Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-41605

A flaw was found in Apache Thrift. This integer overflow or wraparound vulnerability could potentially lead to unexpected behavior or resource exhaustion, which may impact the availability or integrity of the system. The exact consequences depend on how the overflow is triggered and handled within the application.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:5bd8b8e6b4ae6091438de39bcaf77be87cb8c4d1f8d726d4f130c4de418ee20e
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
3

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 29 assertions

{"defaultStatus":"unaffected","product":"Apache Thrift","vendor":"Apache Software Foundation","versions":[{"lessThan":"0.23.0","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/cna/affected/0

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"],"defaultStatus":"affected","packageName":"rhosdt/tempo-jaeger-query-rhel9","product":"Red Hat OpenShift distributed tracing 3.9.1","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1778158391","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/6

{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:acm:2.14::el9"],"defaultStatus":"affected","packageName":"rhacm2/acm-grafana-rhel9","product":"Red Hat Advanced Cluster Management for Kubernetes 2.14","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782693386","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/2

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"unaffected","packageName":"rhoai/odh-kf-notebook-controller-rhel8","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/20

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux_ai:3"],"defaultStatus":"affected","packageName":"rhelai3/bootc-cuda-rhel9","product":"Red Hat Enterprise Linux AI (RHEL AI) 3","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/17

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ai_inference_server:3"],"defaultStatus":"affected","packageName":"rhaiis/vllm-tpu-rhel9","product":"Red Hat AI Inference Server","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/13

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_gitops:1"],"defaultStatus":"affected","packageName":"openshift-gitops-1/argocd-rhel8","product":"Red Hat OpenShift GitOps","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/26

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ai_inference_server:3"],"defaultStatus":"affected","packageName":"rhaiis/vllm-cuda-rhel9","product":"Red Hat AI Inference Server","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/11

{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:multicluster_globalhub:1.5::el9"],"defaultStatus":"affected","packageName":"multicluster-globalhub/multicluster-globalhub-grafana-rhel9","product":"Multicluster Global Hub 1.5.4","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1778867753","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/1

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"unaffected","packageName":"rhoai/odh-notebook-controller-rhel8","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/22

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"unaffected","packageName":"rhoai/odh-model-registry-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/21

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"openshift4/oc-mirror-plugin-rhel9","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/23

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_gitops:1"],"defaultStatus":"affected","packageName":"openshift-gitops-1/argocd-rhel9","product":"Red Hat OpenShift GitOps","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/27

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ai_inference_server:3"],"defaultStatus":"affected","packageName":"rhaiis/vllm-cpu-rhel9","product":"Red Hat AI Inference Server","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/10

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux_ai:3"],"defaultStatus":"affected","packageName":"rhelai3/bootc-rocm-rhel9","product":"Red Hat Enterprise Linux AI (RHEL AI) 3","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/19

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux_ai:3"],"defaultStatus":"affected","packageName":"rhelai3/bootc-azure-rocm-rhel9","product":"Red Hat Enterprise Linux AI (RHEL AI) 3","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/16

{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:multicluster_globalhub:1.6::el9"],"defaultStatus":"affected","packageName":"multicluster-globalhub/multicluster-globalhub-grafana-rhel9","product":"Red Hat multicluster global hub 1.6.0","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1780167118","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/5

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"],"defaultStatus":"affected","packageName":"rhosdt/tempo-rhel9","product":"Red Hat OpenShift distributed tracing 3.9.1","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1778158374","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/8

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"openshift4/ztp-site-generate-rhel8","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/24

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux_ai:3"],"defaultStatus":"affected","packageName":"rhelai3/bootc-azure-cuda-rhel9","product":"Red Hat Enterprise Linux AI (RHEL AI) 3","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/15

{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:multicluster_globalhub:1.3::el9"],"defaultStatus":"affected","packageName":"multicluster-globalhub/multicluster-globalhub-grafana-rhel9","product":"Multicluster Global Hub 1.3.4","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1779212259","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/0

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ai_inference_server:3"],"defaultStatus":"affected","packageName":"rhaiis/vllm-rocm-rhel9","product":"Red Hat AI Inference Server","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/12

