.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.6-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.x86_64"
        },
        "product_reference": "cifs-utils-debugsource-0:7.6-1.el10_2.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-0:7.6-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:pam_cifscreds-0:7.6-1.el10_2.aarch64"
        },
        "product_reference": "pam_cifscreds-0:7.6-1.el10_2.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-0:7.6-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:pam_cifscreds-0:7.6-1.el10_2.ppc64le"
        },
        "product_reference": "pam_cifscreds-0:7.6-1.el10_2.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-0:7.6-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:pam_cifscreds-0:7.6-1.el10_2.s390x"
        },
        "product_reference": "pam_cifscreds-0:7.6-1.el10_2.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-0:7.6-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:pam_cifscreds-0:7.6-1.el10_2.x86_64"
        },
        "product_reference": "pam_cifscreds-0:7.6-1.el10_2.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.aarch64"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.ppc64le"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.s390x"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.x86_64"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-0:7.6-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:cifs-utils-0:7.6-1.el10_2.aarch64"
        },
        "product_reference": "cifs-utils-0:7.6-1.el10_2.aarch64",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-0:7.6-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:cifs-utils-0:7.6-1.el10_2.ppc64le"
        },
        "product_reference": "cifs-utils-0:7.6-1.el10_2.ppc64le",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-0:7.6-1.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:cifs-utils-0:7.6-1.el10_2.s390x"
        },
        "product_reference": "cifs-utils-0:7.6-1.el10_2.s390x",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-0:7.6-1.el10_2.src as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:cifs-utils-0:7.6-1.el10_2.src"
        },
        "product_reference": "cifs-utils-0:7.6-1.el10_2.src",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-0:7.6-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:cifs-utils-0:7.6-1.el10_2.x86_64"
        },
        "product_reference": "cifs-utils-0:7.6-1.el10_2.x86_64",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.6-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.aarch64"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.6-1.el10_2.aarch64",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.6-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.ppc64le"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.6-1.el10_2.ppc64le",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.6-1.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.s390x"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.6-1.el10_2.s390x",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.6-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.x86_64"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.6-1.el10_2.x86_64",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.6-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.aarch64"
        },
        "product_reference": "cifs-utils-debugsource-0:7.6-1.el10_2.aarch64",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.6-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.ppc64le"
        },
        "product_reference": "cifs-utils-debugsource-0:7.6-1.el10_2.ppc64le",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.6-1.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.s390x"
        },
        "product_reference": "cifs-utils-debugsource-0:7.6-1.el10_2.s390x",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.6-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.x86_64"
        },
        "product_reference": "cifs-utils-debugsource-0:7.6-1.el10_2.x86_64",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.aarch64"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.aarch64",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.ppc64le"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.ppc64le",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.s390x"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.s390x",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.x86_64"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.x86_64",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.6-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.aarch64"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.6-1.el10_2.aarch64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.6-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.ppc64le"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.6-1.el10_2.ppc64le",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.6-1.el10_2.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.s390x"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.6-1.el10_2.s390x",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.6-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.x86_64"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.6-1.el10_2.x86_64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.6-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.aarch64"
        },
        "product_reference": "cifs-utils-debugsource-0:7.6-1.el10_2.aarch64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.6-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.ppc64le"
        },
        "product_reference": "cifs-utils-debugsource-0:7.6-1.el10_2.ppc64le",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.6-1.el10_2.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.s390x"
        },
        "product_reference": "cifs-utils-debugsource-0:7.6-1.el10_2.s390x",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.6-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.x86_64"
        },
        "product_reference": "cifs-utils-debugsource-0:7.6-1.el10_2.x86_64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-devel-0:7.6-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:cifs-utils-devel-0:7.6-1.el10_2.aarch64"
        },
        "product_reference": "cifs-utils-devel-0:7.6-1.el10_2.aarch64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-devel-0:7.6-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:cifs-utils-devel-0:7.6-1.el10_2.ppc64le"
        },
        "product_reference": "cifs-utils-devel-0:7.6-1.el10_2.ppc64le",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-devel-0:7.6-1.el10_2.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:cifs-utils-devel-0:7.6-1.el10_2.s390x"
        },
        "product_reference": "cifs-utils-devel-0:7.6-1.el10_2.s390x",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-devel-0:7.6-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:cifs-utils-devel-0:7.6-1.el10_2.x86_64"
        },
        "product_reference": "cifs-utils-devel-0:7.6-1.el10_2.x86_64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.aarch64"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.aarch64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.ppc64le"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.ppc64le",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.s390x"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.s390x",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.x86_64"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.6-1.el10_2.x86_64",
        "relates_to_product_reference": "CRB-10.2.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-12505",
      "cwe": {
        "id": "CWE-250",
        "name": "Execution with Unnecessary Privileges"
      },
      "discovery_date": "2026-06-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2489805"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted request_key payload to trick the root-owned helper into entering a custom environment (namespace) containing a malicious NSS module. This forces the system to load the attacker\u0027s controlled NSS Module and configuration, allowing them to execute arbitrary commands as the root user, elevating their privileges and fully compromising the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability affects the cifs.upcall helper in cifs-utils. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nThe flaw occurs because cifs.upcall performs user and group resolution operations after entering attacker-controlled namespaces but before fully dropping its elevated privileges. A local attacker may abuse this behavior to influence NSS module loading and execute arbitrary code with root privileges.\n\nSuccessful exploitation requires local access to the system and several environmental conditions, including registration of the cifs.spnego key type, the presence of the cifs-utils request-key rule, and the ability to create unprivileged user namespaces. However, once these conditions are met, exploitation may allow a local user to obtain root privileges.\n\n```\n\nThe issue has been fixed by upstream in cifs-utils v7.6\n\n```",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.aarch64",
          "AppStream-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.ppc64le",
          "AppStream-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.s390x",
          "AppStream-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.x86_64",
          "AppStream-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.aarch64",
          "AppStream-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.ppc64le",
          "AppStream-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.s390x",
          "AppStream-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.x86_64",
          "AppStream-10.2.Z:pam_cifscreds-0:7.6-1.el10_2.aarch64",
          "AppStream-10.2.Z:pam_cifscreds-0:7.6-1.el10_2.ppc64le",
          "AppStream-10.2.Z:pam_cifscreds-0:7.6-1.el10_2.s390x",
          "AppStream-10.2.Z:pam_cifscreds-0:7.6-1.el10_2.x86_64",
