Vulnerability-Lookup

RHSA-2026:47236

Vulnerability from csaf_redhat - Published: 2026-07-28 19:59 - Updated: 2026-07-28 22:49

Summary

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Severity

Important

Notes

Topic: An update for Red Hat Hardened Images RPMs is now available.

Details: This update includes the following RPMs: rabbitmq-server4.2: * rabbitmq-server4.2-4.2.9-0.2.hum1 (aarch64, x86_64) * rabbitmq-server4.2-4.2.9-0.2.hum1.src (src) Security Fix(es): rabbitmq-server4.2: * CVE-2026-59248 * CVE-2026-65624

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-59248

A flaw was found in cowlib, an HTTP parser. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP/2 or HTTP/3 frames containing oversized HPACK or QPACK prefixed integers. This unbounded decoding process leads to excessive memory allocation and garbage collection, ultimately causing memory exhaustion and a denial of service (DoS) on the vulnerable server or client.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Hardened Images:rabbitmq-server4-2-main@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:rabbitmq-server4-2-main@src	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:rabbitmq-server4-2-main@x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-65624

A flaw was found in Cowboy. An unauthenticated remote attacker can exploit this vulnerability by sending multiple HTTP/1.1 header lines with the same name. This bypasses the `max_headers` limit, causing the connection process memory to grow uncontrollably. This can lead to memory exhaustion and a Denial of Service (DoS) condition in the Erlang Virtual Machine (VM).

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Hardened Images:rabbitmq-server4-2-main@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:rabbitmq-server4-2-main@src	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:rabbitmq-server4-2-main@x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

