{"schema_version":"1","data":[{"id":28829,"advisory_id":"875688f5-7592-42a9-b166-023fdcd06c0d","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-42784","source_published_at":"2026-09-16T16:56:11.638+00:00","published_at":"2026-10-25T07:49:02.552497+00:00","extraction_method":"structured","technologies":["confidential-compute-attestation","core-cve","red-hat-ansible-automation-platform-2","red-hat-ansible-automation-platform-2-6-for-rhel-9","red-hat-cost-management-on-premise-1","red-hat-enterprise-linux-10","red-hat-enterprise-linux-9","red-hat-hardened-images","red-hat-openshift-container-platform-4","red-hat-satellite-6","red-hat-trusted-profile-analyzer"],"cve_ids":["CVE-2026-42784"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion","summary":"A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.","evidence":"cve:CVE-2026-42784","products":[{"name":{"value":"Red Hat Ansible Automation Platform 2.6 for RHEL 9","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Cost Management On-Premise 1","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Confidential Compute Attestation","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Confidential Compute Attestation","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Confidential Compute Attestation","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Confidential Compute Attestation","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Confidential Compute Attestation","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Hardened Images","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Satellite 6","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Satellite 6","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Trusted Profile Analyzer","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Trusted Profile Analyzer","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-42784","aliases":["CVE-2026-42784"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.4,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"cpes":["cpe:/a:redhat:ansible_automation_platform:2.6::el9","cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.6 for RHEL 9","versions":[{"status":"unaffected","version":"0:0.1.34-1.el9ap","lessThan":"*","versionType":"rpm"}],"packageName":"python3.12-pysequoia","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:1.10.2.1-1.el10_2","lessThan":"*","versionType":"rpm"}],"packageName":"rust-rpm-sequoia","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:1.3.0.2-1.el10_2","lessThan":"*","versionType":"rpm"}],"packageName":"rust-sequoia-sqv","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:1.4.0.1-2.el10_2","lessThan":"*","versionType":"rpm"}],"packageName":"rust-sequoia-sq","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9::crb","cpe:/o:redhat:enterprise_linux:9::baseos"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:1.10.2.1-1.el9_8","lessThan":"*","versionType":"rpm"}],"packageName":"rust-rpm-sequoia","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:cost_management_on_premise:1::el10"],"vendor":"Red Hat","product":"Red Hat Cost Management On-Premise 1","versions":[{"status":"unaffected","version":"1791460851","lessThan":"*","versionType":"rpm"}],"packageName":"costmanagement/costmanagement-ui-rhel10","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"0.3.2-4.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"rust-podman-sequoia-main","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:confidential_compute_attestation:1"],"vendor":"Red Hat","product":"Confidential Compute Attestation","packageName":"openshift-sandboxed-containers/osc-monitor-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:confidential_compute_attestation:1"],"vendor":"Red Hat","product":"Confidential Compute Attestation","packageName":"openshift-sandboxed-containers/osc-operator-bundle","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:confidential_compute_attestation:1"],"vendor":"Red Hat","product":"Confidential Compute Attestation","packageName":"openshift-sandboxed-containers/osc-podvm-builder-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:confidential_compute_attestation:1"],"vendor":"Red Hat","product":"Confidential Compute Attestation","packageName":"openshift-sandboxed-containers/osc-podvm-payload-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:confidential_compute_attestation:1"],"vendor":"Red Hat","product":"Confidential Compute Attestation","packageName":"openshift-sandboxed-containers/osc-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/hub-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/hub-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"rust-podman-sequoia","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"trustee","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"trustee-guest-components","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"trustee-guest-components","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","packageName":"rust-rpm-sequoia","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"kata-containers","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:satellite:6"],"vendor":"Red Hat","product":"Red Hat Satellite 6","packageName":"python3.12-pysequoia","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:satellite:6"],"vendor":"Red Hat","product":"Red Hat Satellite 6","packageName":"python-pysequoia","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:trusted_profile_analyzer:2"],"vendor":"Red Hat","product":"Red Hat Trusted Profile Analyzer","packageName":"rhtpa/rhtpa-trustification-service-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:trusted_profile_analyzer:3"],"vendor":"Red Hat","product":"Red Hat Trusted Profile