          "AppStream-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.aarch64",
          "AppStream-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.ppc64le",
          "AppStream-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.s390x",
          "AppStream-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.x86_64",
          "BaseOS-10.2.Z:cifs-utils-0:7.6-1.el10_2.aarch64",
          "BaseOS-10.2.Z:cifs-utils-0:7.6-1.el10_2.ppc64le",
          "BaseOS-10.2.Z:cifs-utils-0:7.6-1.el10_2.s390x",
          "BaseOS-10.2.Z:cifs-utils-0:7.6-1.el10_2.src",
          "BaseOS-10.2.Z:cifs-utils-0:7.6-1.el10_2.x86_64",
          "BaseOS-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.aarch64",
          "BaseOS-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.ppc64le",
          "BaseOS-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.s390x",
          "BaseOS-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.x86_64",
          "BaseOS-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.aarch64",
          "BaseOS-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.ppc64le",
          "BaseOS-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.s390x",
          "BaseOS-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.x86_64",
          "BaseOS-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.aarch64",
          "BaseOS-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.ppc64le",
          "BaseOS-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.s390x",
          "BaseOS-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.x86_64",
          "CRB-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.aarch64",
          "CRB-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.ppc64le",
          "CRB-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.s390x",
          "CRB-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.x86_64",
          "CRB-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.aarch64",
          "CRB-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.ppc64le",
          "CRB-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.s390x",
          "CRB-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.x86_64",
          "CRB-10.2.Z:cifs-utils-devel-0:7.6-1.el10_2.aarch64",
          "CRB-10.2.Z:cifs-utils-devel-0:7.6-1.el10_2.ppc64le",
          "CRB-10.2.Z:cifs-utils-devel-0:7.6-1.el10_2.s390x",
          "CRB-10.2.Z:cifs-utils-devel-0:7.6-1.el10_2.x86_64",
          "CRB-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.aarch64",
          "CRB-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.ppc64le",
          "CRB-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.s390x",
          "CRB-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-12505"
        },
        {
          "category": "external",
          "summary": "RHBZ#2489805",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489805"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-12505",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-12505"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12505",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12505"
        },
        {
          "category": "external",
          "summary": "https://git.samba.org/?p=cifs-utils.git;a=commit;h=972c5b5ff95e3e812bc8daa72d0383654ab0dba7",
          "url": "https://git.samba.org/?p=cifs-utils.git;a=commit;h=972c5b5ff95e3e812bc8daa72d0383654ab0dba7"
        }
      ],
      "release_date": "2026-06-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-29T23:15:30+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.aarch64",
            "AppStream-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.ppc64le",
            "AppStream-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.s390x",
            "AppStream-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.x86_64",
            "AppStream-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.aarch64",
            "AppStream-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.ppc64le",
            "AppStream-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.s390x",
            "AppStream-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.x86_64",
            "AppStream-10.2.Z:pam_cifscreds-0:7.6-1.el10_2.aarch64",
            "AppStream-10.2.Z:pam_cifscreds-0:7.6-1.el10_2.ppc64le",
            "AppStream-10.2.Z:pam_cifscreds-0:7.6-1.el10_2.s390x",
            "AppStream-10.2.Z:pam_cifscreds-0:7.6-1.el10_2.x86_64",
            "AppStream-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.aarch64",
            "AppStream-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.ppc64le",
            "AppStream-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.s390x",
            "AppStream-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.x86_64",
            "BaseOS-10.2.Z:cifs-utils-0:7.6-1.el10_2.aarch64",
            "BaseOS-10.2.Z:cifs-utils-0:7.6-1.el10_2.ppc64le",
            "BaseOS-10.2.Z:cifs-utils-0:7.6-1.el10_2.s390x",
            "BaseOS-10.2.Z:cifs-utils-0:7.6-1.el10_2.src",
            "BaseOS-10.2.Z:cifs-utils-0:7.6-1.el10_2.x86_64",
            "BaseOS-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.aarch64",
            "BaseOS-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.ppc64le",
            "BaseOS-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.s390x",
            "BaseOS-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.x86_64",
            "BaseOS-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.aarch64",
            "BaseOS-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.ppc64le",
            "BaseOS-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.s390x",
            "BaseOS-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.x86_64",
            "BaseOS-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.aarch64",
            "BaseOS-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.ppc64le",
            "BaseOS-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.s390x",
            "BaseOS-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.x86_64",
            "CRB-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.aarch64",
            "CRB-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.ppc64le",
            "CRB-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.s390x",
            "CRB-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.x86_64",
            "CRB-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.aarch64",
            "CRB-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.ppc64le",
            "CRB-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.s390x",
            "CRB-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.x86_64",
            "CRB-10.2.Z:cifs-utils-devel-0:7.6-1.el10_2.aarch64",
            "CRB-10.2.Z:cifs-utils-devel-0:7.6-1.el10_2.ppc64le",
            "CRB-10.2.Z:cifs-utils-devel-0:7.6-1.el10_2.s390x",
            "CRB-10.2.Z:cifs-utils-devel-0:7.6-1.el10_2.x86_64",
            "CRB-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.aarch64",
            "CRB-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.ppc64le",
            "CRB-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.s390x",
            "CRB-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:32990"
        },
        {
          "category": "workaround",
          "details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
          "product_ids": [
            "AppStream-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.aarch64",
            "AppStream-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.ppc64le",
            "AppStream-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.s390x",
            "AppStream-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.x86_64",
            "AppStream-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.aarch64",
            "AppStream-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.ppc64le",
            "AppStream-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.s390x",
            "AppStream-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.x86_64",
            "AppStream-10.2.Z:pam_cifscreds-0:7.6-1.el10_2.aarch64",
            "AppStream-10.2.Z:pam_cifscreds-0:7.6-1.el10_2.ppc64le",
            "AppStream-10.2.Z:pam_cifscreds-0:7.6-1.el10_2.s390x",
            "AppStream-10.2.Z:pam_cifscreds-0:7.6-1.el10_2.x86_64",
            "AppStream-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.aarch64",
            "AppStream-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.ppc64le",
            "AppStream-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.s390x",
            "AppStream-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.x86_64",
            "BaseOS-10.2.Z:cifs-utils-0:7.6-1.el10_2.aarch64",
            "BaseOS-10.2.Z:cifs-utils-0:7.6-1.el10_2.ppc64le",
            "BaseOS-10.2.Z:cifs-utils-0:7.6-1.el10_2.s390x",
            "BaseOS-10.2.Z:cifs-utils-0:7.6-1.el10_2.src",
            "BaseOS-10.2.Z:cifs-utils-0:7.6-1.el10_2.x86_64",
            "BaseOS-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.aarch64",
            "BaseOS-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.ppc64le",
            "BaseOS-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.s390x",
            "BaseOS-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.x86_64",
            "BaseOS-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.aarch64",
            "BaseOS-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.ppc64le",
            "BaseOS-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.s390x",
            "BaseOS-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.x86_64",
            "BaseOS-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.aarch64",
            "BaseOS-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.ppc64le",
            "BaseOS-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.s390x",
            "BaseOS-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.x86_64",