20 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:47236	self
https://access.redhat.com/security/cve/CVE-2026-59248	external
https://access.redhat.com/security/cve/CVE-2026-65624	external
https://access.redhat.com/security/updates/classi…	external
https://images.redhat.com/	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-59248	self
https://bugzilla.redhat.com/show_bug.cgi?id=2507959	external
https://www.cve.org/CVERecord?id=CVE-2026-59248	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59248	external
https://cna.erlef.org/cves/CVE-2026-59248.html	external
https://github.com/ninenines/cowlib/commit/f58243…	external
https://osv.dev/vulnerability/EEF-CVE-2026-59248	external
https://access.redhat.com/security/cve/CVE-2026-65624	self
https://bugzilla.redhat.com/show_bug.cgi?id=2507960	external
https://www.cve.org/CVERecord?id=CVE-2026-65624	external
https://nvd.nist.gov/vuln/detail/CVE-2026-65624	external
https://cna.erlef.org/cves/CVE-2026-65624.html	external
https://github.com/ninenines/cowboy/commit/3a34d8…	external
https://osv.dev/vulnerability/EEF-CVE-2026-65624	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Hardened Images RPMs is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This update includes the following RPMs:\n\nrabbitmq-server4.2:\n  * rabbitmq-server4.2-4.2.9-0.2.hum1 (aarch64, x86_64)\n  * rabbitmq-server4.2-4.2.9-0.2.hum1.src (src)\n\nSecurity Fix(es):\n\nrabbitmq-server4.2:\n  * CVE-2026-59248\n  * CVE-2026-65624",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:47236",
        "url": "https://access.redhat.com/errata/RHSA-2026:47236"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59248",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59248"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-65624",
        "url": "https://access.redhat.com/security/cve/CVE-2026-65624"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://images.redhat.com/",
        "url": "https://images.redhat.com/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47236.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
    "tracking": {
      "current_release_date": "2026-07-28T22:49:05+00:00",
      "generator": {
        "date": "2026-07-28T22:49:05+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.7"
        }
      },
      "id": "RHSA-2026:47236",
      "initial_release_date": "2026-07-28T19:59:09+00:00",
      "revision_history": [
        {
          "date": "2026-07-28T19:59:09+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-07-28T20:00:29+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-07-28T22:49:05+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Hardened Images",
                "product": {
                  "name": "Red Hat Hardened Images",
                  "product_id": "Red Hat Hardened Images",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:hummingbird:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Hardened Images"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rabbitmq-server4-2-main@aarch64",
                "product": {
                  "name": "rabbitmq-server4-2-main@aarch64",
                  "product_id": "rabbitmq-server4-2-main@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rabbitmq-server4.2@4.2.9-0.2.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rabbitmq-server4-2-main@src",
                "product": {
                  "name": "rabbitmq-server4-2-main@src",
                  "product_id": "rabbitmq-server4-2-main@src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rabbitmq-server4.2@4.2.9-0.2.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rabbitmq-server4-2-main@x86_64",
                "product": {
                  "name": "rabbitmq-server4-2-main@x86_64",
                  "product_id": "rabbitmq-server4-2-main@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rabbitmq-server4.2@4.2.9-0.2.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rabbitmq-server4-2-main@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rabbitmq-server4-2-main@aarch64"
        },
        "product_reference": "rabbitmq-server4-2-main@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rabbitmq-server4-2-main@src as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rabbitmq-server4-2-main@src"
        },
        "product_reference": "rabbitmq-server4-2-main@src",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rabbitmq-server4-2-main@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rabbitmq-server4-2-main@x86_64"
        },
        "product_reference": "rabbitmq-server4-2-main@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-59248",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-07-28T11:00:58.700936+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507959"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in cowlib, an HTTP parser. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP/2 or HTTP/3 frames containing oversized HPACK or QPACK prefixed integers. This unbounded decoding process leads to excessive memory allocation and garbage collection, ultimately causing memory exhaustion and a denial of service (DoS) on the vulnerable server or client.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "cowlib: Cowlib: Denial of Service due to unbounded HPACK/QPACK prefixed-integer decoding",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in cowlib, an HTTP parser used by components like RabbitMQ. An unauthenticated remote attacker can exploit this flaw by sending specially crafted HTTP/2 or HTTP/3 frames, leading to unbounded memory allocation and exhaustion, which can cause a service outage. The remote and unauthenticated nature of the attack vector contributes to its Important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:rabbitmq-server4-2-main@aarch64",