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux_ai:3"],"defaultStatus":"affected","packageName":"rhelai3/bootc-gcp-cuda-rhel9","product":"Red Hat Enterprise Linux AI (RHEL AI) 3","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/18

{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:multicluster_globalhub:1.4::el9"],"defaultStatus":"affected","packageName":"multicluster-globalhub/multicluster-globalhub-grafana-rhel9","product":"Red Hat multicluster global hub 1.4.4","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1779579439","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/4

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_distributed_tracing:3"],"defaultStatus":"unaffected","packageName":"rhosdt/opentelemetry-collector-rhel9","product":"Red Hat OpenShift distributed tracing 3","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/25

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:service_mesh:2"],"defaultStatus":"unaffected","packageName":"openshift-service-mesh/istio-rhel8-operator","product":"OpenShift Service Mesh 2","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/9

{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:acm:2.15::el9"],"defaultStatus":"affected","packageName":"rhacm2/acm-grafana-rhel9","product":"Red Hat Advanced Cluster Management for Kubernetes 2.15","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1780677003","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/3

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux_ai:3"],"defaultStatus":"affected","packageName":"rhelai3/bootc-aws-cuda-rhel9","product":"Red Hat Enterprise Linux AI (RHEL AI) 3","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/14

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"],"defaultStatus":"affected","packageName":"rhosdt/tempo-query-rhel9","product":"Red Hat OpenShift distributed tracing 3.9.1","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1778158343","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/7
cvss · 2 assertions

{"metric":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.7,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/metrics/1/cvssV3_1

{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","version":"3.1"},"metric_type":"cvssV3_1"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/1/metrics/0/cvssV3_1
cwe · 2 assertions

{"cweId":"CWE-190","description":"Integer Overflow or Wraparound","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/problemTypes/0/descriptions/0

{"cweId":"CWE-190","description":"CWE-190 Integer Overflow or Wraparound","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/cna/problemTypes/0/descriptions/0