            "CRB-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.aarch64",
            "CRB-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.ppc64le",
            "CRB-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.s390x",
            "CRB-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.x86_64",
            "CRB-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.aarch64",
            "CRB-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.ppc64le",
            "CRB-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.s390x",
            "CRB-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.x86_64",
            "CRB-10.2.Z:cifs-utils-devel-0:7.6-1.el10_2.aarch64",
            "CRB-10.2.Z:cifs-utils-devel-0:7.6-1.el10_2.ppc64le",
            "CRB-10.2.Z:cifs-utils-devel-0:7.6-1.el10_2.s390x",
            "CRB-10.2.Z:cifs-utils-devel-0:7.6-1.el10_2.x86_64",
            "CRB-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.aarch64",
            "CRB-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.ppc64le",
            "CRB-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.s390x",
            "CRB-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.aarch64",
            "AppStream-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.ppc64le",
            "AppStream-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.s390x",
            "AppStream-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.x86_64",
            "AppStream-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.aarch64",
            "AppStream-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.ppc64le",
            "AppStream-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.s390x",
            "AppStream-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.x86_64",
            "AppStream-10.2.Z:pam_cifscreds-0:7.6-1.el10_2.aarch64",
            "AppStream-10.2.Z:pam_cifscreds-0:7.6-1.el10_2.ppc64le",
            "AppStream-10.2.Z:pam_cifscreds-0:7.6-1.el10_2.s390x",
            "AppStream-10.2.Z:pam_cifscreds-0:7.6-1.el10_2.x86_64",
            "AppStream-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.aarch64",
            "AppStream-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.ppc64le",
            "AppStream-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.s390x",
            "AppStream-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.x86_64",
            "BaseOS-10.2.Z:cifs-utils-0:7.6-1.el10_2.aarch64",
            "BaseOS-10.2.Z:cifs-utils-0:7.6-1.el10_2.ppc64le",
            "BaseOS-10.2.Z:cifs-utils-0:7.6-1.el10_2.s390x",
            "BaseOS-10.2.Z:cifs-utils-0:7.6-1.el10_2.src",
            "BaseOS-10.2.Z:cifs-utils-0:7.6-1.el10_2.x86_64",
            "BaseOS-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.aarch64",
            "BaseOS-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.ppc64le",
            "BaseOS-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.s390x",
            "BaseOS-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.x86_64",
            "BaseOS-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.aarch64",
            "BaseOS-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.ppc64le",
            "BaseOS-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.s390x",
            "BaseOS-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.x86_64",
            "BaseOS-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.aarch64",
            "BaseOS-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.ppc64le",
            "BaseOS-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.s390x",
            "BaseOS-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.x86_64",
            "CRB-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.aarch64",
            "CRB-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.ppc64le",
            "CRB-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.s390x",
            "CRB-10.2.Z:cifs-utils-debuginfo-0:7.6-1.el10_2.x86_64",
            "CRB-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.aarch64",
            "CRB-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.ppc64le",
            "CRB-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.s390x",
            "CRB-10.2.Z:cifs-utils-debugsource-0:7.6-1.el10_2.x86_64",
            "CRB-10.2.Z:cifs-utils-devel-0:7.6-1.el10_2.aarch64",
            "CRB-10.2.Z:cifs-utils-devel-0:7.6-1.el10_2.ppc64le",
            "CRB-10.2.Z:cifs-utils-devel-0:7.6-1.el10_2.s390x",
            "CRB-10.2.Z:cifs-utils-devel-0:7.6-1.el10_2.x86_64",
            "CRB-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.aarch64",
            "CRB-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.ppc64le",
            "CRB-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.s390x",
            "CRB-10.2.Z:pam_cifscreds-debuginfo-0:7.6-1.el10_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for cifs-utils is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The SMB/CIFS protocol is a standard file sharing protocol widely deployed on Microsoft Windows machines. The cifs-utils packages contain tools for mounting shares on Linux using the SMB/CIFS protocol. The tools in this package work in conjunction with support in the kernel to allow one to mount a SMB/CIFS share onto a client and use it as if it were a standard Linux file system.\n\nSecurity Fix(es):\n\n* cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall (CVE-2026-12505)\n\nBug Fix(es) and Enhancement(s):\n\n* add sssd method for mapping SID to UID/GID in man page of mount.cifs [rhel-8.10.z] (JIRA:RHEL-41059)\n\n* Update the mount.cifs man page to match the 3*echo_interval reconnection timeout (JIRA:RHEL-80397)\n\n* cifs-utils: regression with kerberos mount [rhel-8.10.z] (JIRA:RHEL-192933)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:39575",
        "url": "https://access.redhat.com/errata/RHSA-2026:39575"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2489805",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489805"
      },
      {
        "category": "external",
        "summary": "RHEL-80397",
        "url": "https://issues.redhat.com/browse/RHEL-80397"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39575.json"
      }
    ],
    "title": "Red Hat Security Advisory: cifs-utils security, bug fix, and enhancement update",
    "tracking": {
      "current_release_date": "2026-08-24T13:22:05+00:00",
      "generator": {
        "date": "2026-08-24T13:22:05+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:39575",
      "initial_release_date": "2026-07-15T01:28:24+00:00",
      "revision_history": [
        {
          "date": "2026-07-15T01:28:24+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-07-15T01:28:24+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-24T13:22:05+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS (v. 8)",
                  "product_id": "BaseOS-8.10.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:8::baseos"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux CRB (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux CRB (v. 8)",
                  "product_id": "CRB-8.10.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::crb"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cifs-utils-0:7.0-5.el8_10.s390x",
                "product": {
                  "name": "cifs-utils-0:7.0-5.el8_10.s390x",
                  "product_id": "cifs-utils-0:7.0-5.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils@7.0-5.el8_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pam_cifscreds-0:7.0-5.el8_10.s390x",
                "product": {
                  "name": "pam_cifscreds-0:7.0-5.el8_10.s390x",
                  "product_id": "pam_cifscreds-0:7.0-5.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds@7.0-5.el8_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debugsource-0:7.0-5.el8_10.s390x",
                "product": {
                  "name": "cifs-utils-debugsource-0:7.0-5.el8_10.s390x",
                  "product_id": "cifs-utils-debugsource-0:7.0-5.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debugsource@7.0-5.el8_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debuginfo-0:7.0-5.el8_10.s390x",
                "product": {
                  "name": "cifs-utils-debuginfo-0:7.0-5.el8_10.s390x",
                  "product_id": "cifs-utils-debuginfo-0:7.0-5.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debuginfo@7.0-5.el8_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.s390x",
                "product": {
                  "name": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.s390x",
                  "product_id": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds-debuginfo@7.0-5.el8_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-devel-0:7.0-5.el8_10.s390x",
                "product": {
                  "name": "cifs-utils-devel-0:7.0-5.el8_10.s390x",
                  "product_id": "cifs-utils-devel-0:7.0-5.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-devel@7.0-5.el8_10?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cifs-utils-0:7.0-5.el8_10.src",
                "product": {
                  "name": "cifs-utils-0:7.0-5.el8_10.src",
                  "product_id": "cifs-utils-0:7.0-5.el8_10.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils@7.0-5.el8_10?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cifs-utils-0:7.0-5.el8_10.aarch64",
                "product": {
                  "name": "cifs-utils-0:7.0-5.el8_10.aarch64",
                  "product_id": "cifs-utils-0:7.0-5.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils@7.0-5.el8_10?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pam_cifscreds-0:7.0-5.el8_10.aarch64",
                "product": {
                  "name": "pam_cifscreds-0:7.0-5.el8_10.aarch64",
                  "product_id": "pam_cifscreds-0:7.0-5.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds@7.0-5.el8_10?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debugsource-0:7.0-5.el8_10.aarch64",