          "Red Hat Hardened Images:rabbitmq-server4-2-main@src",
          "Red Hat Hardened Images:rabbitmq-server4-2-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59248"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507959",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507959"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59248",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59248"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59248",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59248"
        },
        {
          "category": "external",
          "summary": "https://cna.erlef.org/cves/CVE-2026-59248.html",
          "url": "https://cna.erlef.org/cves/CVE-2026-59248.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/ninenines/cowlib/commit/f582430498072a0c65ad338030321576dc13a343",
          "url": "https://github.com/ninenines/cowlib/commit/f582430498072a0c65ad338030321576dc13a343"
        },
        {
          "category": "external",
          "summary": "https://osv.dev/vulnerability/EEF-CVE-2026-59248",
          "url": "https://osv.dev/vulnerability/EEF-CVE-2026-59248"
        }
      ],
      "release_date": "2026-07-28T09:54:19.579000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-28T19:59:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:rabbitmq-server4-2-main@aarch64",
            "Red Hat Hardened Images:rabbitmq-server4-2-main@src",
            "Red Hat Hardened Images:rabbitmq-server4-2-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:47236"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Hardened Images:rabbitmq-server4-2-main@aarch64",
            "Red Hat Hardened Images:rabbitmq-server4-2-main@src",
            "Red Hat Hardened Images:rabbitmq-server4-2-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:rabbitmq-server4-2-main@aarch64",
            "Red Hat Hardened Images:rabbitmq-server4-2-main@src",
            "Red Hat Hardened Images:rabbitmq-server4-2-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "cowlib: Cowlib: Denial of Service due to unbounded HPACK/QPACK prefixed-integer decoding"
    },
    {
      "cve": "CVE-2026-65624",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-07-28T11:01:03.393900+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507960"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Cowboy. An unauthenticated remote attacker can exploit this vulnerability by sending multiple HTTP/1.1 header lines with the same name. This bypasses the `max_headers` limit, causing the connection process memory to grow uncontrollably. This can lead to memory exhaustion and a Denial of Service (DoS) condition in the Erlang Virtual Machine (VM).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "cowboy: Cowboy: Denial of Service via HTTP/1.1 duplicate header names",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability allows an unauthenticated remote attacker to cause a denial of service by sending crafted HTTP/1.1 requests with duplicate header names. The `cowboy` library, utilized by components such as `rabbitmq-server` in Red Hat Hardened Images, fails to properly limit memory consumption from concatenated header values. This can lead to memory exhaustion of the Erlang Virtual Machine, impacting service availability, particularly if the `max_heap_size` is not explicitly configured.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:rabbitmq-server4-2-main@aarch64",
          "Red Hat Hardened Images:rabbitmq-server4-2-main@src",
          "Red Hat Hardened Images:rabbitmq-server4-2-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-65624"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507960",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507960"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-65624",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-65624"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-65624",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65624"
        },
        {
          "category": "external",
          "summary": "https://cna.erlef.org/cves/CVE-2026-65624.html",
          "url": "https://cna.erlef.org/cves/CVE-2026-65624.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/ninenines/cowboy/commit/3a34d8c1cfd94326466aa16a9017236691dc9c55",
          "url": "https://github.com/ninenines/cowboy/commit/3a34d8c1cfd94326466aa16a9017236691dc9c55"
        },
        {
          "category": "external",
          "summary": "https://osv.dev/vulnerability/EEF-CVE-2026-65624",
          "url": "https://osv.dev/vulnerability/EEF-CVE-2026-65624"
        }
      ],
      "release_date": "2026-07-28T10:01:01.811000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-28T19:59:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:rabbitmq-server4-2-main@aarch64",
            "Red Hat Hardened Images:rabbitmq-server4-2-main@src",
            "Red Hat Hardened Images:rabbitmq-server4-2-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:47236"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Hardened Images:rabbitmq-server4-2-main@aarch64",
            "Red Hat Hardened Images:rabbitmq-server4-2-main@src",
            "Red Hat Hardened Images:rabbitmq-server4-2-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:rabbitmq-server4-2-main@aarch64",
            "Red Hat Hardened Images:rabbitmq-server4-2-main@src",
            "Red Hat Hardened Images:rabbitmq-server4-2-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "cowboy: Cowboy: Denial of Service via HTTP/1.1 duplicate header names"
    }
  ]
}