Analyzer","packageName":"rhtpa/rhtpa-rhel10","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"}],"modified":"2026-10-15T14:40:31.579Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:34160","https://access.redhat.com/errata/RHSA-2026:42078","https://access.redhat.com/errata/RHSA-2026:42902","https://access.redhat.com/errata/RHSA-2026:76733","https://access.redhat.com/errata/RHSA-2026:76734","https://access.redhat.com/errata/RHSA-2026:76735","https://access.redhat.com/errata/RHSA-2026:76737","https://access.redhat.com/errata/RHSA-2026:79357","https://access.redhat.com/security/cve/CVE-2026-42784","https://bugzilla.redhat.com/show_bug.cgi?id=2464122"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-42784","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-18T18:12:18.297877Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-18T18:12:29.708Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-15T14:40:31.579Z"}}},"related_cves":[{"value":"CVE-2026-42784","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":5674,"advisory_id":"7ee3e0b9-3aed-4fc5-8583-3d6c0155ea5f","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-15809","source_published_at":"2026-07-15T12:32:42.587+00:00","published_at":"2026-10-24T22:12:43.477372+00:00","extraction_method":"structured","technologies":["confidential-compute-attestation","core-cve","red-hat-openshift-container-platform-4","red-hat-openshift-container-platform-4-12","red-hat-openshift-container-platform-4-13","red-hat-openshift-container-platform-4-14","red-hat-openshift-container-platform-4-15","red-hat-openshift-container-platform-4-16","red-hat-openshift-container-platform-4-17","red-hat-openshift-container-platform-4-18","red-hat-openshift-container-platform-4-19","red-hat-openshift-container-platform-4-20","red-hat-openshift-container-platform-4-21","red-hat-openshift-container-platform-4-22"],"cve_ids":["CVE-2026-15809"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env","summary":"A flaw was found in CRI-O. The fix for a previous vulnerability (CVE-2022-4318) was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.","evidence":"cve:CVE-2026-15809","products":[{"name":{"value":"Red Hat OpenShift Container Platform 4.12","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.13","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.14","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.15","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.16","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.17","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.18","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.19","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.20","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.21","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4.22","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Confidential Compute Attestation","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-15809","aliases":["CVE-2026-15809"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"cpes":["cpe:/a:redhat:openshift:4.12::el8"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.12","versions":[{"status":"unaffected","version":"0:1.25.5-36.rhaos4.12.git2e7f657.el8","lessThan":"*","versionType":"rpm"}],"packageName":"cri-o","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.13::el8","cpe:/a:redhat:openshift:4.13::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.13","versions":[{"status":"unaffected","version":"0:1.26.5-32.rhaos4.13.git1088e36.el8","lessThan":"*","versionType":"rpm"}],"packageName":"cri-o","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.14::el8","cpe:/a:redhat:openshift:4.14::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.14","versions":[{"status":"unaffected","version":"0:1.27.8-22.rhaos4.14.git0633bf1.el8","lessThan":"*","versionType":"rpm"}],"packageName":"cri-o","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.15::el8","cpe:/a:redhat:openshift:4.15::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","versions":[{"status":"unaffected","version":"0:1.28.11-17.rhaos4.15.git48e6ddb.el8","lessThan":"*","versionType":"rpm"}],"packageName":"cri-o","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.16::el8","cpe:/a:redhat:openshift:4.16::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","versions":[{"status":"unaffected","version":"0:1.29.13-14.rhaos4.16.git84cfdc6.el8","lessThan":"*","versionType":"rpm"}],"packageName":"cri-o","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.17::el8","cpe:/a:redhat:openshift:4.17::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.17","versions":[{"status":"unaffected","version":"0:1.30.14-13.rhaos4.17.git3a25d98.el8","lessThan":"*","versionType":"rpm"}],"packageName":"cri-o","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.18::el8","cpe:/a:redhat:openshift:4.18::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","versions":[{"status":"unaffected","version":"0:1.31.13-14.rhaos4.18.gitf2de9ac.el8","lessThan":"*","versionType":"rpm"}],"packageName":"cri-o","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.19::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.19","versions":[{"status":"unaffected","version":"0:1.32.13-11.rhaos4.19.git089e95c.el9","lessThan":"*","versionType":"rpm"}],"packageName":"cri-o","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.20::el8","cpe:/a:redhat:openshift:4.20::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.20","versions":[{"status":"unaffected","version":"0:1.33.13-5.rhaos4.20.git7ebc848.el9","lessThan":"*","versionType":"rpm"}],"packageName":"cri-o","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.21::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.21","versions":[{"status":"unaffected","version":"0:1.34.11-4.rhaos4.21.git358c4b4.el9","lessThan":"*","versionType":"rpm"}],"packageName":"cri-o","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4.22::el8","cpe:/a:redhat:openshift:4.22::el9","cpe:/a:redhat:openshift_ironic:4.22::el9"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.22","versions":[{"status":"unaffected","version":"0:1.35.6-5.rhaos4.22.git41f610b.el9","lessThan":"*","versionType":"rpm"}],"packageName":"cri-o","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:confidential_compute_attestation:1"],"vendor":"Red