                "product": {
                  "name": "cifs-utils-debugsource-0:7.0-5.el8_10.aarch64",
                  "product_id": "cifs-utils-debugsource-0:7.0-5.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debugsource@7.0-5.el8_10?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debuginfo-0:7.0-5.el8_10.aarch64",
                "product": {
                  "name": "cifs-utils-debuginfo-0:7.0-5.el8_10.aarch64",
                  "product_id": "cifs-utils-debuginfo-0:7.0-5.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debuginfo@7.0-5.el8_10?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.aarch64",
                "product": {
                  "name": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.aarch64",
                  "product_id": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds-debuginfo@7.0-5.el8_10?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-devel-0:7.0-5.el8_10.aarch64",
                "product": {
                  "name": "cifs-utils-devel-0:7.0-5.el8_10.aarch64",
                  "product_id": "cifs-utils-devel-0:7.0-5.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-devel@7.0-5.el8_10?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cifs-utils-0:7.0-5.el8_10.ppc64le",
                "product": {
                  "name": "cifs-utils-0:7.0-5.el8_10.ppc64le",
                  "product_id": "cifs-utils-0:7.0-5.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils@7.0-5.el8_10?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pam_cifscreds-0:7.0-5.el8_10.ppc64le",
                "product": {
                  "name": "pam_cifscreds-0:7.0-5.el8_10.ppc64le",
                  "product_id": "pam_cifscreds-0:7.0-5.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds@7.0-5.el8_10?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debugsource-0:7.0-5.el8_10.ppc64le",
                "product": {
                  "name": "cifs-utils-debugsource-0:7.0-5.el8_10.ppc64le",
                  "product_id": "cifs-utils-debugsource-0:7.0-5.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debugsource@7.0-5.el8_10?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debuginfo-0:7.0-5.el8_10.ppc64le",
                "product": {
                  "name": "cifs-utils-debuginfo-0:7.0-5.el8_10.ppc64le",
                  "product_id": "cifs-utils-debuginfo-0:7.0-5.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debuginfo@7.0-5.el8_10?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.ppc64le",
                "product": {
                  "name": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.ppc64le",
                  "product_id": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds-debuginfo@7.0-5.el8_10?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-devel-0:7.0-5.el8_10.ppc64le",
                "product": {
                  "name": "cifs-utils-devel-0:7.0-5.el8_10.ppc64le",
                  "product_id": "cifs-utils-devel-0:7.0-5.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-devel@7.0-5.el8_10?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cifs-utils-0:7.0-5.el8_10.x86_64",
                "product": {
                  "name": "cifs-utils-0:7.0-5.el8_10.x86_64",
                  "product_id": "cifs-utils-0:7.0-5.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils@7.0-5.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pam_cifscreds-0:7.0-5.el8_10.x86_64",
                "product": {
                  "name": "pam_cifscreds-0:7.0-5.el8_10.x86_64",
                  "product_id": "pam_cifscreds-0:7.0-5.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds@7.0-5.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debugsource-0:7.0-5.el8_10.x86_64",
                "product": {
                  "name": "cifs-utils-debugsource-0:7.0-5.el8_10.x86_64",
                  "product_id": "cifs-utils-debugsource-0:7.0-5.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debugsource@7.0-5.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debuginfo-0:7.0-5.el8_10.x86_64",
                "product": {
                  "name": "cifs-utils-debuginfo-0:7.0-5.el8_10.x86_64",
                  "product_id": "cifs-utils-debuginfo-0:7.0-5.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debuginfo@7.0-5.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.x86_64",
                "product": {
                  "name": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.x86_64",
                  "product_id": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds-debuginfo@7.0-5.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-devel-0:7.0-5.el8_10.x86_64",
                "product": {
                  "name": "cifs-utils-devel-0:7.0-5.el8_10.x86_64",
                  "product_id": "cifs-utils-devel-0:7.0-5.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-devel@7.0-5.el8_10?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cifs-utils-devel-0:7.0-5.el8_10.i686",
                "product": {
                  "name": "cifs-utils-devel-0:7.0-5.el8_10.i686",
                  "product_id": "cifs-utils-devel-0:7.0-5.el8_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-devel@7.0-5.el8_10?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debugsource-0:7.0-5.el8_10.i686",
                "product": {
                  "name": "cifs-utils-debugsource-0:7.0-5.el8_10.i686",
                  "product_id": "cifs-utils-debugsource-0:7.0-5.el8_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debugsource@7.0-5.el8_10?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debuginfo-0:7.0-5.el8_10.i686",
                "product": {
                  "name": "cifs-utils-debuginfo-0:7.0-5.el8_10.i686",
                  "product_id": "cifs-utils-debuginfo-0:7.0-5.el8_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debuginfo@7.0-5.el8_10?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.i686",
                "product": {
                  "name": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.i686",
                  "product_id": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds-debuginfo@7.0-5.el8_10?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-0:7.0-5.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-0:7.0-5.el8_10.aarch64"
        },
        "product_reference": "cifs-utils-0:7.0-5.el8_10.aarch64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-0:7.0-5.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-0:7.0-5.el8_10.ppc64le"
        },
        "product_reference": "cifs-utils-0:7.0-5.el8_10.ppc64le",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-0:7.0-5.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-0:7.0-5.el8_10.s390x"
        },
        "product_reference": "cifs-utils-0:7.0-5.el8_10.s390x",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-0:7.0-5.el8_10.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-0:7.0-5.el8_10.src"
        },
        "product_reference": "cifs-utils-0:7.0-5.el8_10.src",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-0:7.0-5.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-0:7.0-5.el8_10.x86_64"
        },
        "product_reference": "cifs-utils-0:7.0-5.el8_10.x86_64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.0-5.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.aarch64"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.0-5.el8_10.aarch64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.0-5.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.ppc64le"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.0-5.el8_10.ppc64le",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.0-5.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.s390x"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.0-5.el8_10.s390x",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.0-5.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.x86_64"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.0-5.el8_10.x86_64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.0-5.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.aarch64"
        },
        "product_reference": "cifs-utils-debugsource-0:7.0-5.el8_10.aarch64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.0-5.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.ppc64le"
        },
        "product_reference": "cifs-utils-debugsource-0:7.0-5.el8_10.ppc64le",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.0-5.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.s390x"
        },
        "product_reference": "cifs-utils-debugsource-0:7.0-5.el8_10.s390x",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.0-5.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.x86_64"
        },
        "product_reference": "cifs-utils-debugsource-0:7.0-5.el8_10.x86_64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-0:7.0-5.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-0:7.0-5.el8_10.aarch64"
        },
        "product_reference": "pam_cifscreds-0:7.0-5.el8_10.aarch64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-0:7.0-5.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-0:7.0-5.el8_10.ppc64le"
        },
        "product_reference": "pam_cifscreds-0:7.0-5.el8_10.ppc64le",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-0:7.0-5.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-0:7.0-5.el8_10.s390x"
        },
        "product_reference": "pam_cifscreds-0:7.0-5.el8_10.s390x",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-0:7.0-5.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-0:7.0-5.el8_10.x86_64"
        },
