RHSA-2026:59137
Advisory lineage Upstream: 2 Downstream: 0
Upstream
Published: 25 Aug 2026, 10:23
Last modified:16 Sept 2026, 10:12
Vulnerability Summary
Overall Risk (default)
medium
35/100 CVSS Score
8.8 HIGH
3.1 (osv_red_hat)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
25 Aug 2026, 10:23
Published
Vulnerability first disclosed
16 Sept 2026, 10:12
Last Modified
Vulnerability information updated
Description
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update
CVSS Metrics
- v3.1•HIGH•Score: 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Systems
- redhat•automation-controller-cli
< 0:4.8.6-1.el10ap | < 0:4.8.6-1.el9ap
- redhat•python-django
< 0:5.2.17-1.el10ap
- redhat•python3-django
< 0:5.2.17-1.el10ap
- redhat•python3.12-django
< 0:5.2.17-1.el9ap
References (20)
- https://access.redhat.com/errata/RHSA-2026:59137
- https://access.redhat.com/security/updates/classification/#important
- https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7/whats_new-async_updates
- https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7#Upgrade
- https://bugzilla.redhat.com/show_bug.cgi?id=2486729
- https://bugzilla.redhat.com/show_bug.cgi?id=2511095
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59137.json
- https://access.redhat.com/security/cve/CVE-2026-15307
- https://www.cve.org/CVERecord?id=CVE-2026-15307
- https://nvd.nist.gov/vuln/detail/CVE-2026-15307
- https://docs.djangoproject.com/en/dev/releases/security/
- https://github.com/django/django/commit/115ffd0463a765ab1cc93de18e94b5459b8a300e
- https://github.com/django/django/commit/208f80cb682868b584ed0a78f23e4ba6304212aa
- https://github.com/django/django/commit/39b3e2d0c743a338def6c473086ebc06865e86b6
- https://github.com/django/django/commit/f1949c1f9758947ade984c895ff16bef46f56520
- https://groups.google.com/g/django-announce
- https://www.djangoproject.com/weblog/2026/aug/04/security-releases/
- https://access.redhat.com/security/cve/CVE-2026-52902
- https://www.cve.org/CVERecord?id=CVE-2026-52902
- https://nvd.nist.gov/vuln/detail/CVE-2026-52902