CVE-2026-0994
published 2026-01-23CVE-2026-0994: A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when…
PriorityP344high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.61%
45.3th percentile
A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.
Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | protobuf | — | — |
| protobuf | <= 33.4 | — | |
| protobuf | >= 0 < 5.29.6 | 5.29.6 | |
| protobuf | >= 6.30.0rc1 < 6.33.5 | 6.33.5 | |
| python | protobuf | — | — |
| ubuntu | protobuf | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv4.08.2HIGHCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
osv8.2HIGH
vendor_debian8.2HIGH
vendor_redhat8.2HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Protobuf V33.0 google.protobuf.json_format.ParseDict recursion (Nessus ID 296422 / WID-SEC-2026-0480)
vuldb·2026-06-30·CVSS 7.5
CVE-2026-0994 [HIGH] Protobuf V33.0 google.protobuf.json_format.ParseDict recursion (Nessus ID 296422 / WID-SEC-2026-0480)
A vulnerability identified as problematic has been detected in Protobuf V33.0. Affected is the function google.protobuf.json_format.ParseDict. Performing a manipulation results in uncontrolled recursion.
This vulnerability is identified as CVE-2026-0994. The attack can be initiated remotely. There is not any exploit available.
OSV
CVE-2026-0994: A denial-of-service (DoS) vulnerability exists in google
osv·2026-01-23·CVSS 8.2
CVE-2026-0994 [HIGH] CVE-2026-0994: A denial-of-service (DoS) vulnerability exists in google
A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.
OSV
protobuf affected by a JSON recursion depth bypass
osv·2026-01-23
CVE-2026-0994 [HIGH] protobuf affected by a JSON recursion depth bypass
protobuf affected by a JSON recursion depth bypass
A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.
Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.
GHSA
protobuf affected by a JSON recursion depth bypass
ghsa·2026-01-23
CVE-2026-0994 [HIGH] CWE-674 protobuf affected by a JSON recursion depth bypass
protobuf affected by a JSON recursion depth bypass
A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.
Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.
Ubuntu
Protocol Buffers vulnerability
vendor_ubuntu·2026-05-26
CVE-2026-0994 Protocol Buffers vulnerability
Title: Protocol Buffers vulnerability
Summary: Protocol Buffers could be made to consume resources if it received
specially crafted input.
USN-8063-1 fixed a vulnerability in Protocol Buffers. This update provides
the corresponding update for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
Original advisory details:
It was discovered that Protocol Buffers incorrectly handled recursion
when the Python google.protobuf.json_format.ParseDict() function is being
used. An attacker could possibly use this issue to cause Protocol Buffers
to consume resources, resulting in a denial of service.
Instructions: In general, a standard system update will make all the necessary changes.
Ubuntu
Protocol Buffers vulnerability
vendor_ubuntu·2026-02-25
CVE-2026-0994 Protocol Buffers vulnerability
Title: Protocol Buffers vulnerability
Summary: Protocol Buffers could be made to consume resources if it received
specially crafted input.
It was discovered that Protocol Buffers incorrectly handled recursion when
the Python google.protobuf.json_format.ParseDict() function is being used.
An attacker could possibly use this issue to cause Protocol Buffers to
consume resources, resulting in a denial of service.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
python: protobuf: Protobuf: Denial of Service due to recursion depth bypass
vendor_redhat·2026-01-23·CVSS 8.2
CVE-2026-0994 [HIGH] CWE-674 python: protobuf: Protobuf: Denial of Service due to recursion depth bypass
python: protobuf: Protobuf: Denial of Service due to recursion depth bypass
A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.
Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.
A flaw was found in protobuf. A remote attacker can exploit this denial-of-service (DoS) vulnerability by supplying deeply nested `google.protobuf.Any` messages to the `google.protobuf.json_format.ParseDict()` function. This bypasses the intended recursion depth lim
Debian
CVE-2026-0994: protobuf - A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.Pa...
vendor_debian·2026·CVSS 8.2
CVE-2026-0994 [HIGH] CVE-2026-0994: protobuf - A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.Pa...
A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
No detection rules found.
No public exploits indexed.
Wiz
CVE-2026-21968 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 6.5
CVE-2026-21968 [MEDIUM] CVE-2026-21968 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-21968 :
MySQL vulnerability analysis and mitigation
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Source : NVD
## 6.5
Score
Published January 20, 2026
Severity MEDIUM
CNA Score 6.5
Affected Technologies
MySQL
MariaDB Server
Has Public Exploit No
Wiz
CVE-2026-21936 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 4.9
CVE-2026-21936 [MEDIUM] CVE-2026-21936 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-21936 :
MySQL vulnerability analysis and mitigation
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Source : NVD
## 4.9
Score
Published January 20, 2026
Severity MEDIUM
CNA Score 4.9
Affected Technologies
MySQL
MySQL Cluster
Has Public Exploit No
Has CISA KE
Wiz
CVE-2026-21948 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 4.9
CVE-2026-21948 [MEDIUM] CVE-2026-21948 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-21948 :
MySQL vulnerability analysis and mitigation
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Source : NVD
## 4.9
Score
Published January 20, 2026
Severity MEDIUM
CNA Score 4.9
Affected Technologies
MySQL
Rocky Linux
Has Public Exploit No
Ha
Wiz
CVE-2026-21964 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 4.9
CVE-2026-21964 [MEDIUM] CVE-2026-21964 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-21964 :
MySQL vulnerability analysis and mitigation
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Source : NVD
## 4.9
Score
Published January 20, 2026
Severity MEDIUM
CNA Score 4.9
Affected Technologies
MySQL
Rocky Linux
Has Public Exploit N
Wiz
CVE-2026-0994 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 8.2
CVE-2026-0994 [HIGH] CVE-2026-0994 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-0994 :
MySQL vulnerability analysis and mitigation
A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.
Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.
Source : NVD
## 8.2
Score
Published January 23, 2026
Severity HIGH
CNA Score 8.2
Affected Technologies
MySQL
Python
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 7.2
Expl
Wiz
CVE-2026-21950 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 8.2
CVE-2026-21950 [HIGH] CVE-2026-21950 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-21950 :
MySQL vulnerability analysis and mitigation
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.0.0-9.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Source : NVD
## 6.5
Score
Published January 20, 2026
Severity MEDIUM
CNA Score 6.5
Affected Technologies
MySQL
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date
Wiz
CVE-2026-21965 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 8.2
CVE-2026-21965 [HIGH] CVE-2026-21965 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-21965 :
MySQL vulnerability analysis and mitigation
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).
Source : NVD
## 2.7
Score
Published January 20, 2026
Severity LOW
CNA Score 2.7
Affected Technologies
MySQL
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CI
Wiz
CVE-2026-21929 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 8.2
CVE-2026-21929 [HIGH] CVE-2026-21929 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-21929 :
MySQL vulnerability analysis and mitigation
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 9.0.0-9.5.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
Source : NVD
## 5.3
Score
Published January 20, 2026
Severity MEDIUM
CNA Score 5.3
Affected Technologies
MySQL
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date
Wiz
CVE-2026-21952 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 8.2
CVE-2026-21952 [HIGH] CVE-2026-21952 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-21952 :
MySQL vulnerability analysis and mitigation
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Source : NVD
## 4.9
Score
Published January 20, 2026
Severity MEDIUM
CNA Score 4.9
Affected Technologies
MySQL
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N
Wiz
CVE-2026-21949 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 8.2
CVE-2026-21949 [HIGH] CVE-2026-21949 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-21949 :
MySQL vulnerability analysis and mitigation
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.0.0-9.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Source : NVD
## 6.5
Score
Published January 20, 2026
Severity MEDIUM
CNA Score 6.5
Affected Technologies
MySQL
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date
Wiz
CVE-2026-21941 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 4.9
CVE-2026-21941 [MEDIUM] CVE-2026-21941 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-21941 :
MySQL vulnerability analysis and mitigation
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Source : NVD
## 4.9
Score
Published January 20, 2026
Severity MEDIUM
CNA Score 4.9
Affected Technologies
MySQL
Rocky Linux
Has Public Exploit No
Ha
Wiz
CVE-2026-21937 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 4.9
CVE-2026-21937 [MEDIUM] CVE-2026-21937 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-21937 :
MySQL vulnerability analysis and mitigation
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Source : NVD
## 4.9
Score
Published January 20, 2026
Severity MEDIUM
CNA Score 4.9
Affected Technologies
MySQL
Rocky Linux
Has Public Exploit No
Has CISA
Bugzilla
CVE-2026-0994 protobuf: Denial of Service in Python Protobuf [fedora-42]
bugzilla·2026-01-26·CVSS 8.2
CVE-2026-0994 [HIGH] CVE-2026-0994 protobuf: Denial of Service in Python Protobuf [fedora-42]
CVE-2026-0994 protobuf: Denial of Service in Python Protobuf [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to close all bug reports from releases that are no longer
maintained. At that time this bug will be closed as EOL if it remains open with a
'version' of '42'.
Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, change the 'version'
to
Bugzilla
CVE-2026-0994 mingw-protobuf: Denial of Service in Python Protobuf [fedora-42]
bugzilla·2026-01-26·CVSS 8.2
CVE-2026-0994 [HIGH] CVE-2026-0994 mingw-protobuf: Denial of Service in Python Protobuf [fedora-42]
CVE-2026-0994 mingw-protobuf: Denial of Service in Python Protobuf [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to close all bug reports from releases that are no longer
maintained. At that time this bug will be closed as EOL if it remains open with a
'version' of '42'.
Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, change the 'versio
Bugzilla
CVE-2026-0994 python: protobuf: Protobuf: Denial of Service due to recursion depth bypass
bugzilla·2026-01-23·CVSS 8.2
CVE-2026-0994 [HIGH] CVE-2026-0994 python: protobuf: Protobuf: Denial of Service due to recursion depth bypass
CVE-2026-0994 python: protobuf: Protobuf: Denial of Service due to recursion depth bypass
A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.
Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 9.4 Extended Update Support
Via RHSA-2026:3059 https://access.redhat.com/errata/RHSA-2026:3059
---
This issue has been addressed in the following produc
https://github.com/protocolbuffers/protobuf/pull/25239https://access.redhat.com/errata/RHSA-2026:16174https://access.redhat.com/errata/RHSA-2026:3059https://access.redhat.com/errata/RHSA-2026:3094https://access.redhat.com/errata/RHSA-2026:3095https://access.redhat.com/errata/RHSA-2026:3097https://access.redhat.com/errata/RHSA-2026:3218https://access.redhat.com/errata/RHSA-2026:3219https://access.redhat.com/errata/RHSA-2026:3220https://access.redhat.com/errata/RHSA-2026:3461https://access.redhat.com/errata/RHSA-2026:3462https://access.redhat.com/errata/RHSA-2026:3958https://access.redhat.com/errata/RHSA-2026:3959https://access.redhat.com/errata/RHSA-2026:8746https://access.redhat.com/errata/RHSA-2026:8747https://access.redhat.com/errata/RHSA-2026:8748https://access.redhat.com/security/cve/CVE-2026-0994https://bugzilla.redhat.com/show_bug.cgi?id=2432398https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0994.json
2026-01-23
Published