Evidence used
- No CISA KEV confirmation is currently recorded.
- The selected CVSS metric records a network-reachable, unauthenticated path with no user interaction.
- EPSS is 0.46% for the current model date.
BlackTreeCVE IntelligenceFull vulnerability report · 2026
CVE-2026-47219High confidence
find-my-way is Vulnerable to DDoS with HTTP2
delvedor · find-my-way
Official source article: GitHub GHSA-C96F-X56V-GQ3H ↗. Check the applicable product and release in the original source.
7.5HighCVSS 3.1
Within 7 days
Patch availableHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.
R
Open reassessment dashboard →Operational reassessment
Published severity in operational context
Published severityHigh→Operational priority:High, unchanged from published severity.unchanged
Compensating controls
- Validate the affected product branch and deploy the verified fixed release.
- Restrict the affected network interface to trusted sources where business-safe.
- Monitor vendor guidance and exploitation sources for a material change.
Verification
- Confirm that the asset runs delvedor find-my-way and falls inside the recorded affected range.
- Verify the installed build against the product-specific fixed version after deployment.
- Validate exposure, authentication requirements and compensating controls in the actual environment.
- Reopen this reassessment when CVSS, KEV, EPSS, exploit evidence or remediation changes.
Open-source package ranges1 source-attributed range
These OSV and GitHub advisory ranges apply only to the named package and ecosystem. A listed fixed version is not a universal product patch or proof that an update is installed.
| Ecosystem and package | Affected range | First fixed version | Evidence |
|---|---|---|---|
| npmfind-my-way | <= 9.6.0 | 9.7.0 | GitHub advisory ↗upstream repository advisory · 23 Jul 2026 |
Direct vendor intelligence
1 currentAuthoritative vendor CSAF and VEX advisories
Structured product status and remediation from the issuing vendor. Product-state explanations are always visible; large lists can be searched or downloaded.
CVE-2026-47219 · CSAF 2.0 · revision 3 · finalRed Hat Product Securityfind-my-way: find-my-way: Denial of Service vulnerability in HTTP/2 server
The vendor explicitly identifies these products as affected by this CVE.
- rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3
- rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3
- rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3
- rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3
- rhoai/odh-dashboard-rhel9 as a component of Red Hat OpenShift AI (RHOAI)
- rhoai/odh-mod-arch-agent-ops-rhel9 as a component of Red Hat OpenShift AI (RHOAI)
- rhoai/odh-mod-arch-automl-rhel9 as a component of Red Hat OpenShift AI (RHOAI)
- rhoai/odh-mod-arch-autorag-rhel9 as a component of Red Hat OpenShift AI (RHOAI)
- rhoai/odh-mod-arch-eval-hub-rhel9 as a component of Red Hat OpenShift AI (RHOAI)
- rhoai/odh-mod-arch-gen-ai-rhel9 as a component of Red Hat OpenShift AI (RHOAI)
- rhoai/odh-mod-arch-maas-rhel9 as a component of Red Hat OpenShift AI (RHOAI)
- rhoai/odh-mod-arch-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI)
- Summary
- A flaw was found in find-my-way, a routing module for Node.js. A remote attacker could exploit this vulnerability when find-my-way is used with Node's HTTP/2 server. By sending specially crafted HTTP/2 method values, an attacker can cause the application to crash, leading to a Denial of Service (DoS). This prevents legitimate users from accessing the service.
- Remediation
- Before you apply this update, make sure all previously released errata that are relevant to your system are applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
High technical severity; prioritise exposed affected systems while verifying vendor guidance.
Patch available01
What, why and how
find-my-way is a framework-independent HTTP router that internally uses a Radix Tree and supports route parameters and wildcards. Versions prior to 9.7.0 are vulnerable to remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The lookup() function passes req.method into find(), and find() indexes this.trees[method]. Since this.trees is a normal object, HTTP/2 method values like constructor, toString, or __proto__ can resolve inherited object properties instead of returning undefined. The code then treats that value like a router node and crashes when it reaches currentNode.prefix.length. This issue has been fixed in version 9.0.7.
What
find-my-way is a framework-independent HTTP router that internally uses a Radix Tree and supports route parameters and wildcards. Versions prior to 9.7.0 are vulnerable to remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The lookup() function passes req.method into find(), and find() indexes this.trees[method]. Since this.trees is a normal object, HTTP/2 method values like constructor, toString, or __proto__ can resolve inherited object properties instead of returning undefined. The code then treats that value like a router node and crashes when it reaches currentNode.prefix.length. This issue has been fixed in version 9.0.7.
Why
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
How
An attacker operating through a network path may attempt exploitation without authentication or user interaction. If successful, the issue may disrupt the affected service.
What
find-my-way is a framework-independent HTTP router that internally uses a Radix Tree and supports route parameters and wildcards. Versions prior to 9.7.0 are vulnerable to remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The lookup() function passes req.method into find(), and find() indexes this.trees[method]. Since this.trees is a normal object, HTTP/2 method values like constructor, toString, or __proto__ can resolve inherited object properties instead of returning undefined. The code then treats that value like a router node and crashes when it reaches currentNode.prefix.length. This issue has been fixed in version 9.0.7.