CVE-2026-59248 (GCVE-0-2026-59248)

Vulnerability from cvelistv5 – Published: 2026-07-28 09:54 – Updated: 2026-07-28 12:40

Title

Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS

Summary

Allocation of resources without limits vulnerability in ninenines cowlib allows an unauthenticated remote HTTP/2 or HTTP/3 peer to exhaust memory on the vulnerable server (or client) and cause a denial of service. The HPACK and QPACK prefixed-integer decoder cow_hpack_common:dec_big_int/3 in src/cow_hpack_common.hrl (invoked from cow_hpack:decode/2 in src/cow_hpack.erl and from cow_qpack:decode_field_section/3 in src/cow_qpack.erl) reads continuation octets until it sees one whose high bit is clear, evaluating Int + (Value bsl M) at each step with the shift M growing by seven per octet. No limit is enforced on the number of continuation octets, on the resulting bit width, or on the value; the decoder consumes whatever encoded length the peer supplies. Because Erlang integers are immutable, each intermediate Value bsl M and each accumulator update allocates a fresh bignum whose digit width grows linearly with the number of octets processed so far. Summed across the whole decode, the transient bignum digit materialization is on the order of the square of the encoded length. A single maximal HPACK indexed representation carried inside one HTTP/2 HEADERS plus one CONTINUATION frame at Cowboy's default max_frame_size_received can force hundreds of megabytes of transient allocation and garbage-collection churn before the resulting header-table index is rejected as invalid. Repeated or concurrent connections multiply the pressure and can drive the Erlang VM to memory exhaustion. Cowlib is the HTTP parser used by Cowboy, RabbitMQ's management plugin, and other Erlang and Elixir HTTP/2 and HTTP/3 servers and clients, so any exposed endpoint that accepts HPACK or QPACK from an untrusted peer is reachable. This issue affects cowlib: from 2.0.0 before 2.19.0.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

