Veille CVE

Recherche « Redhat pen drive »

3 CVE

Critique 0 Élevée 1 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Redhat pen drive » ✕
  1. CVE-2026-18875 7.3 Élevée

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift · Ibm financial transaction manager

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to RAG poisoning via unauthenticated runbook upsert (CWE-74) in the FTM AI agent server (api.vectordb.runbooks.js:51). An unauthenticated attacker can insert malicious runbook content into the agent's vector database to steer AI-driven MCP tool calls, potentially triggering unauthorized payment actions or exfiltrating payment data.

  2. CVE-2026-19391 6.5 Moyenne

    Red Hat Pen Drive Powered by Red Hat Lightspeed · Red Hat Certification Program for Red Hat Enterprise Linux 9 · Red Hat Enterprise Linux 10 · Red Hat Enterprise Linux 9

    A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the literal string 'password'. This allows SSSD LDAP bind passwords (ldap_default_authtok) and Pacemaker fence device credentials to be included in cleartext in archives uploaded to console.redhat.com.

  3. CVE-2026-13083 6.9 Moyenne

    Red Hat Pen Drive Powered by Red Hat Lightspeed · Redhat pen drive

    A flaw was found in the Pen Drive report generator. Cluster-sourced data is rendered into HTML reports without proper escaping or sanitization. An attacker with cluster administrator privileges can inject a stored cross-site scripting (XSS) payload into cluster objects (such as ClusterVersion spec.channel) that executes in the browser of any user who opens the generated HTML report.