        "product_reference": "pam_cifscreds-0:7.0-5.el8_10.x86_64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.aarch64"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.aarch64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.ppc64le"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.ppc64le",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.s390x"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.s390x",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.x86_64"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.x86_64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.0-5.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.aarch64"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.0-5.el8_10.aarch64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.0-5.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.i686"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.0-5.el8_10.i686",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.0-5.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.ppc64le"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.0-5.el8_10.ppc64le",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.0-5.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.s390x"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.0-5.el8_10.s390x",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.0-5.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.x86_64"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.0-5.el8_10.x86_64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.0-5.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.aarch64"
        },
        "product_reference": "cifs-utils-debugsource-0:7.0-5.el8_10.aarch64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.0-5.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.i686"
        },
        "product_reference": "cifs-utils-debugsource-0:7.0-5.el8_10.i686",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.0-5.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.ppc64le"
        },
        "product_reference": "cifs-utils-debugsource-0:7.0-5.el8_10.ppc64le",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.0-5.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.s390x"
        },
        "product_reference": "cifs-utils-debugsource-0:7.0-5.el8_10.s390x",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.0-5.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.x86_64"
        },
        "product_reference": "cifs-utils-debugsource-0:7.0-5.el8_10.x86_64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-devel-0:7.0-5.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-devel-0:7.0-5.el8_10.aarch64"
        },
        "product_reference": "cifs-utils-devel-0:7.0-5.el8_10.aarch64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-devel-0:7.0-5.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-devel-0:7.0-5.el8_10.i686"
        },
        "product_reference": "cifs-utils-devel-0:7.0-5.el8_10.i686",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-devel-0:7.0-5.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-devel-0:7.0-5.el8_10.ppc64le"
        },
        "product_reference": "cifs-utils-devel-0:7.0-5.el8_10.ppc64le",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-devel-0:7.0-5.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-devel-0:7.0-5.el8_10.s390x"
        },
        "product_reference": "cifs-utils-devel-0:7.0-5.el8_10.s390x",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-devel-0:7.0-5.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-devel-0:7.0-5.el8_10.x86_64"
        },
        "product_reference": "cifs-utils-devel-0:7.0-5.el8_10.x86_64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.aarch64"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.aarch64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.i686"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.i686",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.ppc64le"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.ppc64le",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.s390x"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.s390x",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.x86_64"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.0-5.el8_10.x86_64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-12505",
      "cwe": {
        "id": "CWE-250",
        "name": "Execution with Unnecessary Privileges"
      },
      "discovery_date": "2026-06-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2489805"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted request_key payload to trick the root-owned helper into entering a custom environment (namespace) containing a malicious NSS module. This forces the system to load the attacker\u0027s controlled NSS Module and configuration, allowing them to execute arbitrary commands as the root user, elevating their privileges and fully compromising the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability affects the cifs.upcall helper in cifs-utils. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nThe flaw occurs because cifs.upcall performs user and group resolution operations after entering attacker-controlled namespaces but before fully dropping its elevated privileges. A local attacker may abuse this behavior to influence NSS module loading and execute arbitrary code with root privileges.\n\nSuccessful exploitation requires local access to the system and several environmental conditions, including registration of the cifs.spnego key type, the presence of the cifs-utils request-key rule, and the ability to create unprivileged user namespaces. However, once these conditions are met, exploitation may allow a local user to obtain root privileges.\n\n```\n\nThe issue has been fixed by upstream in cifs-utils v7.6\n\n```",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-0:7.0-5.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-0:7.0-5.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-0:7.0-5.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-0:7.0-5.el8_10.src",
          "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-0:7.0-5.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-0:7.0-5.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-0:7.0-5.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-0:7.0-5.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-0:7.0-5.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.x86_64",
          "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.aarch64",
          "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.i686",
          "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.ppc64le",
          "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.s390x",
          "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.x86_64",
          "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.aarch64",
          "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.i686",
          "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.ppc64le",
          "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.s390x",
          "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.x86_64",
          "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-devel-0:7.0-5.el8_10.aarch64",
          "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-devel-0:7.0-5.el8_10.i686",
          "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-devel-0:7.0-5.el8_10.ppc64le",
          "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-devel-0:7.0-5.el8_10.s390x",
          "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-devel-0:7.0-5.el8_10.x86_64",
          "CRB-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.aarch64",
          "CRB-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.i686",
          "CRB-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.ppc64le",
          "CRB-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.s390x",
          "CRB-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-12505"
        },
        {
          "category": "external",
          "summary": "RHBZ#2489805",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489805"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-12505",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-12505"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12505",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12505"
        },
        {
          "category": "external",
          "summary": "https://git.samba.org/?p=cifs-utils.git;a=commit;h=972c5b5ff95e3e812bc8daa72d0383654ab0dba7",
          "url": "https://git.samba.org/?p=cifs-utils.git;a=commit;h=972c5b5ff95e3e812bc8daa72d0383654ab0dba7"
        }
      ],
      "release_date": "2026-06-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-15T01:28:24+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-0:7.0-5.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-0:7.0-5.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-0:7.0-5.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-0:7.0-5.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-0:7.0-5.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-0:7.0-5.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-0:7.0-5.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-0:7.0-5.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-0:7.0-5.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-devel-0:7.0-5.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-devel-0:7.0-5.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-devel-0:7.0-5.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-devel-0:7.0-5.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-devel-0:7.0-5.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:39575"
        },
        {
          "category": "workaround",
          "details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
          "product_ids": [