EEF

References

3 references

URL	Tags
https://cna.erlef.org/cves/CVE-2026-59248.html	third-party-advisoryrelated
https://osv.dev/vulnerability/EEF-CVE-2026-59248	related
https://github.com/ninenines/cowlib/commit/f58243…	patch

Impacted products

2 products

Vendor	Product	Version
ninenines	cowlib	Affected: 2.0.0-pre.1 , < 2.19.0 (semver) cpe:2.3:a:ninenines:cowlib::::::::
ninenines	cowlib	Affected: 5ddecbc121f812aec53d9df91829448d8e94e44c , < f582430498072a0c65ad338030321576dc13a343 (git) cpe:2.3:a:ninenines:cowlib::::::::

Credits

David Hernández Jonatan Männchen / EEF Loïc Hoguin Jonatan Männchen / EEF

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-59248",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-28T12:39:48.662716Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-28T12:40:53.530Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://repo.hex.pm",
          "cpes": [
            "cpe:2.3:a:ninenines:cowlib:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "modules": [
            "cow_hpack",
            "cow_qpack"
          ],
          "packageName": "cowlib",
          "packageURL": "pkg:hex/cowlib",
          "product": "cowlib",
          "programFiles": [
            "src/cow_hpack_common.hrl",
            "src/cow_hpack.erl",
            "src/cow_qpack.erl"
          ],
          "programRoutines": [
            {
              "name": "cow_hpack:decode/2"
            },
            {
              "name": "cow_qpack:decode_field_section/3"
            }
          ],
          "repo": "https://github.com/ninenines/cowlib",
          "vendor": "ninenines",
          "versions": [
            {
              "lessThan": "2.19.0",
              "status": "affected",
              "version": "2.0.0-pre.1",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://github.com",
          "cpes": [
            "cpe:2.3:a:ninenines:cowlib:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "modules": [
            "cow_hpack",
            "cow_qpack"
          ],
          "packageName": "ninenines/cowlib",
          "packageURL": "pkg:github/ninenines/cowlib",
          "product": "cowlib",
          "programFiles": [
            "src/cow_hpack_common.hrl",
            "src/cow_hpack.erl",
            "src/cow_qpack.erl"
          ],
          "programRoutines": [
            {
              "name": "cow_hpack:decode/2"
            },
            {
              "name": "cow_qpack:decode_field_section/3"
            }
          ],
          "repo": "https://github.com/ninenines/cowlib",
          "vendor": "ninenines",
          "versions": [
            {
              "lessThan": "f582430498072a0c65ad338030321576dc13a343",
              "status": "affected",
              "version": "5ddecbc121f812aec53d9df91829448d8e94e44c",
              "versionType": "git"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:ninenines:cowlib:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2.19.0",
                  "versionStartIncluding": "2.0.0-pre.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "AND"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "David Hern\u00e1ndez"
        },
        {
          "lang": "en",
          "type": "reporter",
          "value": "Jonatan M\u00e4nnchen / EEF"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Lo\u00efc Hoguin"
        },
        {
          "lang": "en",
          "type": "analyst",
          "value": "Jonatan M\u00e4nnchen / EEF"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAllocation of resources without limits vulnerability in ninenines cowlib allows an unauthenticated remote HTTP/2 or HTTP/3 peer to exhaust memory on the vulnerable server (or client) and cause a denial of service.\u003c/p\u003e\u003cp\u003eThe HPACK and QPACK prefixed-integer decoder \u003ctt\u003ecow_hpack_common:dec_big_int/3\u003c/tt\u003e in \u003ctt\u003esrc/cow_hpack_common.hrl\u003c/tt\u003e (invoked from \u003ctt\u003ecow_hpack:decode/2\u003c/tt\u003e in \u003ctt\u003esrc/cow_hpack.erl\u003c/tt\u003e and from \u003ctt\u003ecow_qpack:decode_field_section/3\u003c/tt\u003e in \u003ctt\u003esrc/cow_qpack.erl\u003c/tt\u003e) reads continuation octets until it sees one whose high bit is clear, evaluating \u003ctt\u003eInt + (Value bsl M)\u003c/tt\u003e at each step with the shift \u003ctt\u003eM\u003c/tt\u003e growing by seven per octet. No limit is enforced on the number of continuation octets, on the resulting bit width, or on the value; the decoder consumes whatever encoded length the peer supplies.\u003c/p\u003e\u003cp\u003eBecause Erlang integers are immutable, each intermediate \u003ctt\u003eValue bsl M\u003c/tt\u003e and each accumulator update allocates a fresh bignum whose digit width grows linearly with the number of octets processed so far. Summed across the whole decode, the transient bignum digit materialization is on the order of the square of the encoded length. A single maximal HPACK indexed representation carried inside one HTTP/2 \u003ctt\u003eHEADERS\u003c/tt\u003e plus one \u003ctt\u003eCONTINUATION\u003c/tt\u003e frame at Cowboy\u0027s default \u003ctt\u003emax_frame_size_received\u003c/tt\u003e can force hundreds of megabytes of transient allocation and garbage-collection churn before the resulting header-table index is rejected as invalid. Repeated or concurrent connections multiply the pressure and can drive the Erlang VM to memory exhaustion.\u003c/p\u003e\u003cp\u003eCowlib is the HTTP parser used by Cowboy, RabbitMQ\u0027s management plugin, and other Erlang and Elixir HTTP/2 and HTTP/3 servers and clients, so any exposed endpoint that accepts HPACK or QPACK from an untrusted peer is reachable.\u003c/p\u003e\u003cp\u003eThis issue affects cowlib: from 2.0.0 before 2.19.0.\u003c/p\u003e"
            }
          ],
          "value": "Allocation of resources without limits vulnerability in ninenines cowlib allows an unauthenticated remote HTTP/2 or HTTP/3 peer to exhaust memory on the vulnerable server (or client) and cause a denial of service.\n\nThe HPACK and QPACK prefixed-integer decoder cow_hpack_common:dec_big_int/3 in src/cow_hpack_common.hrl (invoked from cow_hpack:decode/2 in src/cow_hpack.erl and from cow_qpack:decode_field_section/3 in src/cow_qpack.erl) reads continuation octets until it sees one whose high bit is clear, evaluating Int + (Value bsl M) at each step with the shift M growing by seven per octet. No limit is enforced on the number of continuation octets, on the resulting bit width, or on the value; the decoder consumes whatever encoded length the peer supplies.\n\nBecause Erlang integers are immutable, each intermediate Value bsl M and each accumulator update allocates a fresh bignum whose digit width grows linearly with the number of octets processed so far. Summed across the whole decode, the transient bignum digit materialization is on the order of the square of the encoded length. A single maximal HPACK indexed representation carried inside one HTTP/2 HEADERS plus one CONTINUATION frame at Cowboy\u0027s default max_frame_size_received can force hundreds of megabytes of transient allocation and garbage-collection churn before the resulting header-table index is rejected as invalid. Repeated or concurrent connections multiply the pressure and can drive the Erlang VM to memory exhaustion.\n\nCowlib is the HTTP parser used by Cowboy, RabbitMQ\u0027s management plugin, and other Erlang and Elixir HTTP/2 and HTTP/3 servers and clients, so any exposed endpoint that accepts HPACK or QPACK from an untrusted peer is reachable.\n\nThis issue affects cowlib: from 2.0.0 before 2.19.0."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-130",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-130 Excessive Allocation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-28T09:54:19.579Z",
        "orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
        "shortName": "EEF"
      },
      "references": [
        {
          "tags": [
            "third-party-advisory",
            "related"
          ],
          "url": "https://cna.erlef.org/cves/CVE-2026-59248.html"
        },
        {
          "tags": [
            "related"
          ],
          "url": "https://osv.dev/vulnerability/EEF-CVE-2026-59248"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/ninenines/cowlib/commit/f582430498072a0c65ad338030321576dc13a343"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
    "assignerShortName": "EEF",
    "cveId": "CVE-2026-59248",
    "datePublished": "2026-07-28T09:54:19.579Z",
    "dateReserved": "2026-07-04T04:24:03.652Z",
    "dateUpdated": "2026-07-28T12:40:53.530Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-65624 (GCVE-0-2026-65624)