Hat","product":"Confidential Compute Attestation","packageName":"openshift-sandboxed-containers/osc-monitor-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/cnf-tests-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ztp-site-generate-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-01T16:17:47.069Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:57361","https://access.redhat.com/errata/RHSA-2026:60444","https://access.redhat.com/errata/RHSA-2026:60449","https://access.redhat.com/errata/RHSA-2026:60452","https://access.redhat.com/errata/RHSA-2026:62548","https://access.redhat.com/errata/RHSA-2026:65838","https://access.redhat.com/errata/RHSA-2026:65906","https://access.redhat.com/errata/RHSA-2026:66385","https://access.redhat.com/errata/RHSA-2026:67836","https://access.redhat.com/errata/RHSA-2026:67856","https://access.redhat.com/errata/RHSA-2026:70585","https://access.redhat.com/security/cve/CVE-2026-15809","https://bugzilla.redhat.com/show_bug.cgi?id=2500846","https://github.com/cri-o/cri-o/pull/6450","https://github.com/cri-o/cri-o/pull/6524"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-15809","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-07-15T13:06:08.620102Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-116","description":"CWE-116 Improper Encoding or Escaping of Output"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-15T13:06:21.972Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-01T16:17:47.069Z"}}},"related_cves":[{"value":"CVE-2026-15809","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":5104,"advisory_id":"5b2c39c3-f3a7-475b-b630-34ebf5d7b62a","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92574","source_published_at":"2026-09-21T09:49:49.679+00:00","published_at":"2026-10-24T22:03:02.975721+00:00","extraction_method":"structured","technologies":["confidential-compute-attestation","core-cve","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-openshift-container-platform-4"],"cve_ids":["CVE-2026-92574"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Cri-o: cri-o checkpoint restore bypasses destination security context","summary":"A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a malicious checkpointed container to bypass the destination Kubernetes security context. The restored process may retain credentials, Linux capabilities, no_new_privs, and seccomp state from the checkpoint instead of enforcing the destination configuration. This can allow execution with elevated privileges across the container security boundary. Affected upstream supported versions are CRI-O 1.34 and later. Downstream Red Hat products are affected from OCP 4.17 onward. Fixes have been applied to supported branches but are not yet released. Exploitation requires permission to create a pod from a malicious checkpoint image and checkpoint restore functionality to be available.","evidence":"cve:CVE-2026-92574","products":[{"name":{"value":"Confidential Compute Attestation","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-92574","aliases":["CVE-2026-92574"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"versions":[{"status":"affected","version":"1.34.0","lessThan":"1.34.14","versionType":"semver"},{"status":"affected","version":"1.35.0","lessThan":"1.35.9","versionType":"semver"},{"status":"affected","version":"1.36.0","lessThan":"1.36.6","versionType":"semver"}],"packageName":"cri-o","collectionURL":"https://github.com/cri-o/cri-o","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:confidential_compute_attestation:1"],"vendor":"Red Hat","product":"Confidential Compute Attestation","packageName":"openshift-sandboxed-containers/osc-monitor-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"container-tools:rhel8/conmon","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"container-tools:rhel8/podman","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"conmon","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"conmon","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"cri-o","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"kata-containers","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/cnf-tests-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/microshift-bootc-rhel10","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/microshift-bootc-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ztp-site-generate-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"ose-crio-credential-provider","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"}],"modified":"2026-10-01T11:15:09.832Z","provider":"cve","references":["https://access.redhat.com/security/cve/CVE-2026-92574","https://bugzilla.redhat.com/show_bug.cgi?id=2535436"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-92574","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-21T15:35:54.906351Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-21T15:36:29.601Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-01T11:15:09.832Z"}}},"related_cves":[{"value":"CVE-2026-92574","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}}],"next_after":28829,"next_before":5104}