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-0:7.0-5.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-0:7.0-5.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-0:7.0-5.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-0:7.0-5.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-0:7.0-5.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-0:7.0-5.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-0:7.0-5.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-0:7.0-5.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-0:7.0-5.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-devel-0:7.0-5.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-devel-0:7.0-5.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-devel-0:7.0-5.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-devel-0:7.0-5.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-devel-0:7.0-5.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-0:7.0-5.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-0:7.0-5.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-0:7.0-5.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-0:7.0-5.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-0:7.0-5.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-0:7.0-5.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-0:7.0-5.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-0:7.0-5.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-0:7.0-5.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.0-5.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.0-5.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-devel-0:7.0-5.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-devel-0:7.0-5.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-devel-0:7.0-5.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-devel-0:7.0-5.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:cifs-utils-devel-0:7.0-5.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.0-5.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for cifs-utils is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The SMB/CIFS protocol is a standard file sharing protocol widely deployed on Microsoft Windows machines. The cifs-utils packages contain tools for mounting shares on Linux using the SMB/CIFS protocol. The tools in this package work in conjunction with support in the kernel to allow one to mount a SMB/CIFS share onto a client and use it as if it were a standard Linux file system.\n\nSecurity Fix(es):\n\n* cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall (CVE-2026-12505)\n\nBug Fix(es) and Enhancement(s):\n\n* cifs-utils: regression with kerberos mount [rhel-9.8.z] (JIRA:RHEL-192982)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:39576",
        "url": "https://access.redhat.com/errata/RHSA-2026:39576"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2489805",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489805"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39576.json"
      }
    ],
    "title": "Red Hat Security Advisory: cifs-utils security, bug fix, and enhancement update",
    "tracking": {
      "current_release_date": "2026-08-24T13:22:06+00:00",
      "generator": {
        "date": "2026-08-24T13:22:06+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:39576",
      "initial_release_date": "2026-07-15T02:48:25+00:00",
      "revision_history": [
        {
          "date": "2026-07-15T02:48:25+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-07-15T02:48:25+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-24T13:22:06+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.8.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS (v. 9)",
                  "product_id": "BaseOS-9.8.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:9::baseos"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
                  "product_id": "CRB-9.8.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::crb"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cifs-utils-0:7.6-2.el9_8.x86_64",
                "product": {
                  "name": "cifs-utils-0:7.6-2.el9_8.x86_64",
                  "product_id": "cifs-utils-0:7.6-2.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils@7.6-2.el9_8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debugsource-0:7.6-2.el9_8.x86_64",
                "product": {
                  "name": "cifs-utils-debugsource-0:7.6-2.el9_8.x86_64",
                  "product_id": "cifs-utils-debugsource-0:7.6-2.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debugsource@7.6-2.el9_8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debuginfo-0:7.6-2.el9_8.x86_64",
                "product": {
                  "name": "cifs-utils-debuginfo-0:7.6-2.el9_8.x86_64",
                  "product_id": "cifs-utils-debuginfo-0:7.6-2.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debuginfo@7.6-2.el9_8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.x86_64",
                "product": {
                  "name": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.x86_64",
                  "product_id": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds-debuginfo@7.6-2.el9_8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-devel-0:7.6-2.el9_8.x86_64",
                "product": {
                  "name": "cifs-utils-devel-0:7.6-2.el9_8.x86_64",
                  "product_id": "cifs-utils-devel-0:7.6-2.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-devel@7.6-2.el9_8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pam_cifscreds-0:7.6-2.el9_8.x86_64",
                "product": {
                  "name": "pam_cifscreds-0:7.6-2.el9_8.x86_64",
                  "product_id": "pam_cifscreds-0:7.6-2.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds@7.6-2.el9_8?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cifs-utils-0:7.6-2.el9_8.src",
                "product": {
                  "name": "cifs-utils-0:7.6-2.el9_8.src",
                  "product_id": "cifs-utils-0:7.6-2.el9_8.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils@7.6-2.el9_8?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cifs-utils-0:7.6-2.el9_8.aarch64",
                "product": {
                  "name": "cifs-utils-0:7.6-2.el9_8.aarch64",
                  "product_id": "cifs-utils-0:7.6-2.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils@7.6-2.el9_8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debugsource-0:7.6-2.el9_8.aarch64",
                "product": {
                  "name": "cifs-utils-debugsource-0:7.6-2.el9_8.aarch64",
                  "product_id": "cifs-utils-debugsource-0:7.6-2.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debugsource@7.6-2.el9_8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debuginfo-0:7.6-2.el9_8.aarch64",
                "product": {
                  "name": "cifs-utils-debuginfo-0:7.6-2.el9_8.aarch64",
                  "product_id": "cifs-utils-debuginfo-0:7.6-2.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debuginfo@7.6-2.el9_8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.aarch64",
                "product": {
                  "name": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.aarch64",
                  "product_id": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds-debuginfo@7.6-2.el9_8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-devel-0:7.6-2.el9_8.aarch64",
                "product": {
                  "name": "cifs-utils-devel-0:7.6-2.el9_8.aarch64",
                  "product_id": "cifs-utils-devel-0:7.6-2.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-devel@7.6-2.el9_8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pam_cifscreds-0:7.6-2.el9_8.aarch64",
                "product": {
                  "name": "pam_cifscreds-0:7.6-2.el9_8.aarch64",
                  "product_id": "pam_cifscreds-0:7.6-2.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds@7.6-2.el9_8?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cifs-utils-0:7.6-2.el9_8.ppc64le",
                "product": {
                  "name": "cifs-utils-0:7.6-2.el9_8.ppc64le",
                  "product_id": "cifs-utils-0:7.6-2.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils@7.6-2.el9_8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debugsource-0:7.6-2.el9_8.ppc64le",
                "product": {
                  "name": "cifs-utils-debugsource-0:7.6-2.el9_8.ppc64le",
                  "product_id": "cifs-utils-debugsource-0:7.6-2.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debugsource@7.6-2.el9_8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debuginfo-0:7.6-2.el9_8.ppc64le",
                "product": {
                  "name": "cifs-utils-debuginfo-0:7.6-2.el9_8.ppc64le",
                  "product_id": "cifs-utils-debuginfo-0:7.6-2.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debuginfo@7.6-2.el9_8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.ppc64le",
                "product": {
                  "name": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.ppc64le",
                  "product_id": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds-debuginfo@7.6-2.el9_8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-devel-0:7.6-2.el9_8.ppc64le",
                "product": {
                  "name": "cifs-utils-devel-0:7.6-2.el9_8.ppc64le",
                  "product_id": "cifs-utils-devel-0:7.6-2.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-devel@7.6-2.el9_8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pam_cifscreds-0:7.6-2.el9_8.ppc64le",
                "product": {
                  "name": "pam_cifscreds-0:7.6-2.el9_8.ppc64le",
                  "product_id": "pam_cifscreds-0:7.6-2.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds@7.6-2.el9_8?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cifs-utils-0:7.6-2.el9_8.s390x",
                "product": {
                  "name": "cifs-utils-0:7.6-2.el9_8.s390x",
                  "product_id": "cifs-utils-0:7.6-2.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils@7.6-2.el9_8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debugsource-0:7.6-2.el9_8.s390x",
                "product": {
                  "name": "cifs-utils-debugsource-0:7.6-2.el9_8.s390x",
                  "product_id": "cifs-utils-debugsource-0:7.6-2.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debugsource@7.6-2.el9_8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debuginfo-0:7.6-2.el9_8.s390x",
                "product": {
                  "name": "cifs-utils-debuginfo-0:7.6-2.el9_8.s390x",
                  "product_id": "cifs-utils-debuginfo-0:7.6-2.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debuginfo@7.6-2.el9_8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.s390x",