Vulnerability from cvelistv5 – Published: 2026-07-28 10:01 – Updated: 2026-07-28 12:39

Title

Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion

Summary

Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker to exhaust connection process memory over HTTP/1.1. The HTTP/1.1 handler in cowboy_http enforces the max_headers limit by counting the number of distinct header names in a map (maps:size(Headers)). When a request contains multiple header lines with the same name, the values are concatenated into a single ever-growing binary stored under that one map key (", " for regular headers, "; " for cookies), so the map size stays at one and the max_headers cap (default 100) is never reached. Because no accumulator bounds the total number of header lines or the total byte size of the header block (only per-line max_header_name_length and max_header_value_length apply), an unauthenticated client can send an arbitrary number of header lines with the same name and grow the connection process's binary memory to arbitrary size within the request window. The impact per connection is bounded by request_timeout (default 5 seconds, not reset by header data), and by max_heap_size when set (the offending connection process is killed once its heap grows past the limit). When max_heap_size is left at the default (unset), sustained abuse can drive the Erlang VM into out-of-memory conditions. This issue affects cowboy from 2.0.0-pre.4 before 2.18.0.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

EEF

References

3 references

URL	Tags
https://cna.erlef.org/cves/CVE-2026-65624.html	relatedthird-party-advisory
https://osv.dev/vulnerability/EEF-CVE-2026-65624	related
https://github.com/ninenines/cowboy/commit/3a34d8…	patch

Impacted products

2 products

Vendor	Product	Version
ninenines	cowboy	Affected: 2.0.0-pre.4 , < 2.18.0 (semver) cpe:2.3:a:ninenines:cowboy::::::::
ninenines	cowboy	Affected: 309780a9fda145c262a47ac7811ffd50a0271c5b , < 3a34d8c1cfd94326466aa16a9017236691dc9c55 (git) cpe:2.3:a:ninenines:cowboy::::::::

Credits

Qiyi Deng / Wuhan University Min Shi / Wuhan University Yongkang Xiao / Wuhan University Jing Chen / Wuhan University Loïc Hoguin Jonatan Männchen / EEF

