RHSA-2026:71114: automation-controller-venv-tower Red Hat

CVSS: 9.9v3.1CriticalPublished

Published 24-09-2026Last modified 19-10-2026

Open JSON

Vulnerability summary

RHSA-2026:71114 is a critical (CVSS 9.9) vulnerability in automation-controller-venv-tower Red Hat.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.9/10

010

Critical · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

24-09-2026
PublishedVulnerability first disclosed.
19-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

CVSS metrics

1 score · 1 source · 1 version

v3.19.9

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat6 products

automation-controller-venv-tower< 0:4.6.33-1.el8ap | < 0:4.6.33-1.el9ap
automation-gateway-proxy-server< 0:2.5.10-8.el8ap | < 0:2.6.17-3.el9ap
automation-gateway-server< 0:2.5.20260923-1.el8ap | < 0:2.5.20260923-1.el9ap
python3.12-gitpython< 0:3.1.60-1.el8ap | < 0:3.1.60-1.el9ap
python3.12-sqlparse< 0:0.6.0-1.el8ap | < 0:0.6.0-1.el9ap

Show all 6

1 vendor · 6 products

References

285 links

Show all 100 references

bugzilla.redhat.com/show_bug.cgi?id=2510719REPORT
bugzilla.redhat.com/show_bug.cgi?id=2510722REPORT
bugzilla.redhat.com/show_bug.cgi?id=2512367REPORT
bugzilla.redhat.com/show_bug.cgi?id=2512368REPORT
bugzilla.redhat.com/show_bug.cgi?id=2512369REPORT
bugzilla.redhat.com/show_bug.cgi?id=2512371REPORT
bugzilla.redhat.com/show_bug.cgi?id=2512372REPORT
bugzilla.redhat.com/show_bug.cgi?id=2512374REPORT
bugzilla.redhat.com/show_bug.cgi?id=2512375REPORT
bugzilla.redhat.com/show_bug.cgi?id=2515815REPORT
bugzilla.redhat.com/show_bug.cgi?id=2515820REPORT
bugzilla.redhat.com/show_bug.cgi?id=2515827REPORT
bugzilla.redhat.com/show_bug.cgi?id=2515838REPORT
bugzilla.redhat.com/show_bug.cgi?id=2515839REPORT
bugzilla.redhat.com/show_bug.cgi?id=2515840REPORT
bugzilla.redhat.com/show_bug.cgi?id=2517518REPORT
bugzilla.redhat.com/show_bug.cgi?id=2517523REPORT
bugzilla.redhat.com/show_bug.cgi?id=2517527REPORT
bugzilla.redhat.com/show_bug.cgi?id=2517893REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527046REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527073REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527090REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527096REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527100REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527112REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527117REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527121REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527123REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527126REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527128REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527139REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527140REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527145REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527151REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527154REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527156REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527187REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527189REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527190REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527191REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527195REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527196REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527198REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527199REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527210REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527211REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527213REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527214REPORT
bugzilla.redhat.com/show_bug.cgi?id=2527222REPORT
bugzilla.redhat.com/show_bug.cgi?id=2530744REPORT
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_71114.jsonAdvisory
access.redhat.com/security/cve/CVE-2026-12564REPORT
www.cve.org/CVERecord?id=CVE-2026-12564Advisory
nvd.nist.gov/vuln/detail/CVE-2026-12564Advisory
access.redhat.com/security/cve/CVE-2026-33818REPORT
www.cve.org/CVERecord?id=CVE-2026-33818Advisory
nvd.nist.gov/vuln/detail/CVE-2026-33818Advisory
go.dev/cl/814980ARTICLE
go.dev/issue/80405ARTICLE
groups.google.com/g/golang-announce/c/94pEornpRlIARTICLE
pkg.go.dev/vuln/GO-2026-5972Advisory
access.redhat.com/security/cve/CVE-2026-42504REPORT
www.cve.org/CVERecord?id=CVE-2026-42504Advisory
nvd.nist.gov/vuln/detail/CVE-2026-42504Advisory
go.dev/cl/774481ARTICLE
go.dev/issue/79217ARTICLE
groups.google.com/g/golang-announce/c/tKs3rmcBcKwARTICLE
pkg.go.dev/vuln/GO-2026-5038Advisory
access.redhat.com/security/cve/CVE-2026-54284REPORT
www.cve.org/CVERecord?id=CVE-2026-54284Advisory
nvd.nist.gov/vuln/detail/CVE-2026-54284Advisory
github.com/andialbrecht/sqlparse/commit/939b129e24c0ad5d51368b1aa72fffcaca76f06fARTICLE
github.com/andialbrecht/sqlparse/security/advisories/GHSA-pwgv-4x5q-6m9fARTICLE
access.redhat.com/security/cve/CVE-2026-56853REPORT
www.cve.org/CVERecord?id=CVE-2026-56853Advisory
nvd.nist.gov/vuln/detail/CVE-2026-56853Advisory
go.dev/cl/795540ARTICLE
go.dev/issue/80205ARTICLE
pkg.go.dev/vuln/GO-2026-6089Advisory
access.redhat.com/security/cve/CVE-2026-56858REPORT
www.cve.org/CVERecord?id=CVE-2026-56858Advisory
nvd.nist.gov/vuln/detail/CVE-2026-56858Advisory
go.dev/cl/807100ARTICLE
go.dev/issue/80435ARTICLE
pkg.go.dev/vuln/GO-2026-6091Advisory
access.redhat.com/security/cve/CVE-2026-56859REPORT
www.cve.org/CVERecord?id=CVE-2026-56859Advisory
nvd.nist.gov/vuln/detail/CVE-2026-56859Advisory
go.dev/cl/803320ARTICLE
go.dev/issue/80481ARTICLE

Showing 100 of 285. Use Open JSON for the complete list.