Loading story…
Red Hat released Important-severity updates for python-pyasn1 to remediate CVE-2026-59886, a remotely reachable denial-of-service vulnerability triggered by crafted ASN.1 REAL values. The flaw can be exploited over the network without authentication or user interaction, with impact confined to service availability; no known exploits were reported.
Affected organizations should update RHEL 8, 9, and 10 systems across x86_64, s390x, ppc64le, and aarch64. Fixed packages include python-pyasn1 0.3.7-6.el8_10.2 for RHEL 8, python-pyasn1/python3-pyasn1/python3-pyasn1-modules 0.4.8-7.el9_8.1 for RHEL 9, and version 0.6.2-1.el10_2.1 for RHEL 10, including applicable extended-support and lifecycle channels.
See affected versions and whether adversaries are exploiting it.
7 events from the most recent confirmed update back to the earliest known activity.
Oracle published advisory ELSA-2026-59242 addressing CVE-2026-59886 for Oracle Linux 9. The advisory covers python3-pyasn1 and python3-pyasn1-modules packages.
Red Hat published Important advisory RHSA-2026:59329 for RHEL 7, updating affected resource-agents packages to address CVE-2026-59886. The update covers resource-agents variants and sap-cluster-connector used in high-availability environments.
Red Hat published RHSA-2026:59245, an Important RHEL 8 update addressing CVE-2026-59886 in affected python-pyasn1 packages. Tenable reported that no known exploits were available at the time of the advisory data.
Red Hat issued Important advisory RHSA-2026:59243 for RHEL 10 to fix CVE-2026-59886. Updated python-pyasn1, python3-pyasn1, and python3-pyasn1-modules packages were made available as version 0.6.2-1.el10_2.1.
Red Hat issued Important advisory RHSA-2026:59242 for RHEL 9, remediating CVE-2026-59886. Fixed python-pyasn1, python3-pyasn1, and python3-pyasn1-modules packages were released as version 0.4.8-7.el9_8.1.
Red Hat issued Important advisory RHSA-2026:59241 for RHEL 8, fixing CVE-2026-59886 in python-pyasn1. Updated packages include python3-pyasn1 and python3-pyasn1-modules version 0.3.7-6.el8_10.2.
CVE-2026-59886, a pyasn1 denial-of-service vulnerability triggered by crafted ASN.1 REAL values, was published. The flaw is remotely reachable and affects availability according to its CVSS vector.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
6 references tracked. Mallory keeps watching after this page renders.
tenable.com
Open sourceaccess.redhat.com
Open sourcetenable.com
Open sourcetenable.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released Important-severity updates for **CVE-2026-55995**, a double-free vulnerability in the iSNS attribute decoder used by open-isns/open-iscsi. An unauthenticated man-in-the-middle attacker could exploit the flaw to crash affected services and cause a denial of service; upstream versions through commit `56718d4e9d1a4f51c30697b5c0534144bb41c9bb` are affected. The fixes are available in `isns-utils-0.101-4.el9_6.1` for RHEL 9.6 service variants and `isns-utils-0.103-1.el10_0.1` for RHEL 10.0, covering x86_64, ARM64/aarch64, IBM Z/s390x, and Power ppc64le platforms. Organizations running affected RHEL systems, including SAP, telecommunications, extended-support, and lifecycle-support deployments, should apply the relevant Red Hat updates.
Sep 1, 2026
Red Hat released **Important** security updates for Node.js packages across **RHEL 8, 9, and 10**, covering `nodejs:22`, `nodejs:24`, and `nodejs22` builds affected by vulnerabilities in bundled or related components. The advisories address **`CVE-2026-69192`** in the `ip-address` JavaScript library, where inconsistent parsing of IPv4 octets with leading zeros can cause applications to treat internal addresses as external, enabling **server-side request forgery (SSRF)** and trust-boundary bypass. Red Hat published errata including **RHSA-2026:54371**, **RHSA-2026:54530**, **RHSA-2026:55601**, **RHSA-2026:55603**, and **RHSA-2026:55541** for affected RHEL product streams and architectures. The updates also fix **`CVE-2026-69152`**, a high-severity denial-of-service flaw in `brace-expansion` that can exhaust memory or block the Node.js event loop through unbounded intermediate arrays, bypassing an earlier mitigation for **`CVE-2026-14257`**. Several advisories additionally include fixes for SQLite FTS5 arbitrary code execution issues bundled with Node.js-related packages. Red Hat said the `ip-address` issue is fixed in version **`10.3.1`**, while affected `brace-expansion` releases are corrected in versions prior to **`1.1.18`**, **`2.1.4`**, **`3.0.6`**, and **`5.0.9`**, with updated Node.js, `npm`, and related development packages now available for supported RHEL platforms.
Sep 4, 2026
Red Hat released Important-rated kernel and `kernel-rt` updates for affected Red Hat Enterprise Linux (RHEL) 8 and 9 deployments, remediating vulnerabilities including **CVE-2023-0386**, a FUSE flaw that allows a low-privileged local user to escalate privileges, and **CVE-2023-0179**, a Netfilter/nftables integer overflow that can disclose memory addresses and potentially enable root-level code execution. The advisories also address use-after-free defects in Bluetooth L2CAP (**CVE-2022-3564**), ALSA PCM handling (**CVE-2023-0266**), and NFSv4.2 server-side copy handling (**CVE-2022-4379**), the latter of which can permit remote denial of service, as well as procfs stack-overflow and TC mirred CPU soft-lockup flaws. The updates span standard kernels, Real Time kernels, and support-channel variants including EUS, AUS, TUS, SAP, NFV, and telecommunications offerings across x86_64, aarch64, s390x, ppc64le, and selected IBM Power systems. Administrators should deploy the applicable updated kernel packages and reboot systems to activate conventional kernel fixes; RHEL 8 customers covered by RHSA-2023:1659 can instead install the updated `kpatch-patch` module, which loads automatically to live-patch four vulnerabilities without a normal reboot.
Aug 26, 2026