Red Hat products listed as vulnerable in advisory AV26-1136
The November 9 notice covers many Red Hat products, mostly all versions, and tells admins to apply updates.
Stories per day · 30 days
2 RSS
Relatedred-hat4php3ansible2backport2openshift2amazon-linux1apache-kafka1canada1centos1compliance1enterprise-linux1eol1hardeval1keycloak1linux-kernel1mptcp1openscap1php2shell1
8 stories, newest first · one card per story
Stories tagged #rhel
Linux kernel TCP flaw CVE-2026-98432 allows remote root on MPTCP servers
Anthropic says an unreleased Claude model built a root exploit in about 53 minutes; no in-the-wild attacks are confirmed.
2
Red Hat lists RHEL and Kafka products in advisory AV26-1084
The October 26 notice names affected lines but gives no CVE identifiers, impact, or fixed RHEL versions.
Red Hat says default RHEL 7 PHP 5.4.16 is vulnerable to CVE-2026-109619
An October 23 note says updated RHSB-2026-013 and VEX data reverse an earlier PHP 5 risk claim.
Unofficial PHP2Shell fix backported to EL6 and EL7 PHP 5
The EL7 package becomes php-5.4.16-48.el7.php2shell.1; those Enterprise Linux releases will not get a vendor update.
Unofficial backports posted for EOL PHP RCE flaws
Source patches cover unauthenticated RCE CVE-2026-109618 and CVE-2026-109619, rated CVSS 4.0 9.2, where vendors will not fix.
Canadian Cyber Centre flags vulnerabilities across many Red Hat products
Advisory AV26-1061 lists every named product as affected in all versions and states no CVEs.
HardEval grades models on live RHEL 8 STIG remediation
Models emit Bash scripts run on a VM and scored by hidden OpenSCAP/OVAL checks; fourteen setups differ widely.