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-65624",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-28T12:38:53.899266Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-28T12:39:27.067Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://repo.hex.pm",
          "cpes": [
            "cpe:2.3:a:ninenines:cowboy:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "modules": [
            "cowboy_http"
          ],
          "packageName": "cowboy",
          "packageURL": "pkg:hex/cowboy",
          "product": "cowboy",
          "programFiles": [
            "src/cowboy_http.erl"
          ],
          "programRoutines": [
            {
              "name": "cowboy_http:parse_header/3"
            },
            {
              "name": "cowboy_http:parse_hd_value/6"
            }
          ],
          "repo": "https://github.com/ninenines/cowboy",
          "vendor": "ninenines",
          "versions": [
            {
              "lessThan": "2.18.0",
              "status": "affected",
              "version": "2.0.0-pre.4",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://github.com",
          "cpes": [
            "cpe:2.3:a:ninenines:cowboy:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "modules": [
            "cowboy_http"
          ],
          "packageName": "ninenines/cowboy",
          "packageURL": "pkg:github/ninenines/cowboy",
          "product": "cowboy",
          "programFiles": [
            "src/cowboy_http.erl"
          ],
          "programRoutines": [
            {
              "name": "cowboy_http:parse_header/3"
            },
            {
              "name": "cowboy_http:parse_hd_value/6"
            }
          ],
          "repo": "https://github.com/ninenines/cowboy",
          "vendor": "ninenines",
          "versions": [
            {
              "lessThan": "3a34d8c1cfd94326466aa16a9017236691dc9c55",
              "status": "affected",
              "version": "309780a9fda145c262a47ac7811ffd50a0271c5b",
              "versionType": "git"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:ninenines:cowboy:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2.18.0",
                  "versionStartIncluding": "2.0.0-pre.4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "AND"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Qiyi Deng / Wuhan University"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Min Shi / Wuhan University"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Yongkang Xiao / Wuhan University"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Jing Chen / Wuhan University"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Lo\u00efc Hoguin"
        },
        {
          "lang": "en",
          "type": "analyst",
          "value": "Jonatan M\u00e4nnchen / EEF"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAllocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker to exhaust connection process memory over HTTP/1.1.\u003c/p\u003e\u003cp\u003eThe HTTP/1.1 handler in \u003ctt\u003ecowboy_http\u003c/tt\u003e enforces the \u003ctt\u003emax_headers\u003c/tt\u003e limit by counting the number of distinct header names in a map (\u003ctt\u003emaps:size(Headers)\u003c/tt\u003e). When a request contains multiple header lines with the same name, the values are concatenated into a single ever-growing binary stored under that one map key (\u003ctt\u003e\", \"\u003c/tt\u003e for regular headers, \u003ctt\u003e\"; \"\u003c/tt\u003e for cookies), so the map size stays at one and the \u003ctt\u003emax_headers\u003c/tt\u003e cap (default 100) is never reached. Because no accumulator bounds the total number of header lines or the total byte size of the header block (only per-line \u003ctt\u003emax_header_name_length\u003c/tt\u003e and \u003ctt\u003emax_header_value_length\u003c/tt\u003e apply), an unauthenticated client can send an arbitrary number of header lines with the same name and grow the connection process\u0027s binary memory to arbitrary size within the request window.\u003c/p\u003e\u003cp\u003eThe impact per connection is bounded by \u003ctt\u003erequest_timeout\u003c/tt\u003e (default 5 seconds, not reset by header data), and by \u003ctt\u003emax_heap_size\u003c/tt\u003e when set (the offending connection process is killed once its heap grows past the limit). When \u003ctt\u003emax_heap_size\u003c/tt\u003e is left at the default (unset), sustained abuse can drive the Erlang VM into out-of-memory conditions.\u003c/p\u003e\u003cp\u003eThis issue affects cowboy from 2.0.0-pre.4 before 2.18.0.\u003c/p\u003e"
            }
          ],
          "value": "Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker to exhaust connection process memory over HTTP/1.1.\n\nThe HTTP/1.1 handler in cowboy_http enforces the max_headers limit by counting the number of distinct header names in a map (maps:size(Headers)). When a request contains multiple header lines with the same name, the values are concatenated into a single ever-growing binary stored under that one map key (\", \" for regular headers, \"; \" for cookies), so the map size stays at one and the max_headers cap (default 100) is never reached. Because no accumulator bounds the total number of header lines or the total byte size of the header block (only per-line max_header_name_length and max_header_value_length apply), an unauthenticated client can send an arbitrary number of header lines with the same name and grow the connection process\u0027s binary memory to arbitrary size within the request window.\n\nThe impact per connection is bounded by request_timeout (default 5 seconds, not reset by header data), and by max_heap_size when set (the offending connection process is killed once its heap grows past the limit). When max_heap_size is left at the default (unset), sustained abuse can drive the Erlang VM into out-of-memory conditions.\n\nThis issue affects cowboy from 2.0.0-pre.4 before 2.18.0."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-130",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-130 Excessive Allocation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackVector": "NETWORK",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-28T10:01:01.811Z",
        "orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
        "shortName": "EEF"
      },
      "references": [
        {
          "tags": [
            "related",
            "third-party-advisory"
          ],
          "url": "https://cna.erlef.org/cves/CVE-2026-65624.html"
        },
        {
          "tags": [
            "related"
          ],
          "url": "https://osv.dev/vulnerability/EEF-CVE-2026-65624"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/ninenines/cowboy/commit/3a34d8c1cfd94326466aa16a9017236691dc9c55"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
    "assignerShortName": "EEF",
    "cveId": "CVE-2026-65624",
    "datePublished": "2026-07-28T10:01:01.811Z",
    "dateReserved": "2026-07-22T13:55:59.401Z",
    "dateUpdated": "2026-07-28T12:39:27.067Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.

Action not permitted

RHSA-2026:47236

CVE-2026-59248 (GCVE-0-2026-59248)

CVE-2026-65624 (GCVE-0-2026-65624)

Tags

Sightings

Nomenclature