RHSA-2026:34365: candlepin Red Hat

CVSS: 8.8v3.1HighPublished

Published 02-07-2026Last modified 20-10-2026

Open JSON

Vulnerability summary

RHSA-2026:34365 is a high (CVSS 8.8) vulnerability in candlepin Red Hat.

Overall risk

35/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.8/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 13 · Downstream 0 · Related 6

CVE-2026-25679 CVE-2026-27727 CVE-2026-32280 CVE-2026-32281 CVE-2026-32282 CVE-2026-32283+7 more

Timeline

02-07-2026
PublishedVulnerability first disclosed.
20-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: Satellite 6.19.2 Async Update

CVSS metrics

1 score · 1 source · 1 version

v3.18.8

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat22 products

candlepin< 0:4.7.5-1.el9sat
candlepin-selinux< 0:4.7.5-1.el9sat
foreman< 0:3.18.0.7-1.el9sat
foreman-cli< 0:3.18.0.7-1.el9sat
foreman-debug< 0:3.18.0.7-1.el9sat

Show all 22

1 vendor · 22 products

References

93 links

access.redhat.com/errata/RHSA-2026:34365Advisory
access.redhat.com/security/updates/classification/ARTICLE
issues.redhat.com/browse/SAT-45957ARTICLE
issues.redhat.com/browse/SAT-46096ARTICLE
issues.redhat.com/browse/SAT-46097ARTICLE
issues.redhat.com/browse/SAT-46098ARTICLE
issues.redhat.com/browse/SAT-46101ARTICLE
issues.redhat.com/browse/SAT-46102ARTICLE
issues.redhat.com/browse/SAT-46103ARTICLE
issues.redhat.com/browse/SAT-46106ARTICLE

Show all 93 references

issues.redhat.com/browse/SAT-46107ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_34365.jsonAdvisory
access.redhat.com/security/cve/CVE-2026-5135REPORT
bugzilla.redhat.com/show_bug.cgi?id=2452230REPORT
www.cve.org/CVERecord?id=CVE-2026-5135Advisory
nvd.nist.gov/vuln/detail/CVE-2026-5135Advisory
access.redhat.com/security/cve/CVE-2026-5136REPORT
bugzilla.redhat.com/show_bug.cgi?id=2452970REPORT
www.cve.org/CVERecord?id=CVE-2026-5136Advisory
nvd.nist.gov/vuln/detail/CVE-2026-5136Advisory
access.redhat.com/security/cve/CVE-2026-5138REPORT
bugzilla.redhat.com/show_bug.cgi?id=2452971REPORT
www.cve.org/CVERecord?id=CVE-2026-5138Advisory
nvd.nist.gov/vuln/detail/CVE-2026-5138Advisory
access.redhat.com/security/cve/CVE-2026-5142REPORT
bugzilla.redhat.com/show_bug.cgi?id=2452999REPORT
www.cve.org/CVERecord?id=CVE-2026-5142Advisory
nvd.nist.gov/vuln/detail/CVE-2026-5142Advisory
access.redhat.com/security/cve/CVE-2026-25679REPORT
bugzilla.redhat.com/show_bug.cgi?id=2445356REPORT
www.cve.org/CVERecord?id=CVE-2026-25679Advisory
nvd.nist.gov/vuln/detail/CVE-2026-25679Advisory
go.dev/cl/752180ARTICLE
go.dev/issue/77578ARTICLE
groups.google.com/g/golang-announce/c/EdhZqrQ98hkARTICLE
pkg.go.dev/vuln/GO-2026-4601Advisory
access.redhat.com/security/cve/CVE-2026-27727REPORT
bugzilla.redhat.com/show_bug.cgi?id=2442671REPORT
www.cve.org/CVERecord?id=CVE-2026-27727Advisory
nvd.nist.gov/vuln/detail/CVE-2026-27727Advisory
github.com/swaldman/mchange-commons-java/security/advisories/GHSA-m2cm-222f-qw44ARTICLE
mogwailabs.de/en/blog/2025/02/c3p0-you-little-rascalARTICLE
www.mchange.com/projects/c3p0/ARTICLE
www.mchange.com/projects/c3p0/ARTICLE
access.redhat.com/security/cve/CVE-2026-32280REPORT
bugzilla.redhat.com/show_bug.cgi?id=2456339REPORT
www.cve.org/CVERecord?id=CVE-2026-32280Advisory
nvd.nist.gov/vuln/detail/CVE-2026-32280Advisory
go.dev/cl/758320ARTICLE
go.dev/issue/78282ARTICLE
groups.google.com/g/golang-announce/c/0uYbvbPZRWUARTICLE
pkg.go.dev/vuln/GO-2026-4947Advisory
access.redhat.com/security/cve/CVE-2026-32281REPORT
bugzilla.redhat.com/show_bug.cgi?id=2456333REPORT
www.cve.org/CVERecord?id=CVE-2026-32281Advisory
nvd.nist.gov/vuln/detail/CVE-2026-32281Advisory
go.dev/cl/758061ARTICLE
go.dev/issue/78281ARTICLE
pkg.go.dev/vuln/GO-2026-4946Advisory
access.redhat.com/security/cve/CVE-2026-32282REPORT
bugzilla.redhat.com/show_bug.cgi?id=2456336REPORT
www.cve.org/CVERecord?id=CVE-2026-32282Advisory
nvd.nist.gov/vuln/detail/CVE-2026-32282Advisory
go.dev/cl/763761ARTICLE
go.dev/issue/78293ARTICLE
pkg.go.dev/vuln/GO-2026-4864Advisory
access.redhat.com/security/cve/CVE-2026-32283REPORT
bugzilla.redhat.com/show_bug.cgi?id=2456338REPORT
www.cve.org/CVERecord?id=CVE-2026-32283Advisory
nvd.nist.gov/vuln/detail/CVE-2026-32283Advisory
go.dev/cl/763767ARTICLE
go.dev/issue/78334ARTICLE
pkg.go.dev/vuln/GO-2026-4870Advisory
access.redhat.com/security/cve/CVE-2026-33810REPORT
bugzilla.redhat.com/show_bug.cgi?id=2456335REPORT
www.cve.org/CVERecord?id=CVE-2026-33810Advisory
nvd.nist.gov/vuln/detail/CVE-2026-33810Advisory
go.dev/cl/763763ARTICLE
go.dev/issue/78332ARTICLE
pkg.go.dev/vuln/GO-2026-4866Advisory
access.redhat.com/security/cve/CVE-2026-40192REPORT
bugzilla.redhat.com/show_bug.cgi?id=2458856REPORT
www.cve.org/CVERecord?id=CVE-2026-40192Advisory
nvd.nist.gov/vuln/detail/CVE-2026-40192Advisory
github.com/python-pillow/Pillow/commit/3cb854e8b2bab43f40e342e665f9340d861aa628ARTICLE
github.com/python-pillow/Pillow/pull/9521ARTICLE
github.com/python-pillow/Pillow/security/advisories/GHSA-whj4-6x5x-4v2jARTICLE
pillow.readthedocs.io/en/stable/releasenotes/12.2.0.htmlARTICLE
access.redhat.com/security/cve/CVE-2026-48526REPORT
bugzilla.redhat.com/show_bug.cgi?id=2482734REPORT
www.cve.org/CVERecord?id=CVE-2026-48526Advisory
nvd.nist.gov/vuln/detail/CVE-2026-48526Advisory
github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wxARTICLE