CVE-2026-12353

—

CVSS 3.1

5.3 medium

EPSS

<1%p37

Published

Jul 23, 2026 (Jul 23, 2026)

Modified

Jul 24, 2026

Description

An unauthenticated attacker could trigger an Out of Memory condition to crash the Java process for RHCS by repeatedly sending HTTP requests to the TLS endpoint. Depending on how the RHCS server is configured, a manual intervention to restart it may prove necessary.

Weakness: CWE-772
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.