Why
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
How
An attacker operating through a network path may attempt exploitation without authentication or user interaction. If successful, the issue may disrupt the affected service.
02
Exploit reality and attack path
CVSS severity, EPSS forecast probability, public exploit material and CISA-confirmed exploitation are separate signals.
Observed exploitation No confirmed evidence
?
Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.No CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.
Public PoC / exploit material None recorded
?
Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.No exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.
- Likely attack path
- a network path → Improper Input Validation → disrupt the affected service
- Attack surface
- Network
- Privileges required
- None: unauthenticated exploitation is possible
- User interaction
- None
- Attack complexity
- Low: no specialised conditions are recorded
- Security boundary
- Unchanged: impact remains within the vulnerable component's security authority
- Weakness
?
CWE means Common Weakness Enumeration: a standard category for the underlying weakness. - CWE-20 ↗
CWE-20: Improper Input Validation. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
- CVSS vector
?
CVSS means Common Vulnerability Scoring System. The vector records the metric values used to calculate technical severity. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCommon Vulnerability Scoring System 3.1: the compact vector below is decoded into plain language.
AVNetworkAttack vector: The vulnerable component can be reached over a network.ACLowAttack complexity: No specialised conditions are required beyond attacker-controlled input.PRNonePrivileges required: The attacker does not need an account or existing privileges.UINoneUser interaction: No action by another user is required.SUnchangedScope: The security impact remains within the vulnerable component's authority.CNoneConfidentiality impact: No direct loss is represented by this metric.INoneIntegrity impact: No direct loss is represented by this metric.AHighAvailability impact: A successful attack can cause a major loss.- Post-exploitation / living off the land
- No specific living-off-the-land technique is confirmed in the structured sources. Monitor normal administration tools for activity inconsistent with the affected service's baseline.
03
Patch and workaround
Operational remediation based on structured source evidence.
- Status
?
Patch availability is based on structured fixed-version fields and authoritative update references. If no fix is verified, check the vendor advisory before making a change. - Patch available
- Affected
- rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3
- rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3
- rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3
- rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3
- rhoai/odh-dashboard-rhel9 as a component of Red Hat OpenShift AI (RHOAI)
- rhoai/odh-mod-arch-agent-ops-rhel9 as a component of Red Hat OpenShift AI (RHOAI)
- rhoai/odh-mod-arch-automl-rhel9 as a component of Red Hat OpenShift AI (RHOAI)
- rhoai/odh-mod-arch-autorag-rhel9 as a component of Red Hat OpenShift AI (RHOAI)
- rhoai/odh-mod-arch-eval-hub-rhel9 as a component of Red Hat OpenShift AI (RHOAI)
- rhoai/odh-mod-arch-gen-ai-rhel9 as a component of Red Hat OpenShift AI (RHOAI)
- rhoai/odh-mod-arch-maas-rhel9 as a component of Red Hat OpenShift AI (RHOAI)
- rhoai/odh-mod-arch-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI)
- rhoai/odh-mod-arch-model-registry-rhel9 as a component of Red Hat OpenShift AI (RHOAI)
- Fixed
- registry.redhat.io/rhacm2/console-rhel9@sha256:1f0c691b68fd10948199249a142dfcd7fb438d856a1a4f365d490c452be35e83_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11
- registry.redhat.io/rhacm2/console-rhel9@sha256:446a14ecab55ac435bca583621066d92f8ac7c922585424b8d3a50a2e7ebb0e0_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11
- registry.redhat.io/rhacm2/console-rhel9@sha256:8d485dda383d81506838aa7e6565bbd9fb743fe03552a507dfc9ec46459060d6_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11
- registry.redhat.io/rhacm2/console-rhel9@sha256:a7540d4c501e1d1215ebff1f0b572f74e3b9a55bffb1ebfccb9546307d67116b_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11
- registry.redhat.io/rhacm2/console-rhel9@sha256:2233c4a1a01080593c5f3b8a6480a8342e68b480aef8913502dab9f83c6791d2_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
- registry.redhat.io/rhacm2/console-rhel9@sha256:235b69fbd5ff782ddb2be68e345855456b7cb81c5a88facceb3fd1a94bd880dc_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
- registry.redhat.io/rhacm2/console-rhel9@sha256:635b9d6b3667429f78426d779053b7611b1a40ab33c6849b57baa3e310bad0dc_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
