Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-114236 1 Redhat 19 Advanced Cluster Security, Ansible Automation Platform, Certifications and 16 more 2026-10-21 3.3 Low
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit
CVE-2026-107935 1 Redhat 8 Certifications, Edge Manager, Enterprise Linux and 5 more 2026-10-09 9.3 Critical
A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system.