Affected products and versions

29 source assertions
{"defaultStatus":"unaffected","product":"Apache Thrift","vendor":"Apache Software Foundation","versions":[{"lessThan":"0.23.0","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/cna/affected/0
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"],"defaultStatus":"affected","packageName":"rhosdt/tempo-jaeger-query-rhel9","product":"Red Hat OpenShift distributed tracing 3.9.1","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1778158391","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/6
{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:acm:2.14::el9"],"defaultStatus":"affected","packageName":"rhacm2/acm-grafana-rhel9","product":"Red Hat Advanced Cluster Management for Kubernetes 2.14","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782693386","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/2
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"unaffected","packageName":"rhoai/odh-kf-notebook-controller-rhel8","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/20
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux_ai:3"],"defaultStatus":"affected","packageName":"rhelai3/bootc-cuda-rhel9","product":"Red Hat Enterprise Linux AI (RHEL AI) 3","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/17
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ai_inference_server:3"],"defaultStatus":"affected","packageName":"rhaiis/vllm-tpu-rhel9","product":"Red Hat AI Inference Server","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/13
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_gitops:1"],"defaultStatus":"affected","packageName":"openshift-gitops-1/argocd-rhel8","product":"Red Hat OpenShift GitOps","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/26
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ai_inference_server:3"],"defaultStatus":"affected","packageName":"rhaiis/vllm-cuda-rhel9","product":"Red Hat AI Inference Server","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/11
{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:multicluster_globalhub:1.5::el9"],"defaultStatus":"affected","packageName":"multicluster-globalhub/multicluster-globalhub-grafana-rhel9","product":"Multicluster Global Hub 1.5.4","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1778867753","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/1
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"unaffected","packageName":"rhoai/odh-notebook-controller-rhel8","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/22
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"unaffected","packageName":"rhoai/odh-model-registry-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/21
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"openshift4/oc-mirror-plugin-rhel9","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/23
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_gitops:1"],"defaultStatus":"affected","packageName":"openshift-gitops-1/argocd-rhel9","product":"Red Hat OpenShift GitOps","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/27
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ai_inference_server:3"],"defaultStatus":"affected","packageName":"rhaiis/vllm-cpu-rhel9","product":"Red Hat AI Inference Server","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/10
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux_ai:3"],"defaultStatus":"affected","packageName":"rhelai3/bootc-rocm-rhel9","product":"Red Hat Enterprise Linux AI (RHEL AI) 3","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/19
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux_ai:3"],"defaultStatus":"affected","packageName":"rhelai3/bootc-azure-rocm-rhel9","product":"Red Hat Enterprise Linux AI (RHEL AI) 3","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/16
{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:multicluster_globalhub:1.6::el9"],"defaultStatus":"affected","packageName":"multicluster-globalhub/multicluster-globalhub-grafana-rhel9","product":"Red Hat multicluster global hub 1.6.0","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1780167118","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/5
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"],"defaultStatus":"affected","packageName":"rhosdt/tempo-rhel9","product":"Red Hat OpenShift distributed tracing 3.9.1","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1778158374","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/8
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"openshift4/ztp-site-generate-rhel8","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/24
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux_ai:3"],"defaultStatus":"affected","packageName":"rhelai3/bootc-azure-cuda-rhel9","product":"Red Hat Enterprise Linux AI (RHEL AI) 3","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/15
{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:multicluster_globalhub:1.3::el9"],"defaultStatus":"affected","packageName":"multicluster-globalhub/multicluster-globalhub-grafana-rhel9","product":"Multicluster Global Hub 1.3.4","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1779212259","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/0
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ai_inference_server:3"],"defaultStatus":"affected","packageName":"rhaiis/vllm-rocm-rhel9","product":"Red Hat AI Inference Server","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/12
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux_ai:3"],"defaultStatus":"affected","packageName":"rhelai3/bootc-gcp-cuda-rhel9","product":"Red Hat Enterprise Linux AI (RHEL AI) 3","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/18
{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:multicluster_globalhub:1.4::el9"],"defaultStatus":"affected","packageName":"multicluster-globalhub/multicluster-globalhub-grafana-rhel9","product":"Red Hat multicluster global hub 1.4.4","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1779579439","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/4
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_distributed_tracing:3"],"defaultStatus":"unaffected","packageName":"rhosdt/opentelemetry-collector-rhel9","product":"Red Hat OpenShift distributed tracing 3","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/25
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:service_mesh:2"],"defaultStatus":"unaffected","packageName":"openshift-service-mesh/istio-rhel8-operator","product":"OpenShift Service Mesh 2","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/9
{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:acm:2.15::el9"],"defaultStatus":"affected","packageName":"rhacm2/acm-grafana-rhel9","product":"Red Hat Advanced Cluster Management for Kubernetes 2.15","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1780677003","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/3
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux_ai:3"],"defaultStatus":"affected","packageName":"rhelai3/bootc-aws-cuda-rhel9","product":"Red Hat Enterprise Linux AI (RHEL AI) 3","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/14
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"],"defaultStatus":"affected","packageName":"rhosdt/tempo-query-rhel9","product":"Red Hat OpenShift distributed tracing 3.9.1","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1778158343","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/affected/7

Provider-owned CVSS observations

2 source assertions
{"metric":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.7,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/metrics/1/cvssV3_1
{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/1/metrics/0/cvssV3_1

CWE assertions

2 source assertions
{"cweId":"CWE-190","description":"Integer Overflow or Wraparound","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/problemTypes/0/descriptions/0
{"cweId":"CWE-190","description":"CWE-190 Integer Overflow or Wraparound","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/cna/problemTypes/0/descriptions/0

Source references

12 source assertions
{"url":"http://www.openwall.com/lists/oss-security/2026/04/28/4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/0/references/0
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:14885"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/references/7
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:21769"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/references/4
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:22347"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/references/8
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:22423"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/references/3
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:23345"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/references/9
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:24539"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/references/6
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:36882"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/references/5
{"tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-41605"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/references/0
{"name":"RHBZ#2463418","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2463418"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/references/1
{"tags":["vendor-advisory"],"url":"https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/cna/references/0
{"tags":["x_sadp-csaf-vex"],"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41605.json"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d82c80babd12707a674a4f1c19254a9c4cb4a27606fde49cb31791f2c6770530 · sha256:f6e29ca26f70587d… · /containers/adp/2/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer