{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-83615", "tracking": { "current_release_date": "2026-10-16T12:22:58.449424Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-83615", "initial_release_date": "2026-09-01T15:34:50.936578Z", "revision_history": [ { "date": "2026-09-01T15:34:50.936578Z", "number": "1", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (7).| CWES updated (1)." }, { "date": "2026-09-01T15:34:52.210718Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-09-01T15:38:55.825594Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| Products connected (2).| References created (7).| CWES updated (1)." }, { "date": "2026-09-01T15:38:57.661744Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-09-02T00:28:38.112493Z", "number": "5", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (16).| Product Identifiers created (8).| References created (9).| CWES updated (1).| Vendor_assessment created." }, { "date": "2026-09-02T00:28:45.028234Z", "number": "6", "summary": "NCSC Score updated." }, { "date": "2026-09-02T02:03:42.158920Z", "number": "7", "summary": "Source created.| CVE status created. (valid)| Description created for source.| Products connected (1)." }, { "date": "2026-09-02T02:03:43.065032Z", "number": "8", "summary": "NCSC Score updated." }, { "date": "2026-09-02T07:12:23.410869Z", "number": "9", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (34).| References created (9).| CWES updated (1)." }, { "date": "2026-09-02T07:12:36.584055Z", "number": "10", "summary": "NCSC Score updated." }, { "date": "2026-09-03T14:08:26.092061Z", "number": "11", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-03T14:08:40.676419Z", "number": "12", "summary": "NCSC Score updated." }, { "date": "2026-09-04T12:46:27.336354Z", "number": "13", "summary": "Unknown change." }, { "date": "2026-09-07T07:56:15.970299Z", "number": "14", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-07T12:23:00.201189Z", "number": "15", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CWES updated (1)." }, { "date": "2026-09-08T20:05:43.814293Z", "number": "16", "summary": "Source connected.| CVE status created. (valid)| News created (1)." }, { "date": "2026-09-08T20:05:45.273978Z", "number": "17", "summary": "NCSC Score updated." }, { "date": "2026-09-09T06:40:03.463358Z", "number": "18", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (9).| CWES updated (1)." }, { "date": "2026-09-09T06:40:07.745434Z", "number": "19", "summary": "NCSC Score updated." }, { "date": "2026-09-09T12:22:03.098962Z", "number": "20", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-09T12:22:34.048224Z", "number": "21", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (3).| References created (8).| CWES updated (1)." }, { "date": "2026-09-09T12:22:36.168665Z", "number": "22", "summary": "NCSC Score updated." }, { "date": "2026-09-09T12:53:18.504274Z", "number": "23", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-09T12:53:21.128356Z", "number": "24", "summary": "NCSC Score updated." }, { "date": "2026-09-09T12:53:35.607302Z", "number": "25", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-09T12:53:46.032352Z", "number": "26", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-09T12:53:54.983544Z", "number": "27", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-09T12:54:13.260814Z", "number": "28", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-09T12:54:24.716915Z", "number": "29", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-09T15:17:15.990483Z", "number": "30", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-09T15:17:17.264565Z", "number": "31", "summary": "NCSC Score updated." }, { "date": "2026-09-22T00:39:00.859752Z", "number": "32", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (4).| Product Remediations created (6).| References created (47).| CWES updated (1)." }, { "date": "2026-09-22T00:39:04.874557Z", "number": "33", "summary": "NCSC Score updated." }, { "date": "2026-09-24T15:20:01.567816Z", "number": "34", "summary": "EPSS updated." }, { "date": "2026-09-24T15:20:06.757398Z", "number": "35", "summary": "NCSC Score updated." }, { "date": "2026-09-28T11:33:14.131060Z", "number": "36", "summary": "Source connected.| CVE status created. (valid)| Products connected (2).| References created (3)." }, { "date": "2026-09-28T11:33:17.173796Z", "number": "37", "summary": "NCSC Score updated." }, { "date": "2026-09-29T12:20:44.001475Z", "number": "38", "summary": "Source connected.| CVE status created. (valid)| Products connected (3).| References created (21)." }, { "date": "2026-09-29T12:50:46.549156Z", "number": "39", "summary": "NCSC Score updated." }, { "date": "2026-09-29T15:26:04.849102Z", "number": "40", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-30T18:43:01.249530Z", "number": "41", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (2).| Product Remediations created (1)." }, { "date": "2026-09-30T18:43:09.450616Z", "number": "42", "summary": "NCSC Score updated." }, { "date": "2026-10-03T00:43:13.502611Z", "number": "43", "summary": "Description removed for source.| Description created for source.| Products connected (2).| Product Remediations created (1).| Products removed (2)." }, { "date": "2026-10-03T00:43:21.509964Z", "number": "44", "summary": "NCSC Score updated." }, { "date": "2026-10-05T11:29:57.956538Z", "number": "45", "summary": "Products connected (1).| References created (1)." }, { "date": "2026-10-12T08:07:59.209602Z", "number": "46", "summary": "Products connected (1).| References created (1)." }, { "date": "2026-10-12T08:08:00.878542Z", "number": "47", "summary": "NCSC Score updated." }, { "date": "2026-10-16T06:19:43.149471Z", "number": "48", "summary": "Source connected.| CVE status created. (valid)" }, { "date": "2026-10-16T06:19:53.837521Z", "number": "49", "summary": "NCSC Score updated." }, { "date": "2026-10-16T12:22:28.422898Z", "number": "50", "summary": "Products connected (1).| References created (1)." }, { "date": "2026-10-16T12:22:51.685730Z", "number": "51", "summary": "NCSC Score updated." } ], "status": "interim", "version": "51" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0.7.0|<0.8.15", "product": { "name": "vers:unknown/>=0.7.0|<0.8.15", "product_id": "CSAFPID-9111866" } }, { "category": "product_version_range", "name": "vers:unknown/>=0.9.0|<0.9.12", "product": { "name": "vers:unknown/>=0.9.0|<0.9.12", "product_id": "CSAFPID-9111867" } } ], "category": "product_name", "name": "@xmldom/xmldom" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/0.7.0", "product": { "name": "vers:unknown/0.7.0", "product_id": "CSAFPID-3437183" } }, { "category": "product_version_range", "name": "vers:unknown/0.7.0+scoped", "product": { "name": "vers:unknown/0.7.0+scoped", "product_id": "CSAFPID-3437184" } }, { "category": "product_version_range", "name": "vers:unknown/0.7.0+unscoped", "product": { "name": "vers:unknown/0.7.0+unscoped", "product_id": "CSAFPID-3437185" } }, { "category": "product_version_range", "name": "vers:unknown/0.7.1", "product": { "name": "vers:unknown/0.7.1", "product_id": "CSAFPID-3437186" } }, { "category": "product_version_range", "name": "vers:unknown/0.7.2", "product": { "name": "vers:unknown/0.7.2", "product_id": "CSAFPID-3437187" } }, { "category": "product_version_range", "name": "vers:unknown/0.7.3", "product": { "name": "vers:unknown/0.7.3", "product_id": "CSAFPID-3437188" } }, { "category": "product_version_range", "name": "vers:unknown/0.8.0", "product": { "name": "vers:unknown/0.8.0", "product_id": "CSAFPID-5037326" } }, { "category": "product_version_range", "name": "vers:unknown/0.8.1", "product": { "name": "vers:unknown/0.8.1", "product_id": "CSAFPID-5037327" } }, { "category": "product_version_range", "name": "vers:unknown/0.8.10", "product": { "name": "vers:unknown/0.8.10", "product_id": "CSAFPID-6245827" } }, { "category": "product_version_range", "name": "vers:unknown/0.8.11", "product": { "name": "vers:unknown/0.8.11", "product_id": "CSAFPID-6245828" } }, { "category": "product_version_range", "name": "vers:unknown/0.8.12", "product": { "name": "vers:unknown/0.8.12", "product_id": "CSAFPID-8740608" } }, { "category": "product_version_range", "name": "vers:unknown/0.8.13", "product": { "name": "vers:unknown/0.8.13", "product_id": "CSAFPID-8932784" } }, { "category": "product_version_range", "name": "vers:unknown/0.8.14", "product": { "name": "vers:unknown/0.8.14", "product_id": "CSAFPID-9104868" } }, { "category": "product_version_range", "name": "vers:unknown/0.8.2", "product": { "name": "vers:unknown/0.8.2", "product_id": "CSAFPID-5037328" } }, { "category": "product_version_range", "name": "vers:unknown/0.8.3", "product": { "name": "vers:unknown/0.8.3", "product_id": "CSAFPID-5037329" } }, { "category": "product_version_range", "name": "vers:unknown/0.8.4", "product": { "name": "vers:unknown/0.8.4", "product_id": "CSAFPID-6245821" } }, { "category": "product_version_range", "name": "vers:unknown/0.8.5", "product": { "name": "vers:unknown/0.8.5", "product_id": "CSAFPID-6245822" } }, { "category": "product_version_range", "name": "vers:unknown/0.8.6", "product": { "name": "vers:unknown/0.8.6", "product_id": "CSAFPID-6245823" } }, { "category": "product_version_range", "name": "vers:unknown/0.8.7", "product": { "name": "vers:unknown/0.8.7", "product_id": "CSAFPID-6245824" } }, { "category": "product_version_range", "name": "vers:unknown/0.8.8", "product": { "name": "vers:unknown/0.8.8", "product_id": "CSAFPID-6245825" } }, { "category": "product_version_range", "name": "vers:unknown/0.8.9", "product": { "name": "vers:unknown/0.8.9", "product_id": "CSAFPID-6245826" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.0", "product": { "name": "vers:unknown/0.9.0", "product_id": "CSAFPID-6245829" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.1", "product": { "name": "vers:unknown/0.9.1", "product_id": "CSAFPID-6245830" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.10", "product": { "name": "vers:unknown/0.9.10", "product_id": "CSAFPID-9104869" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.11", "product": { "name": "vers:unknown/0.9.11", "product_id": "CSAFPID-9104870" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.2", "product": { "name": "vers:unknown/0.9.2", "product_id": "CSAFPID-6245831" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.3", "product": { "name": "vers:unknown/0.9.3", "product_id": "CSAFPID-6245832" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.4", "product": { "name": "vers:unknown/0.9.4", "product_id": "CSAFPID-6245833" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.5", "product": { "name": "vers:unknown/0.9.5", "product_id": "CSAFPID-6245834" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.6", "product": { "name": "vers:unknown/0.9.6", "product_id": "CSAFPID-6245835" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.7", "product": { "name": "vers:unknown/0.9.7", "product_id": "CSAFPID-6245836" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.8", "product": { "name": "vers:unknown/0.9.8", "product_id": "CSAFPID-6245837" } }, { "category": "product_version_range", "name": "vers:unknown/0.9.9", "product": { "name": "vers:unknown/0.9.9", "product_id": "CSAFPID-8740607" } }, { "category": "product_version_range", "name": "vers:unknown/>=0.1.5|<=0.6.0", "product": { "name": "vers:unknown/>=0.1.5|<=0.6.0", "product_id": "CSAFPID-9104922" } }, { "category": "product_version_range", "name": "vers:unknown/v0.7.0", "product": { "name": "vers:unknown/v0.7.0", "product_id": "CSAFPID-3437191" } } ], "category": "product_name", "name": "xmldom" } ], "category": "vendor", "name": "xmldom" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<12.0.12.30", "product": { "name": "vers:unknown/<12.0.12.30", "product_id": "CSAFPID-9477920" } }, { "category": "product_version_range", "name": "vers:unknown/<13.0.9.0", "product": { "name": "vers:unknown/<13.0.9.0", "product_id": "CSAFPID-9477921" } } ], "category": "product_name", "name": "App Connect Enterprise" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<10.5.0.23", "product": { "name": "vers:unknown/<10.5.0.23", "product_id": "CSAFPID-9485661" } }, { "category": "product_version_range", "name": "vers:unknown/<10.6.0.11", "product": { "name": "vers:unknown/<10.6.0.11", "product_id": "CSAFPID-9485662" } }, { "category": "product_version_range", "name": "vers:unknown/<11.0.0.3", "product": { "name": "vers:unknown/<11.0.0.3", "product_id": "CSAFPID-9485663" } } ], "category": "product_name", "name": "DataPower Gateway" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1337768", "product_identification_helper": { "cpe": "cpe:/a:ibm:business_automation_workflow:-" } } } ], "category": "product_name", "name": "IBM Business Automation Workflow" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-5211181", "product_identification_helper": { "cpe": "cpe:/a:ibm:websphere_service_registry_and_repository:-" } } } ], "category": "product_name", "name": "IBM WebSphere Service Registry and Repository" } ], "category": "vendor", "name": "IBM" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<5.7.1", "product": { "name": "vers:unknown/<5.7.1", "product_id": "CSAFPID-9512266" } }, { "category": "product_version_range", "name": "vers:unknown/>=5.7.1", "product": { "name": "vers:unknown/>=5.7.1", "product_id": "CSAFPID-9512267" } } ], "category": "product_name", "name": "HPE Telco Service Orchestrator" } ], "category": "vendor", "name": "HPE" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1317177", "product_identification_helper": { "cpe": "cpe:/o:oracle:linux:-" } } } ], "category": "product_name", "name": "Oracle Linux" } ], "category": "vendor", "name": "Oracle" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-5940623", "product_identification_helper": { "cpe": "cpe:/a:redhat:podman_desktop:1" } } } ], "category": "product_name", "name": "Red Hat Build of Podman Desktop" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-1508265", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhdh:1" } } } ], "category": "product_name", "name": "Red Hat Developer Hub" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1.9", "product": { "name": "vers:rpm/1.9", "product_id": "CSAFPID-5760320", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhdh:1.9::el9" } } } ], "category": "product_name", "name": "Red Hat Developer Hub 1.9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1789554285", "product": { "name": "vers:oci/1789554285", "product_id": "CSAFPID-9368042", "product_identification_helper": { "purl": "pkg:oci/rhdh-hub-rhel9@sha256%3Aea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2?arch=amd64&repository_url=registry.redhat.io/rhdh/rhdh-hub-rhel9&tag=1789554285" } } }, { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1508266" } } ], "category": "product_name", "name": "rhdh-hub-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1789558887", "product": { "name": "vers:oci/1789558887", "product_id": "CSAFPID-9368043", "product_identification_helper": { "purl": "pkg:oci/rhdh-operator-bundle@sha256%3A1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc?arch=amd64&repository_url=registry.redhat.io/rhdh/rhdh-operator-bundle&tag=1789558887" } } } ], "category": "product_name", "name": "rhdh-operator-bundle" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1789552931", "product": { "name": "vers:oci/1789552931", "product_id": "CSAFPID-9368044", "product_identification_helper": { "purl": "pkg:oci/rhdh-rhel9-operator@sha256%3A036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff?arch=amd64&repository_url=registry.redhat.io/rhdh/rhdh-rhel9-operator&tag=1789552931" } } } ], "category": "product_name", "name": "rhdh-rhel9-operator" } ], "category": "product_family", "name": "Red Hat Developer Hub" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/10", "product": { "name": "vers:rpm/10", "product_id": "CSAFPID-2858634", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:10" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 10" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/8", "product": { "name": "vers:rpm/8", "product_id": "CSAFPID-1439317", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:8" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/9", "product": { "name": "vers:rpm/9", "product_id": "CSAFPID-1439319", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:9" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/7", "product": { "name": "vers:rpm/7", "product_id": "CSAFPID-1439294", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_fuse:7" } } } ], "category": "product_name", "name": "Red Hat Fuse 7" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1439279", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_ai" } } } ], "category": "product_name", "name": "Red Hat OpenShift AI (RHOAI)" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/4", "product": { "name": "vers:rpm/4", "product_id": "CSAFPID-1439328", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4" } } } ], "category": "product_name", "name": "Red Hat OpenShift Container Platform 4" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2868420" } } ], "category": "product_name", "name": "grafana" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 10" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1663145" } } ], "category": "product_name", "name": "grafana" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 8" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1496261" } } ], "category": "product_name", "name": "grafana" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 9" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5811359" } } ], "category": "product_name", "name": "odh-mlflow-rhel9" } ], "category": "product_family", "name": "Red Hat OpenShift AI (RHOAI)" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1441120" } } ], "category": "product_name", "name": "ose-console" } ], "category": "product_family", "name": "Red Hat OpenShift Container Platform 4" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-6239273" } } ], "category": "product_name", "name": "rh-podman-desktop.git" } ], "category": "product_family", "name": "Red Hat Build of Podman Desktop" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-9105480" } } ], "category": "product_name", "name": "xmldom" } ], "category": "product_family", "name": "Red Hat Fuse 7" } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:deb/unknown", "product": { "name": "vers:deb/unknown", "product_id": "CSAFPID-5991503" } } ], "category": "product_name", "name": "node-xmldom" } ], "category": "product_family", "name": "bookworm" } ], "category": "vendor", "name": "Debian" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0.7.0|<0.8.15", "product": { "name": "vers:unknown/>=0.7.0|<0.8.15", "product_id": "CSAFPID-9104839" } }, { "category": "product_version_range", "name": "vers:unknown/>=0.9.0|<0.9.12", "product": { "name": "vers:unknown/>=0.9.0|<0.9.12", "product_id": "CSAFPID-9104838" } } ], "category": "product_name", "name": "xmldom" } ], "category": "vendor", "name": "@xmldom" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-83615", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "CSAFPID-9368043", "CSAFPID-9368044" ] } ], "notes": [ { "category": "description", "text": "xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom versions 0.1.5 through 0.6.0, appendElement in lib/sax.js uses _copy to clone the complete currentNSMap for each nested element that declares a new namespace prefix. Keeping every ancestor map live on the parse stack creates quadratic peak namespace-map storage, so a small highly compressible XML document can exhaust the process heap before application validation. This issue is fixed in @xmldom/xmldom versions 0.8.15 and 0.9.12; no fixed version is available for xmldom.", "title": "osvgit - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-83615.json?alt=media" }, { "category": "description", "text": "## Summary\n\nWhen an element declares a namespace prefix, xmldom copies the entire in-scope namespace map\ninto a fresh object and keeps that copy on the element while it is open on the parse stack. A\ncrafted document that nests N elements, each declaring one unique prefix, therefore drives the\nparser to hold on the order of N(N+1)/2 = **O(N²) namespace-map entries at its peak**, so a small,\nhighly compressible input exhausts the heap. Parsing runs under default options on untrusted,\nnetwork-delivered XML, so a sub-megabyte payload can OOM-crash the process before any\napplication-level validation runs — an unauthenticated denial of service.\n\n## Details\n\n`appendElement` performs the copy: `_copy` clones the current namespace map into a fresh object for\neach prefix-declaring element, and the copy is retained on that element's parse-stack entry:\n\n```js\nif (localNSMap == null) {\n localNSMap = Object.create(null);\n _copy(currentNSMap, (currentNSMap = Object.create(null))); // full copy of all ancestor prefixes\n}\ncurrentNSMap[nsPrefix] = localNSMap[nsPrefix] = value;\n...\nel.currentNSMap = currentNSMap; // retained while the element is open on the parse stack\n```\n\nhttps://github.com/xmldom/xmldom/blob/08a22d78e4bc50f12ce9f5090b8d96ee6031ac7b/lib/sax.js#L467-L540\n\nThe copies stack: the element at depth `i` copies a map of size ~`i`, and every ancestor stays live\non the parse stack until it closes, so at the deepest point Σ`i` namespace entries are held at once.\nThat peak is transient — the completed DOM retains only O(N), one small namespace map per node — but\nit is reached during parsing, which is what OOM-crashes the process.\n\n## Proof of Concept\n\nA minimal document — N nested elements, each declaring one unique namespace prefix (no SAML wrapper\nneeded):\n\n```js\nconst { DOMParser } = require('@xmldom/xmldom');\n\nfunction build(n) {\n let open = '', close = '';\n for (let i = 0; i < n; i++) { open += ``; close = '' + close; }\n return `${open}${close}`; // .........\n}\n\nfor (const n of [2000, 4000, 8000, 16000]) {\n const src = build(n);\n new DOMParser().parseFromString(src, 'text/xml'); // peak memory ~ O(n^2)\n console.log(n, (src.length / 1024).toFixed(0) + ' KB in', (process.resourceUsage().maxRSS / 1024).toFixed(0) + ' MB peak RSS');\n}\n```\n\nMeasured on Node.js v24 (peak RSS ~quadruples per doubling of depth; absolute numbers vary by host):\n\n| depth | input | peak RSS |\n| -----: | ------: | ------------------------------- |\n| 2,000 | 56 KB | 266 MB |\n| 4,000 | 115 KB | 622 MB |\n| 8,000 | 232 KB | 1.9 GB |\n| 16,000 | ~470 KB | OOM crash (default ~4 GB heap) |\n\nAbout 470 KB of trivially-generated, highly-compressible input crashes a default Node.js process;\nlarger depths scale as O(N²) into the tens of GB, crashing larger hosts (as first measured by the\nreporter with a SAML-shaped payload).\n\n## Impact\n\nUnauthenticated denial of service against any service that parses attacker-influenced XML with\nxmldom under default options. A single sub-megabyte request drives multi-gigabyte peak memory and\ncan OOM-crash the process before any application-level validation (e.g. schema checks or a SAML\nsignature verification) runs. The payload is a plain namespace-nesting document and highly\ncompressible, so it is effective over compressed transports (e.g. an HTTP-Redirect / DEFLATE\nbinding, not only POST bindings).\n\n## Severity note\n\nThe CVSS 4.0 vector scores availability only (`VC:N/VI:N/VA:H`): the flaw neither discloses nor\nalters data, it exhausts the heap. `VA:H` is justified because a single unauthenticated,\nnetwork-delivered request (`AV:N/PR:N/UI:N`) of trivial complexity (`AC:L/AT:N`) drives the parser\nto multi-gigabyte peak memory and OOM-crashes the process before any application-level logic runs —\na full loss of availability for the affected service.\n\n## Fix Applied\n\nInherit each element's in-scope namespace map through the prototype chain instead of copying it for every prefix-declaring element, so a deeply namespaced document holds O(N) namespace entries instead of O(N²) at peak. Behavior-preserving: serialized output is byte-identical, only the memory cost drops. Non-breaking and independent of `requireWellFormed`; ships on both maintained versions.", "title": "osvnpm - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/npm%2FGHSA-965w-775f-mr7g.json?alt=media" }, { "category": "description", "text": "xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom versions 0.1.5 through 0.6.0, appendElement in lib/sax.js uses _copy to clone the complete currentNSMap for each nested element that declares a new namespace prefix. Keeping every ancestor map live on the parse stack creates quadratic peak namespace-map storage, so a small highly compressible XML document can exhaust the process heap before application validation. This issue is fixed in @xmldom/xmldom versions 0.8.15 and 0.9.12; no fixed version is available for xmldom.", "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-83615" }, { "category": "description", "text": "A flaw was found in xmldom, a JavaScript library for parsing XML documents. A remote attacker could exploit this vulnerability by providing a specially crafted XML document. When processed, this document would cause the library to consume an excessive amount of memory, leading to the application running out of resources and becoming unavailable, a condition known as Denial of Service (DoS).", "title": "redhat - https://access.redhat.com/security/cve/CVE-2026-83615" }, { "category": "description", "text": "xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom versions 0.1.5 through 0.6.0, appendElement in lib/sax.js uses _copy to clone the complete currentNSMap for each nested element that declares a new namespace prefix. Keeping every ancestor map live on the parse stack creates quadratic peak namespace-map storage, so a small highly compressible XML document can exhaust the process heap before application validation. This issue is fixed in @xmldom/xmldom versions 0.8.15 and 0.9.12; no fixed version is available for xmldom.", "title": "debian - https://security-tracker.debian.org/tracker/CVE-2026-83615" }, { "category": "description", "text": "Potential security vulnerabilities in HPE Telco Service Orchestrator software that may lead to memory exhaustion, uncontrolled resource consumption, access restriction bypass, and unauthorized data injection.", "title": "hpe - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05155en_us&docLocale=en_US" }, { "category": "description", "text": "xmldom: Quadratic-memory consumption", "title": "microsoft - https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Sep" }, { "category": "description", "text": "## Summary\n\nWhen an element declares a namespace prefix, xmldom copies the entire in-scope namespace map\ninto a fresh object and keeps that copy on the element while it is open on the parse stack. A\ncrafted document that nests N elements, each declaring one unique prefix, therefore drives the\nparser to hold on the order of N(N+1)/2 = **O(N²) namespace-map entries at its peak**, so a small,\nhighly compressible input exhausts the heap. Parsing runs under default options on untrusted,\nnetwork-delivered XML, so a sub-megabyte payload can OOM-crash the process before any\napplication-level validation runs — an unauthenticated denial of service.\n\n## Details\n\n`appendElement` performs the copy: `_copy` clones the current namespace map into a fresh object for\neach prefix-declaring element, and the copy is retained on that element's parse-stack entry:\n\n```js\nif (localNSMap == null) {\n localNSMap = Object.create(null);\n _copy(currentNSMap, (currentNSMap = Object.create(null))); // full copy of all ancestor prefixes\n}\ncurrentNSMap[nsPrefix] = localNSMap[nsPrefix] = value;\n...\nel.currentNSMap = currentNSMap; // retained while the element is open on the parse stack\n```\n\nhttps://github.com/xmldom/xmldom/blob/08a22d78e4bc50f12ce9f5090b8d96ee6031ac7b/lib/sax.js#L467-L540\n\nThe copies stack: the element at depth `i` copies a map of size ~`i`, and every ancestor stays live\non the parse stack until it closes, so at the deepest point Σ`i` namespace entries are held at once.\nThat peak is transient — the completed DOM retains only O(N), one small namespace map per node — but\nit is reached during parsing, which is what OOM-crashes the process.\n\n## Proof of Concept\n\nA minimal document — N nested elements, each declaring one unique namespace prefix (no SAML wrapper\nneeded):\n\n```js\nconst { DOMParser } = require('@xmldom/xmldom');\n\nfunction build(n) {\n let open = '', close = '';\n for (let i = 0; i < n; i++) { open += ``; close = '' + close; }\n return `${open}${close}`; // .........\n}\n\nfor (const n of [2000, 4000, 8000, 16000]) {\n const src = build(n);\n new DOMParser().parseFromString(src, 'text/xml'); // peak memory ~ O(n^2)\n console.log(n, (src.length / 1024).toFixed(0) + ' KB in', (process.resourceUsage().maxRSS / 1024).toFixed(0) + ' MB peak RSS');\n}\n```\n\nMeasured on Node.js v24 (peak RSS ~quadruples per doubling of depth; absolute numbers vary by host):\n\n| depth | input | peak RSS |\n| -----: | ------: | ------------------------------- |\n| 2,000 | 56 KB | 266 MB |\n| 4,000 | 115 KB | 622 MB |\n| 8,000 | 232 KB | 1.9 GB |\n| 16,000 | ~470 KB | OOM crash (default ~4 GB heap) |\n\nAbout 470 KB of trivially-generated, highly-compressible input crashes a default Node.js process;\nlarger depths scale as O(N²) into the tens of GB, crashing larger hosts (as first measured by the\nreporter with a SAML-shaped payload).\n\n## Impact\n\nUnauthenticated denial of service against any service that parses attacker-influenced XML with\nxmldom under default options. A single sub-megabyte request drives multi-gigabyte peak memory and\ncan OOM-crash the process before any application-level validation (e.g. schema checks or a SAML\nsignature verification) runs. The payload is a plain namespace-nesting document and highly\ncompressible, so it is effective over compressed transports (e.g. an HTTP-Redirect / DEFLATE\nbinding, not only POST bindings).\n\n## Severity note\n\nThe CVSS 4.0 vector scores availability only (`VC:N/VI:N/VA:H`): the flaw neither discloses nor\nalters data, it exhausts the heap. `VA:H` is justified because a single unauthenticated,\nnetwork-delivered request (`AV:N/PR:N/UI:N`) of trivial complexity (`AC:L/AT:N`) drives the parser\nto multi-gigabyte peak memory and OOM-crashes the process before any application-level logic runs —\na full loss of availability for the affected service.\n\n## Fix Applied\n\nInherit each element's in-scope namespace map through the prototype chain instead of copying it for every prefix-declaring element, so a deeply namespaced document holds O(N) namespace entries instead of O(N²) at peak. Behavior-preserving: serialized output is byte-identical, only the memory cost drops. Non-breaking and independent of `requireWellFormed`; ships on both maintained versions.", "title": "github - https://github.com/advisories/GHSA-965w-775f-mr7g" }, { "category": "description", "text": "A flaw was found in xmldom, a JavaScript library for parsing XML documents. A remote attacker could exploit this vulnerability by providing a specially crafted XML document. When processed, this document would cause the library to consume an excessive amount of memory, leading to the application running out of resources and becoming unavailable, a condition known as Denial of Service (DoS).", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:69248" }, { "category": "description", "text": "xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom versions 0.1.5 through 0.6.0, appendElement in lib/sax.js uses _copy to clone the complete currentNSMap for each nested element that declares a new namespace prefix. Keeping every ancestor map live on the parse stack creates quadratic peak namespace-map storage, so a small highly compressible XML document can exhaust the process heap before application validation. This issue is fixed in @xmldom/xmldom versions 0.8.15 and 0.9.12; no fixed version is available for xmldom.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-83615" }, { "category": "other", "text": "0.0059", "title": "EPSS" }, { "category": "other", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "title": "CVSSV4" }, { "category": "other", "text": "8.7", "title": "CVSSV4 base score" }, { "category": "other", "text": "4.9", "title": "NCSC Score" }, { "category": "other", "text": "There is news data available from source Bleepingcomputer, Is related to an uncommon product source, VENDOR FIX as product remediation category", "title": "NCSC Score top increasing factors" }, { "category": "other", "text": "The value of the most recent CVSS (V3) score, There is product_remediation data available from source Redhat", "title": "NCSC Score top decreasing factors" }, { "category": "details", "text": "Severity: 3\n", "title": "Vendor assessment" } ], "product_status": { "fixed": [ "CSAFPID-9368042", "CSAFPID-9512267" ], "known_affected": [ "CSAFPID-1439279", "CSAFPID-1439294", "CSAFPID-1439317", "CSAFPID-1439319", "CSAFPID-1439328", "CSAFPID-1441120", "CSAFPID-1496261", "CSAFPID-1508265", "CSAFPID-1508266", "CSAFPID-1663145", "CSAFPID-2858634", "CSAFPID-2868420", "CSAFPID-5811359", "CSAFPID-5940623", "CSAFPID-6239273", "CSAFPID-9105480", "CSAFPID-5991503", "CSAFPID-9104839", "CSAFPID-9104838", "CSAFPID-9104922", "CSAFPID-9477920", "CSAFPID-9477921", "CSAFPID-9485661", "CSAFPID-9485662", "CSAFPID-9485663", "CSAFPID-9512266", "CSAFPID-1337768", "CSAFPID-3437183", "CSAFPID-3437184", "CSAFPID-3437185", "CSAFPID-3437186", "CSAFPID-3437187", "CSAFPID-3437188", "CSAFPID-5037326", "CSAFPID-5037327", "CSAFPID-6245827", "CSAFPID-6245828", "CSAFPID-8740608", "CSAFPID-8932784", "CSAFPID-9104868", "CSAFPID-5037328", "CSAFPID-5037329", "CSAFPID-6245821", "CSAFPID-6245822", "CSAFPID-6245823", "CSAFPID-6245824", "CSAFPID-6245825", "CSAFPID-6245826", "CSAFPID-6245829", "CSAFPID-6245830", "CSAFPID-9104869", "CSAFPID-9104870", "CSAFPID-6245831", "CSAFPID-6245832", "CSAFPID-6245833", "CSAFPID-6245834", "CSAFPID-6245835", "CSAFPID-6245836", "CSAFPID-6245837", "CSAFPID-8740607", "CSAFPID-3437191", "CSAFPID-1317177", "CSAFPID-9111866", "CSAFPID-9111867", "CSAFPID-5211181" ], "known_not_affected": [ "CSAFPID-9368043", "CSAFPID-9368044" ] }, "references": [ { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-83615.json?alt=media" }, { "category": "external", "summary": "Source - ncscclear", "url": "https://vulnerabilities.ncsc.nl/manual/CVE-2026-83615" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-83615" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-83615" }, { "category": "external", "summary": "Source - debian", "url": "https://security-tracker.debian.org/tracker/CVE-2026-83615" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss" }, { "category": "external", "summary": "Source - microsoft", "url": "https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Sep" }, { "category": "external", "summary": "Source - bleepingcomputer", "url": "https://www.bleepingcomputer.com/news/microsoft/microsoft-september-2026-patch-tuesday-fixes-966-flaws-2-zero-days/" }, { "category": "external", "summary": "Source - github", "url": "https://github.com/advisories/GHSA-965w-775f-mr7g" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:69248" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83615" }, { "category": "external", "summary": "Source - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3596.json" }, { "category": "external", "summary": "Source - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, { "category": "external", "summary": "Source - hpe", "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05155en_us&docLocale=en_US" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/npm%2FGHSA-965w-775f-mr7g.json?alt=media" }, { "category": "external", "summary": "Source - ncscclear", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0431" }, { "category": "external", "summary": "News - bleepingcomputer", "url": "https://www.bleepingcomputer.com/news/microsoft/microsoft-september-2026-patch-tuesday-fixes-966-flaws-2-zero-days/" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/xmldom/xmldom/commit/954370f58c046223faf95ba77efcbc8ce014409d" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/xmldom/xmldom/commit/dabffe884e864eeecb1f515c716f875e1bc47ec1" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/xmldom/xmldom/pull/1071" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/xmldom/xmldom/pull/1072" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/xmldom/xmldom/releases/tag/0.8.15" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/xmldom/xmldom/releases/tag/0.9.12" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/xmldom/xmldom/security/advisories/GHSA-965w-775f-mr7g" }, { "category": "external", "summary": "Reference - github; osv; redhat", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-83615" }, { "category": "external", "summary": "Reference - redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83615" }, { "category": "external", "summary": "Reference - github", "url": "https://github.com/advisories/GHSA-965w-775f-mr7g" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:69248" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-19534" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-33818" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-54272" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-55553" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-56853" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-56858" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-56859" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-56860" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-56862" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-67214" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-67312" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-67422" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-69152" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-69192" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-73086" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-75899" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-75931" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-75975" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-76172" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-83605" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-83607" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-83608" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-83613" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-83614" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-83615" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-83616" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-83619" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-84292" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-84394" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-84961" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/updates/classification/" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2526843" }, { "category": "external", "summary": "Reference - redhat", "url": "https://catalog.redhat.com/search?gs&searchType=containers&q=rhdh" }, { "category": "external", "summary": "Reference - redhat", "url": "https://developers.redhat.com/rhdh/overview" }, { "category": "external", "summary": "Reference - redhat", "url": "https://docs.redhat.com/en/documentation/red_hat_developer_hub" }, { "category": "external", "summary": "Reference - redhat", "url": "https://issues.redhat.com/browse/RHDHBUGS-3741" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69248.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "http://linux.oracle.com/errata/ELSA-2026-74085.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3596.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3596" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289740" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7290698" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7292706" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3623" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289775" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289776" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289778" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289779" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289780" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289783" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289785" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289787" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289788" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289789" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289790" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289791" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289792" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289794" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289795" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289796" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289797" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289798" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289800" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83615.json" } ], "remediations": [ { "category": "vendor_fix", "details": "For more about Red Hat Developer Hub, see References links", "product_ids": [ "CSAFPID-5760320", "CSAFPID-9368042" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:69248" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids": [ "CSAFPID-5760320", "CSAFPID-9368042", "CSAFPID-9368043", "CSAFPID-9368044" ] }, { "category": "vendor_fix", "details": "Update to HPE Telco Service Orchestrator v5.7.1 or later.", "product_ids": [ "CSAFPID-9512266" ] } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1317177", "CSAFPID-1337768", "CSAFPID-1439279", "CSAFPID-1439294", "CSAFPID-1439317", "CSAFPID-1439319", "CSAFPID-1439328", "CSAFPID-1441120", "CSAFPID-1496261", "CSAFPID-1508265", "CSAFPID-1508266", "CSAFPID-1663145", "CSAFPID-2858634", "CSAFPID-2868420", "CSAFPID-3437183", "CSAFPID-3437184", "CSAFPID-3437185", "CSAFPID-3437186", "CSAFPID-3437187", "CSAFPID-3437188", "CSAFPID-3437191", "CSAFPID-5037326", "CSAFPID-5037327", "CSAFPID-5037328", "CSAFPID-5037329", "CSAFPID-5211181", "CSAFPID-5811359", "CSAFPID-5940623", "CSAFPID-5991503", "CSAFPID-6239273", "CSAFPID-6245821", "CSAFPID-6245822", "CSAFPID-6245823", "CSAFPID-6245824", "CSAFPID-6245825", "CSAFPID-6245826", "CSAFPID-6245827", "CSAFPID-6245828", "CSAFPID-6245829", "CSAFPID-6245830", "CSAFPID-6245831", "CSAFPID-6245832", "CSAFPID-6245833", "CSAFPID-6245834", "CSAFPID-6245835", "CSAFPID-6245836", "CSAFPID-6245837", "CSAFPID-8740607", "CSAFPID-8740608", "CSAFPID-8932784", "CSAFPID-9104838", "CSAFPID-9104839", "CSAFPID-9104868", "CSAFPID-9104869", "CSAFPID-9104870", "CSAFPID-9104922", "CSAFPID-9105480", "CSAFPID-9111866", "CSAFPID-9111867", "CSAFPID-9477920", "CSAFPID-9477921", "CSAFPID-9485661", "CSAFPID-9485662", "CSAFPID-9485663", "CSAFPID-9512266" ] } ], "title": "CVE-2026-83615" } ] }