- registry.redhat.io/rhacm2/console-rhel9@sha256:a480256afe3de0e7adb2b5966029d95a3cd0b76ab079a14624081f36aea46990_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13
- registry.redhat.io/rhacm2/console-rhel9@sha256:7a09fd1d65f706e0e9ab1403dc8600abfa528225e816ef3814f0877f64f7f8e5_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
- registry.redhat.io/rhacm2/console-rhel9@sha256:852a0eb10674a84b3110c4f8a589495a2f78288a415230d6aa07c52810cc1950_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
- registry.redhat.io/rhacm2/console-rhel9@sha256:a397a7414e0e4f0ab48084a5d4c5f6ad98add7516125be7de032244c0bea6b24_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
- registry.redhat.io/rhacm2/console-rhel9@sha256:d5eb5d24a165c9b7bbd983c208bff7c66e755b3854fa77c600bacfbb7bfb37f7_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
- registry.redhat.io/rhacm2/console-rhel9@sha256:4321c9bba933635c923937074444d79f8f19862e15a5836729b0772bc1a82500_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15
- registry.redhat.io/rhacm2/console-rhel9@sha256:70e82dc33ab21468bc7d6a1f8a460bcf98ad609e844b0d55ba5718c9351dbda1_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15
- registry.redhat.io/rhacm2/console-rhel9@sha256:a54067324a6144082419bc14f9378bc5b69453ede0065a99342bc299c67993b9_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15
- registry.redhat.io/rhacm2/console-rhel9@sha256:b36f40a2ee8a2f6894ca555f11e31673dba1178050dcf57677e1d43b41478c84_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15
- registry.redhat.io/rhacm2/console-rhel9@sha256:17cd423e1b8c76182ca157906f56768b19191e996aa6fe8eec7a46f6d6293fd4_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
- registry.redhat.io/rhacm2/console-rhel9@sha256:2e815e3449b28134849b5ab9c3e049847b47b7fce075802d7b60a2b70b799811_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
- registry.redhat.io/rhacm2/console-rhel9@sha256:51b220797372e4d7d455fc8ec0b53b00017bd005081787b9ad1c9603a565d5f9_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
- registry.redhat.io/rhacm2/console-rhel9@sha256:6ed4ba626032ab08f510caa1fb053a2fdb37dd7fd0949365e47e24222bcb6ec2_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16
- registry.redhat.io/rhacm2/console-rhel9@sha256:13ce75b9a8887eb81deed4d70d215cb4c08e6534ee20d7675759552006fd03a1_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
- registry.redhat.io/rhacm2/console-rhel9@sha256:2a78a7196bfcf24869ec478fd30861b2606d112d930cc89bac4896be4ef37a15_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
- registry.redhat.io/rhacm2/console-rhel9@sha256:5b0496138b3fd32d7032f33ea96d58f93ca0e56e817914b67e13c6fceb10a0dd_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
- registry.redhat.io/rhacm2/console-rhel9@sha256:d33ea91405767b66b7a0e8b28b66a2a97727cbb0759b2df902735696af5307dd_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
- registry.redhat.io/devspaces/dashboard-rhel9@sha256:167f8fd2b88dc37abed12b6496ac32b5b031de3be233f2864afb918c8b692a1a_arm64 as a component of Red Hat OpenShift Dev Spaces 3.30
- registry.redhat.io/devspaces/dashboard-rhel9@sha256:6494cd526ac465b432f090ed4c8a4b82ef8d115e2b518d3d29d9a67f842d3e8a_amd64 as a component of Red Hat OpenShift Dev Spaces 3.30
- registry.redhat.io/devspaces/dashboard-rhel9@sha256:66086271381e4fd5f6f156458ef6ddcb15e3ba6d0379530768b11e6ea6b8ae11_s390x as a component of Red Hat OpenShift Dev Spaces 3.30
- registry.redhat.io/devspaces/dashboard-rhel9@sha256:6722afd90301e2367b5d360337321856a03b9b7427a91ac4d487fc7c235ec992_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.30
- registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:44b1c7a404215c579579103b8039aded503def330025c89b4a67a90a150c9568_arm64 as a component of multicluster engine for Kubernetes 2.17
- registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:61233a9eb210e414aa2da28090665711df22611f7c59fb696813337f05ea0543_ppc64le as a component of multicluster engine for Kubernetes 2.17
- and 14 more
- Action
- Before you apply this update, make sure all previously released errata that are relevant to your system are applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
- Workaround
- No verified workaround is recorded. If business-safe, reduce exposure to the affected interface and allow only trusted sources until authoritative guidance is available.
04
Evidence and provenance
Published 28 Jul 2026 · Last source change 29 Jul 2026, 15:24 UTC · CWE-20 · Improper Input Validation
CVE recordCVE.org · 5.2
CVSS sourceCNA
EPSS source FIRST · tracked since 2026-08-14
?
The date BlackTree first stored a score for this CVE from the daily FIRST EPSS feed.European sourceENISA EUVD · EUVD-2026-50084
Product sourceVendor CSAF · Red Hat Product Security
Remediation sourceVendor CSAF · Red Hat Product Security
CWE sourceCNA
NVD statusNVD not scheduled
Core structured fields are present and their contributing authorities are shown above.
Material change intelligence
View recent updates ↗What changed after publication
- Affected versionsThe structured affected or fixed version information changed.Red Hat Product Security ↗
- Before
- rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhoai/odh-dashboard-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-agent-ops-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-automl-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-autorag-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-eval-hub-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-gen-ai-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-maas-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-model-registry-rhel9 as a component of Red Hat OpenShift AI (RHOAI); devspaces/dashboard-rhel9 as a component of Red Hat OpenShift Dev Spaces · Fixed: registry.redhat.io/rhacm2/console-rhel9@sha256:1f0c691b68fd10948199249a142dfcd7fb438d856a1a4f365d490c452be35e83_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11; registry.redhat.io/rhacm2/console-rhel9@sha256:446a14ecab55ac435bca583621066d92f8ac7c922585424b8d3a50a2e7ebb0e0_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11; registry.redhat.io/rhacm2/console-rhel9@sha256:8d485dda383d81506838aa7e6565bbd9fb743fe03552a507dfc9ec46459060d6_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11; registry.redhat.io/rhacm2/console-rhel9@sha256:a7540d4c501e1d1215ebff1f0b572f74e3b9a55bffb1ebfccb9546307d67116b_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11; registry.redhat.io/rhacm2/console-rhel9@sha256:2233c4a1a01080593c5f3b8a6480a8342e68b480aef8913502dab9f83c6791d2_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13; registry.redhat.io/rhacm2/console-rhel9@sha256:235b69fbd5ff782ddb2be68e345855456b7cb81c5a88facceb3fd1a94bd880dc_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13; registry.redhat.io/rhacm2/console-rhel9@sha256:635b9d6b3667429f78426d779053b7611b1a40ab33c6849b57baa3e310bad0dc_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13; registry.redhat.io/rhacm2/console-rhel9@sha256:a480256afe3de0e7adb2b5966029d95a3cd0b76ab079a14624081f36aea46990_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13; registry.redhat.io/rhacm2/console-rhel9@sha256:7a09fd1d65f706e0e9ab1403dc8600abfa528225e816ef3814f0877f64f7f8e5_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14; registry.redhat.io/rhacm2/console-rhel9@sha256:852a0eb10674a84b3110c4f8a589495a2f78288a415230d6aa07c52810cc1950_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14; registry.redhat.io/rhacm2/console-rhel9@sha256:a397a7414e0e4f0ab48084a5d4c5f6ad98add7516125be7de032244c0bea6b24_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14; registry.redhat.io/rhacm2/console-rhel9@sha256:d5eb5d24a165c9b7bbd983c208bff7c66e755b3854fa77c600bacfbb7bfb37f7_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14; registry.redhat.io/rhacm2/console-rhel9@sha256:4321c9bba933635c923937074444d79f8f19862e15a5836729b0772bc1a82500_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15; registry.redhat.io/rhacm2/console-rhel9@sha256:70e82dc33ab21468bc7d6a1f8a460bcf98ad609e844b0d55ba5718c9351dbda1_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15; registry.redhat.io/rhacm2/console-rhel9@sha256:a54067324a6144082419bc14f9378bc5b69453ede0065a99342bc299c67993b9_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15; registry.redhat.io/rhacm2/console-rhel9@sha256:b36f40a2ee8a2f6894ca555f11e31673dba1178050dcf57677e1d43b41478c84_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15; registry.redhat.io/rhacm2/console-rhel9@sha256:17cd423e1b8c76182ca157906f56768b19191e996aa6fe8eec7a46f6d6293fd4_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16; registry.redhat.io/rhacm2/console-rhel9@sha256:2e815e3449b28134849b5ab9c3e049847b47b7fce075802d7b60a2b70b799811_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16; registry.redhat.io/rhacm2/console-rhel9@sha256:51b220797372e4d7d455fc8ec0b53b00017bd005081787b9ad1c9603a565d5f9_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16; registry.redhat.io/rhacm2/console-rhel9@sha256:6ed4ba626032ab08f510caa1fb053a2fdb37dd7fd0949365e47e24222bcb6ec2_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16; registry.redhat.io/rhacm2/console-rhel9@sha256:13ce75b9a8887eb81deed4d70d215cb4c08e6534ee20d7675759552006fd03a1_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17; registry.redhat.io/rhacm2/console-rhel9@sha256:2a78a7196bfcf24869ec478fd30861b2606d112d930cc89bac4896be4ef37a15_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17; registry.redhat.io/rhacm2/console-rhel9@sha256:5b0496138b3fd32d7032f33ea96d58f93ca0e56e817914b67e13c6fceb10a0dd_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17; registry.redhat.io/rhacm2/console-rhel9@sha256:d33ea91405767b66b7a0e8b28b66a2a97727cbb0759b2df902735696af5307dd_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:44b1c7a404215c579579103b8039aded503def330025c89b4a67a90a150c9568_arm64 as a component of multicluster engine for Kubernetes 2.17; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:61233a9eb210e414aa2da28090665711df22611f7c59fb696813337f05ea0543_ppc64le as a component of multicluster engine for Kubernetes 2.17; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d3256f9df83b82e8bdef2a8d0c706695d5c9674e263755cb1db42158140c5a5_amd64 as a component of multicluster engine for Kubernetes 2.17; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:cb94112f676b97ced1d43d6f812c5235201c3319a4c8a4237b94aaab8e5acc6e_s390x as a component of multicluster engine for Kubernetes 2.17; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:89582af16958a59fa835177ba86fb188e48883f47f758aad5731967572d6fbc8_amd64 as a component of multicluster engine for Kubernetes 2.6; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c4304142e1220d457779e705e5efa949a702ea625bee79bdb760c48bbc20b974_ppc64le as a component of multicluster engine for Kubernetes 2.6; and 10 more
- After
- rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhoai/odh-dashboard-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-agent-ops-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-automl-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-autorag-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-eval-hub-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-gen-ai-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-maas-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-model-registry-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · Fixed: registry.redhat.io/rhacm2/console-rhel9@sha256:1f0c691b68fd10948199249a142dfcd7fb438d856a1a4f365d490c452be35e83_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11; registry.redhat.io/rhacm2/console-rhel9@sha256:446a14ecab55ac435bca583621066d92f8ac7c922585424b8d3a50a2e7ebb0e0_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11; registry.redhat.io/rhacm2/console-rhel9@sha256:8d485dda383d81506838aa7e6565bbd9fb743fe03552a507dfc9ec46459060d6_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11; registry.redhat.io/rhacm2/console-rhel9@sha256:a7540d4c501e1d1215ebff1f0b572f74e3b9a55bffb1ebfccb9546307d67116b_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11; registry.redhat.io/rhacm2/console-rhel9@sha256:2233c4a1a01080593c5f3b8a6480a8342e68b480aef8913502dab9f83c6791d2_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13; registry.redhat.io/rhacm2/console-rhel9@sha256:235b69fbd5ff782ddb2be68e345855456b7cb81c5a88facceb3fd1a94bd880dc_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13; registry.redhat.io/rhacm2/console-rhel9@sha256:635b9d6b3667429f78426d779053b7611b1a40ab33c6849b57baa3e310bad0dc_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13; registry.redhat.io/rhacm2/console-rhel9@sha256:a480256afe3de0e7adb2b5966029d95a3cd0b76ab079a14624081f36aea46990_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13; registry.redhat.io/rhacm2/console-rhel9@sha256:7a09fd1d65f706e0e9ab1403dc8600abfa528225e816ef3814f0877f64f7f8e5_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14; registry.redhat.io/rhacm2/console-rhel9@sha256:852a0eb10674a84b3110c4f8a589495a2f78288a415230d6aa07c52810cc1950_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14; registry.redhat.io/rhacm2/console-rhel9@sha256:a397a7414e0e4f0ab48084a5d4c5f6ad98add7516125be7de032244c0bea6b24_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14; registry.redhat.io/rhacm2/console-rhel9@sha256:d5eb5d24a165c9b7bbd983c208bff7c66e755b3854fa77c600bacfbb7bfb37f7_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14; registry.redhat.io/rhacm2/console-rhel9@sha256:4321c9bba933635c923937074444d79f8f19862e15a5836729b0772bc1a82500_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15; registry.redhat.io/rhacm2/console-rhel9@sha256:70e82dc33ab21468bc7d6a1f8a460bcf98ad609e844b0d55ba5718c9351dbda1_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15; registry.redhat.io/rhacm2/console-rhel9@sha256:a54067324a6144082419bc14f9378bc5b69453ede0065a99342bc299c67993b9_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15; registry.redhat.io/rhacm2/console-rhel9@sha256:b36f40a2ee8a2f6894ca555f11e31673dba1178050dcf57677e1d43b41478c84_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15; registry.redhat.io/rhacm2/console-rhel9@sha256:17cd423e1b8c76182ca157906f56768b19191e996aa6fe8eec7a46f6d6293fd4_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16; registry.redhat.io/rhacm2/console-rhel9@sha256:2e815e3449b28134849b5ab9c3e049847b47b7fce075802d7b60a2b70b799811_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16; registry.redhat.io/rhacm2/console-rhel9@sha256:51b220797372e4d7d455fc8ec0b53b00017bd005081787b9ad1c9603a565d5f9_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16; registry.redhat.io/rhacm2/console-rhel9@sha256:6ed4ba626032ab08f510caa1fb053a2fdb37dd7fd0949365e47e24222bcb6ec2_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16; registry.redhat.io/rhacm2/console-rhel9@sha256:13ce75b9a8887eb81deed4d70d215cb4c08e6534ee20d7675759552006fd03a1_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17; registry.redhat.io/rhacm2/console-rhel9@sha256:2a78a7196bfcf24869ec478fd30861b2606d112d930cc89bac4896be4ef37a15_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17; registry.redhat.io/rhacm2/console-rhel9@sha256:5b0496138b3fd32d7032f33ea96d58f93ca0e56e817914b67e13c6fceb10a0dd_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17; registry.redhat.io/rhacm2/console-rhel9@sha256:d33ea91405767b66b7a0e8b28b66a2a97727cbb0759b2df902735696af5307dd_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17; registry.redhat.io/devspaces/dashboard-rhel9@sha256:167f8fd2b88dc37abed12b6496ac32b5b031de3be233f2864afb918c8b692a1a_arm64 as a component of Red Hat OpenShift Dev Spaces 3.30; registry.redhat.io/devspaces/dashboard-rhel9@sha256:6494cd526ac465b432f090ed4c8a4b82ef8d115e2b518d3d29d9a67f842d3e8a_amd64 as a component of Red Hat OpenShift Dev Spaces 3.30; registry.redhat.io/devspaces/dashboard-rhel9@sha256:66086271381e4fd5f6f156458ef6ddcb15e3ba6d0379530768b11e6ea6b8ae11_s390x as a component of Red Hat OpenShift Dev Spaces 3.30; registry.redhat.io/devspaces/dashboard-rhel9@sha256:6722afd90301e2367b5d360337321856a03b9b7427a91ac4d487fc7c235ec992_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.30; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:44b1c7a404215c579579103b8039aded503def330025c89b4a67a90a150c9568_arm64 as a component of multicluster engine for Kubernetes 2.17; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:61233a9eb210e414aa2da28090665711df22611f7c59fb696813337f05ea0543_ppc64le as a component of multicluster engine for Kubernetes 2.17; and 14 more
- Vendor guidanceAuthoritative vendor guidance changed from remediation: access.redhat.com/CVE-2026-47219 to remediation: access.redhat.com/CVE-2026-47219.Red Hat Product Security ↗
- Before
- remediation: access.redhat.com/CVE-2026-47219
- After
- remediation: access.redhat.com/CVE-2026-47219
- Affected versionsThe structured affected or fixed version information changed.Red Hat Product Security ↗
- Before
- rhacm2/console-rhel9 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhoai/odh-dashboard-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-agent-ops-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-automl-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-autorag-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-eval-hub-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-gen-ai-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-maas-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-model-registry-rhel9 as a component of Red Hat OpenShift AI (RHOAI); devspaces/dashboard-rhel9 as a component of Red Hat OpenShift Dev Spaces · Fixed: registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:44b1c7a404215c579579103b8039aded503def330025c89b4a67a90a150c9568_arm64 as a component of multicluster engine for Kubernetes 2.17; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:61233a9eb210e414aa2da28090665711df22611f7c59fb696813337f05ea0543_ppc64le as a component of multicluster engine for Kubernetes 2.17; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d3256f9df83b82e8bdef2a8d0c706695d5c9674e263755cb1db42158140c5a5_amd64 as a component of multicluster engine for Kubernetes 2.17; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:cb94112f676b97ced1d43d6f812c5235201c3319a4c8a4237b94aaab8e5acc6e_s390x as a component of multicluster engine for Kubernetes 2.17; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:89582af16958a59fa835177ba86fb188e48883f47f758aad5731967572d6fbc8_amd64 as a component of multicluster engine for Kubernetes 2.6; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c4304142e1220d457779e705e5efa949a702ea625bee79bdb760c48bbc20b974_ppc64le as a component of multicluster engine for Kubernetes 2.6; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d9462b7e8e1ea92347f210640de7676e8ab55d53d4fbc1319de4f2c24488fe41_s390x as a component of multicluster engine for Kubernetes 2.6; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:e1291921d2a43efb307f721e7cbe2059e396ac518b787bd3216268e939e6a498_arm64 as a component of multicluster engine for Kubernetes 2.6; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:21c2a3da93702290e700c4a048f041356dd42596add6d70ef1d599eecd70f725_s390x as a component of multicluster engine for Kubernetes 2.8; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:55ecb01a4602e320c1e5f6212544f2159cfb4ee8393930f36ce4117fee5f5c2f_amd64 as a component of multicluster engine for Kubernetes 2.8; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:cf671008f75e9d5d2d1efc97ce9877ff185747051ccedbf581240cb11d50da32_ppc64le as a component of multicluster engine for Kubernetes 2.8; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:f1c3abc9961383f78f307b4a13eb70afc98030632d6b64140be51a989f577e18_arm64 as a component of multicluster engine for Kubernetes 2.8; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:031b03a535eb71c43d15621e56127672a34ee4bc22e7032e1410956ebae59e3a_ppc64le as a component of multicluster engine for Kubernetes 2.9; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a6f3a435a0494fbf57d5f6cde34db2f6a92ddaf972f10f52cd7d56b70671c482_arm64 as a component of multicluster engine for Kubernetes 2.9; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a766b9870b07681596f1423ae01130e738301ef7fe4b70e0624065bf1852792f_s390x as a component of multicluster engine for Kubernetes 2.9; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:afa61b8ffb34702fa11001efa74fe62cdbacf78c9a5865ddb28ca801b173093c_amd64 as a component of multicluster engine for Kubernetes 2.9
- After
- rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhoai/odh-dashboard-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-agent-ops-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-automl-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-autorag-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-eval-hub-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-gen-ai-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-maas-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-model-registry-rhel9 as a component of Red Hat OpenShift AI (RHOAI); devspaces/dashboard-rhel9 as a component of Red Hat OpenShift Dev Spaces · Fixed: registry.redhat.io/rhacm2/console-rhel9@sha256:1f0c691b68fd10948199249a142dfcd7fb438d856a1a4f365d490c452be35e83_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11; registry.redhat.io/rhacm2/console-rhel9@sha256:446a14ecab55ac435bca583621066d92f8ac7c922585424b8d3a50a2e7ebb0e0_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11; registry.redhat.io/rhacm2/console-rhel9@sha256:8d485dda383d81506838aa7e6565bbd9fb743fe03552a507dfc9ec46459060d6_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11; registry.redhat.io/rhacm2/console-rhel9@sha256:a7540d4c501e1d1215ebff1f0b572f74e3b9a55bffb1ebfccb9546307d67116b_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11; registry.redhat.io/rhacm2/console-rhel9@sha256:2233c4a1a01080593c5f3b8a6480a8342e68b480aef8913502dab9f83c6791d2_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13; registry.redhat.io/rhacm2/console-rhel9@sha256:235b69fbd5ff782ddb2be68e345855456b7cb81c5a88facceb3fd1a94bd880dc_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13; registry.redhat.io/rhacm2/console-rhel9@sha256:635b9d6b3667429f78426d779053b7611b1a40ab33c6849b57baa3e310bad0dc_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13; registry.redhat.io/rhacm2/console-rhel9@sha256:a480256afe3de0e7adb2b5966029d95a3cd0b76ab079a14624081f36aea46990_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13; registry.redhat.io/rhacm2/console-rhel9@sha256:7a09fd1d65f706e0e9ab1403dc8600abfa528225e816ef3814f0877f64f7f8e5_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14; registry.redhat.io/rhacm2/console-rhel9@sha256:852a0eb10674a84b3110c4f8a589495a2f78288a415230d6aa07c52810cc1950_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14; registry.redhat.io/rhacm2/console-rhel9@sha256:a397a7414e0e4f0ab48084a5d4c5f6ad98add7516125be7de032244c0bea6b24_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14; registry.redhat.io/rhacm2/console-rhel9@sha256:d5eb5d24a165c9b7bbd983c208bff7c66e755b3854fa77c600bacfbb7bfb37f7_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14; registry.redhat.io/rhacm2/console-rhel9@sha256:4321c9bba933635c923937074444d79f8f19862e15a5836729b0772bc1a82500_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15; registry.redhat.io/rhacm2/console-rhel9@sha256:70e82dc33ab21468bc7d6a1f8a460bcf98ad609e844b0d55ba5718c9351dbda1_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15; registry.redhat.io/rhacm2/console-rhel9@sha256:a54067324a6144082419bc14f9378bc5b69453ede0065a99342bc299c67993b9_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15; registry.redhat.io/rhacm2/console-rhel9@sha256:b36f40a2ee8a2f6894ca555f11e31673dba1178050dcf57677e1d43b41478c84_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.15; registry.redhat.io/rhacm2/console-rhel9@sha256:17cd423e1b8c76182ca157906f56768b19191e996aa6fe8eec7a46f6d6293fd4_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16; registry.redhat.io/rhacm2/console-rhel9@sha256:2e815e3449b28134849b5ab9c3e049847b47b7fce075802d7b60a2b70b799811_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16; registry.redhat.io/rhacm2/console-rhel9@sha256:51b220797372e4d7d455fc8ec0b53b00017bd005081787b9ad1c9603a565d5f9_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16; registry.redhat.io/rhacm2/console-rhel9@sha256:6ed4ba626032ab08f510caa1fb053a2fdb37dd7fd0949365e47e24222bcb6ec2_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16; registry.redhat.io/rhacm2/console-rhel9@sha256:13ce75b9a8887eb81deed4d70d215cb4c08e6534ee20d7675759552006fd03a1_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17; registry.redhat.io/rhacm2/console-rhel9@sha256:2a78a7196bfcf24869ec478fd30861b2606d112d930cc89bac4896be4ef37a15_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17; registry.redhat.io/rhacm2/console-rhel9@sha256:5b0496138b3fd32d7032f33ea96d58f93ca0e56e817914b67e13c6fceb10a0dd_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17; registry.redhat.io/rhacm2/console-rhel9@sha256:d33ea91405767b66b7a0e8b28b66a2a97727cbb0759b2df902735696af5307dd_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:44b1c7a404215c579579103b8039aded503def330025c89b4a67a90a150c9568_arm64 as a component of multicluster engine for Kubernetes 2.17; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:61233a9eb210e414aa2da28090665711df22611f7c59fb696813337f05ea0543_ppc64le as a component of multicluster engine for Kubernetes 2.17; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d3256f9df83b82e8bdef2a8d0c706695d5c9674e263755cb1db42158140c5a5_amd64 as a component of multicluster engine for Kubernetes 2.17; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:cb94112f676b97ced1d43d6f812c5235201c3319a4c8a4237b94aaab8e5acc6e_s390x as a component of multicluster engine for Kubernetes 2.17; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:89582af16958a59fa835177ba86fb188e48883f47f758aad5731967572d6fbc8_amd64 as a component of multicluster engine for Kubernetes 2.6; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c4304142e1220d457779e705e5efa949a702ea625bee79bdb760c48bbc20b974_ppc64le as a component of multicluster engine for Kubernetes 2.6; and 10 more
- Vendor guidanceAuthoritative vendor guidance changed from remediation: access.redhat.com/CVE-2026-47219 to remediation: access.redhat.com/CVE-2026-47219.Red Hat Product Security ↗
- Before
- remediation: access.redhat.com/CVE-2026-47219
- After
- remediation: access.redhat.com/CVE-2026-47219