                "product": {
                  "name": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.s390x",
                  "product_id": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds-debuginfo@7.6-2.el9_8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-devel-0:7.6-2.el9_8.s390x",
                "product": {
                  "name": "cifs-utils-devel-0:7.6-2.el9_8.s390x",
                  "product_id": "cifs-utils-devel-0:7.6-2.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-devel@7.6-2.el9_8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pam_cifscreds-0:7.6-2.el9_8.s390x",
                "product": {
                  "name": "pam_cifscreds-0:7.6-2.el9_8.s390x",
                  "product_id": "pam_cifscreds-0:7.6-2.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds@7.6-2.el9_8?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cifs-utils-devel-0:7.6-2.el9_8.i686",
                "product": {
                  "name": "cifs-utils-devel-0:7.6-2.el9_8.i686",
                  "product_id": "cifs-utils-devel-0:7.6-2.el9_8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-devel@7.6-2.el9_8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debugsource-0:7.6-2.el9_8.i686",
                "product": {
                  "name": "cifs-utils-debugsource-0:7.6-2.el9_8.i686",
                  "product_id": "cifs-utils-debugsource-0:7.6-2.el9_8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debugsource@7.6-2.el9_8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-debuginfo-0:7.6-2.el9_8.i686",
                "product": {
                  "name": "cifs-utils-debuginfo-0:7.6-2.el9_8.i686",
                  "product_id": "cifs-utils-debuginfo-0:7.6-2.el9_8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-debuginfo@7.6-2.el9_8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.i686",
                "product": {
                  "name": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.i686",
                  "product_id": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_cifscreds-debuginfo@7.6-2.el9_8?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.6-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.aarch64"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.6-2.el9_8.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.6-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.ppc64le"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.6-2.el9_8.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.6-2.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.s390x"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.6-2.el9_8.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.6-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.x86_64"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.6-2.el9_8.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.6-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.aarch64"
        },
        "product_reference": "cifs-utils-debugsource-0:7.6-2.el9_8.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.6-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.ppc64le"
        },
        "product_reference": "cifs-utils-debugsource-0:7.6-2.el9_8.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.6-2.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.s390x"
        },
        "product_reference": "cifs-utils-debugsource-0:7.6-2.el9_8.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.6-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.x86_64"
        },
        "product_reference": "cifs-utils-debugsource-0:7.6-2.el9_8.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-0:7.6-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-0:7.6-2.el9_8.aarch64"
        },
        "product_reference": "pam_cifscreds-0:7.6-2.el9_8.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-0:7.6-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-0:7.6-2.el9_8.ppc64le"
        },
        "product_reference": "pam_cifscreds-0:7.6-2.el9_8.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-0:7.6-2.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-0:7.6-2.el9_8.s390x"
        },
        "product_reference": "pam_cifscreds-0:7.6-2.el9_8.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-0:7.6-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-0:7.6-2.el9_8.x86_64"
        },
        "product_reference": "pam_cifscreds-0:7.6-2.el9_8.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.aarch64"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.ppc64le"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.s390x"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.x86_64"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-0:7.6-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-0:7.6-2.el9_8.aarch64"
        },
        "product_reference": "cifs-utils-0:7.6-2.el9_8.aarch64",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-0:7.6-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-0:7.6-2.el9_8.ppc64le"
        },
        "product_reference": "cifs-utils-0:7.6-2.el9_8.ppc64le",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-0:7.6-2.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-0:7.6-2.el9_8.s390x"
        },
        "product_reference": "cifs-utils-0:7.6-2.el9_8.s390x",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-0:7.6-2.el9_8.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-0:7.6-2.el9_8.src"
        },
        "product_reference": "cifs-utils-0:7.6-2.el9_8.src",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-0:7.6-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-0:7.6-2.el9_8.x86_64"
        },
        "product_reference": "cifs-utils-0:7.6-2.el9_8.x86_64",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.6-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.aarch64"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.6-2.el9_8.aarch64",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.6-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.ppc64le"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.6-2.el9_8.ppc64le",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.6-2.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.s390x"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.6-2.el9_8.s390x",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.6-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.x86_64"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.6-2.el9_8.x86_64",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.6-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.aarch64"
        },
        "product_reference": "cifs-utils-debugsource-0:7.6-2.el9_8.aarch64",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.6-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.ppc64le"
        },
        "product_reference": "cifs-utils-debugsource-0:7.6-2.el9_8.ppc64le",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.6-2.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.s390x"
        },
        "product_reference": "cifs-utils-debugsource-0:7.6-2.el9_8.s390x",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.6-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.x86_64"
        },
        "product_reference": "cifs-utils-debugsource-0:7.6-2.el9_8.x86_64",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.aarch64"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.aarch64",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.ppc64le"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.ppc64le",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.s390x"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.s390x",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.x86_64"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.x86_64",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.6-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.aarch64"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.6-2.el9_8.aarch64",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.6-2.el9_8.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.i686"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.6-2.el9_8.i686",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.6-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.ppc64le"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.6-2.el9_8.ppc64le",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.6-2.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.s390x"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.6-2.el9_8.s390x",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debuginfo-0:7.6-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.x86_64"
        },
        "product_reference": "cifs-utils-debuginfo-0:7.6-2.el9_8.x86_64",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.6-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.aarch64"
        },
        "product_reference": "cifs-utils-debugsource-0:7.6-2.el9_8.aarch64",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.6-2.el9_8.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.i686"
        },
        "product_reference": "cifs-utils-debugsource-0:7.6-2.el9_8.i686",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.6-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.ppc64le"
        },
        "product_reference": "cifs-utils-debugsource-0:7.6-2.el9_8.ppc64le",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.6-2.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.s390x"
        },
        "product_reference": "cifs-utils-debugsource-0:7.6-2.el9_8.s390x",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-debugsource-0:7.6-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.x86_64"
        },
        "product_reference": "cifs-utils-debugsource-0:7.6-2.el9_8.x86_64",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-devel-0:7.6-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-devel-0:7.6-2.el9_8.aarch64"
        },
        "product_reference": "cifs-utils-devel-0:7.6-2.el9_8.aarch64",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-devel-0:7.6-2.el9_8.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-devel-0:7.6-2.el9_8.i686"
        },
        "product_reference": "cifs-utils-devel-0:7.6-2.el9_8.i686",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-devel-0:7.6-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-devel-0:7.6-2.el9_8.ppc64le"
        },
        "product_reference": "cifs-utils-devel-0:7.6-2.el9_8.ppc64le",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-devel-0:7.6-2.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-devel-0:7.6-2.el9_8.s390x"
        },
        "product_reference": "cifs-utils-devel-0:7.6-2.el9_8.s390x",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-devel-0:7.6-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-devel-0:7.6-2.el9_8.x86_64"
        },
        "product_reference": "cifs-utils-devel-0:7.6-2.el9_8.x86_64",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.aarch64"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.aarch64",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.i686"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.i686",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.ppc64le"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.ppc64le",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.s390x"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.s390x",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.x86_64"
        },
        "product_reference": "pam_cifscreds-debuginfo-0:7.6-2.el9_8.x86_64",
        "relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-12505",
      "cwe": {
        "id": "CWE-250",
        "name": "Execution with Unnecessary Privileges"
      },
      "discovery_date": "2026-06-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2489805"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted request_key payload to trick the root-owned helper into entering a custom environment (namespace) containing a malicious NSS module. This forces the system to load the attacker\u0027s controlled NSS Module and configuration, allowing them to execute arbitrary commands as the root user, elevating their privileges and fully compromising the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability affects the cifs.upcall helper in cifs-utils. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nThe flaw occurs because cifs.upcall performs user and group resolution operations after entering attacker-controlled namespaces but before fully dropping its elevated privileges. A local attacker may abuse this behavior to influence NSS module loading and execute arbitrary code with root privileges.\n\nSuccessful exploitation requires local access to the system and several environmental conditions, including registration of the cifs.spnego key type, the presence of the cifs-utils request-key rule, and the ability to create unprivileged user namespaces. However, once these conditions are met, exploitation may allow a local user to obtain root privileges.\n\n```\n\nThe issue has been fixed by upstream in cifs-utils v7.6\n\n```",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-0:7.6-2.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-0:7.6-2.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-0:7.6-2.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-0:7.6-2.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-0:7.6-2.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-0:7.6-2.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-0:7.6-2.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-0:7.6-2.el9_8.src",
          "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-0:7.6-2.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.x86_64",
          "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.aarch64",
          "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.i686",
          "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.ppc64le",
          "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.s390x",
          "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.x86_64",
          "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.aarch64",
          "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.i686",
          "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.ppc64le",
          "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.s390x",
          "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.x86_64",
          "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-devel-0:7.6-2.el9_8.aarch64",
          "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-devel-0:7.6-2.el9_8.i686",
          "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-devel-0:7.6-2.el9_8.ppc64le",
          "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-devel-0:7.6-2.el9_8.s390x",
          "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-devel-0:7.6-2.el9_8.x86_64",
          "CRB-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.aarch64",
          "CRB-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.i686",
          "CRB-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.ppc64le",
          "CRB-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.s390x",
          "CRB-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-12505"
        },
        {
          "category": "external",
          "summary": "RHBZ#2489805",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489805"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-12505",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-12505"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12505",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12505"
        },
        {
          "category": "external",
          "summary": "https://git.samba.org/?p=cifs-utils.git;a=commit;h=972c5b5ff95e3e812bc8daa72d0383654ab0dba7",
          "url": "https://git.samba.org/?p=cifs-utils.git;a=commit;h=972c5b5ff95e3e812bc8daa72d0383654ab0dba7"
        }
      ],
      "release_date": "2026-06-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-15T02:48:25+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-0:7.6-2.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-0:7.6-2.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-0:7.6-2.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-0:7.6-2.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-0:7.6-2.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-0:7.6-2.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-0:7.6-2.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-0:7.6-2.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-0:7.6-2.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.i686",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.i686",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-devel-0:7.6-2.el9_8.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-devel-0:7.6-2.el9_8.i686",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-devel-0:7.6-2.el9_8.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-devel-0:7.6-2.el9_8.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-devel-0:7.6-2.el9_8.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.i686",
            "CRB-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:39576"
        },
        {
          "category": "workaround",
          "details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-0:7.6-2.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-0:7.6-2.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-0:7.6-2.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-0:7.6-2.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-0:7.6-2.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-0:7.6-2.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-0:7.6-2.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-0:7.6-2.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-0:7.6-2.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.i686",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.i686",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-devel-0:7.6-2.el9_8.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-devel-0:7.6-2.el9_8.i686",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-devel-0:7.6-2.el9_8.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-devel-0:7.6-2.el9_8.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-devel-0:7.6-2.el9_8.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.i686",
            "CRB-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-0:7.6-2.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-0:7.6-2.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-0:7.6-2.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-0:7.6-2.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-0:7.6-2.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-0:7.6-2.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-0:7.6-2.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-0:7.6-2.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-0:7.6-2.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.i686",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debuginfo-0:7.6-2.el9_8.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.i686",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-debugsource-0:7.6-2.el9_8.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-devel-0:7.6-2.el9_8.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-devel-0:7.6-2.el9_8.i686",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-devel-0:7.6-2.el9_8.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-devel-0:7.6-2.el9_8.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:cifs-utils-devel-0:7.6-2.el9_8.x86_64",
            "CRB-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.aarch64",
            "CRB-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.i686",
            "CRB-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.ppc64le",
            "CRB-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.s390x",
            "CRB-9.8.0.Z.MAIN.EUS:pam_cifscreds-debuginfo-0:7.6-2.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall"
    }
  ]
}