- Remediation statusRemediation status changed from Awaiting fix to Patch available.Red Hat Product Security ↗
- Before
- Awaiting fix
- After
- Patch available
- Affected versionsThe structured affected or fixed version information changed.Red Hat Product Security ↗
- Before
- multicluster-engine/console-mce-rhel9 as a component of Multicluster Engine for Kubernetes; rhacm2/console-rhel9 as a component of Red Hat Advanced Cluster Management for Kubernetes 2
- After
- rhacm2/console-rhel9 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhoai/odh-dashboard-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-agent-ops-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-automl-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-autorag-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-eval-hub-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-gen-ai-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-maas-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-model-registry-rhel9 as a component of Red Hat OpenShift AI (RHOAI); devspaces/dashboard-rhel9 as a component of Red Hat OpenShift Dev Spaces · Fixed: registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:44b1c7a404215c579579103b8039aded503def330025c89b4a67a90a150c9568_arm64 as a component of multicluster engine for Kubernetes 2.17; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:61233a9eb210e414aa2da28090665711df22611f7c59fb696813337f05ea0543_ppc64le as a component of multicluster engine for Kubernetes 2.17; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d3256f9df83b82e8bdef2a8d0c706695d5c9674e263755cb1db42158140c5a5_amd64 as a component of multicluster engine for Kubernetes 2.17; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:cb94112f676b97ced1d43d6f812c5235201c3319a4c8a4237b94aaab8e5acc6e_s390x as a component of multicluster engine for Kubernetes 2.17; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:89582af16958a59fa835177ba86fb188e48883f47f758aad5731967572d6fbc8_amd64 as a component of multicluster engine for Kubernetes 2.6; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c4304142e1220d457779e705e5efa949a702ea625bee79bdb760c48bbc20b974_ppc64le as a component of multicluster engine for Kubernetes 2.6; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d9462b7e8e1ea92347f210640de7676e8ab55d53d4fbc1319de4f2c24488fe41_s390x as a component of multicluster engine for Kubernetes 2.6; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:e1291921d2a43efb307f721e7cbe2059e396ac518b787bd3216268e939e6a498_arm64 as a component of multicluster engine for Kubernetes 2.6; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:21c2a3da93702290e700c4a048f041356dd42596add6d70ef1d599eecd70f725_s390x as a component of multicluster engine for Kubernetes 2.8; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:55ecb01a4602e320c1e5f6212544f2159cfb4ee8393930f36ce4117fee5f5c2f_amd64 as a component of multicluster engine for Kubernetes 2.8; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:cf671008f75e9d5d2d1efc97ce9877ff185747051ccedbf581240cb11d50da32_ppc64le as a component of multicluster engine for Kubernetes 2.8; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:f1c3abc9961383f78f307b4a13eb70afc98030632d6b64140be51a989f577e18_arm64 as a component of multicluster engine for Kubernetes 2.8; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:031b03a535eb71c43d15621e56127672a34ee4bc22e7032e1410956ebae59e3a_ppc64le as a component of multicluster engine for Kubernetes 2.9; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a6f3a435a0494fbf57d5f6cde34db2f6a92ddaf972f10f52cd7d56b70671c482_arm64 as a component of multicluster engine for Kubernetes 2.9; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a766b9870b07681596f1423ae01130e738301ef7fe4b70e0624065bf1852792f_s390x as a component of multicluster engine for Kubernetes 2.9; registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:afa61b8ffb34702fa11001efa74fe62cdbacf78c9a5865ddb28ca801b173093c_amd64 as a component of multicluster engine for Kubernetes 2.9
CVE published
Fixed release or patch reference recorded
Technical terms and abbreviations used in this report
- CVE
- Common Vulnerabilities and Exposures: the public identifier for one disclosed vulnerability.
- CVSS
- Common Vulnerability Scoring System: a technical severity framework; it is not patching priority by itself.
- EPSS
- Exploit Prediction Scoring System: FIRST's estimate of the probability that exploitation activity will be observed in the next 30 days; it is a forecast, not confirmation.
- CWE
- Common Weakness Enumeration: the standard category describing the underlying software or hardware weakness.
- CNA
- CVE Numbering Authority: an organisation authorised to assign and publish CVE records.
- CISA ADP
- Cybersecurity and Infrastructure Security Agency Authorized Data Publisher: structured enrichment added to a CVE record.
- NVD
- National Vulnerability Database: NIST's enrichment service for CVE records.
- CERT / CSIRT
- A computer security incident response team that publishes warnings or coordinates incident response.
- PoC
- Proof of concept: public material that demonstrates or helps reproduce exploitation.
- CSAF
- Common Security Advisory Framework: a machine-readable format for security advisories.
- LoTL
- Living off the land: abuse of legitimate tools or system functions during an attack.