VDB
RHSA-2026%3A2500
RHSA-2026%3A2500
PUBLISHED
CVSS 8.699999809265137 HIGH
A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.
Risk Scores
CVSS 3.1
8.699999809265137
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5b68ff2c13f4b8670d68ecf73607ea175b168d8eab620c8c666244d3a4d0b209_amd64 as a component of Multicluster Global Hub 1.4.5 | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5b68ff2c13f4b8670d68ecf73607ea175b168d8eab620c8c666244d3a4d0b209_amd64, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5b68ff2c13f4b8670d68ecf73607ea175b168d8eab620c8c666244d3a4d0b209_amd64, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:5b68ff2c13f4b8670d68ecf73607ea175b168d8eab620c8c666244d3a4d0b209_amd64 |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:8e05f5585404218773a63e7bbc4c93c18cebec7cd963d45fa28215edffca8448_arm64 as a component of Multicluster Global Hub 1.4.5 | *, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:8e05f5585404218773a63e7bbc4c93c18cebec7cd963d45fa28215edffca8448_arm64, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:8e05f5585404218773a63e7bbc4c93c18cebec7cd963d45fa28215edffca8448_arm64 |
| Red Hat | multicluster-globalhub | |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:90aee1f2623f5fb562d1badfbaa9cd993d67642ef3fe6abe523335c6e13df641_ppc64le as a component of Multicluster Global Hub 1.4.5 | *, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:90aee1f2623f5fb562d1badfbaa9cd993d67642ef3fe6abe523335c6e13df641_ppc64le, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2630957b6783b2bf14940c9a153f25e68b2f4f2cdd17f2ed3a23c284b8d71aca_s390x as a component of Multicluster Global Hub 1.4.5 | *, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2630957b6783b2bf14940c9a153f25e68b2f4f2cdd17f2ed3a23c284b8d71aca_s390x, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2630957b6783b2bf14940c9a153f25e68b2f4f2cdd17f2ed3a23c284b8d71aca_s390x |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2630957b6783b2bf14940c9a153f25e68b2f4f2cdd17f2ed3a23c284b8d71aca_s390x as a component of Multicluster Global Hub 1.4.5 | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2630957b6783b2bf14940c9a153f25e68b2f4f2cdd17f2ed3a23c284b8d71aca_s390x, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2630957b6783b2bf14940c9a153f25e68b2f4f2cdd17f2ed3a23c284b8d71aca_s390x, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c48153736d4573aa3cb6f2428fd10d1c08643cb69bc93d42512f561739243bed_amd64 as a component of Multicluster Global Hub 1.4.5 | *, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c48153736d4573aa3cb6f2428fd10d1c08643cb69bc93d42512f561739243bed_amd64, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c48153736d4573aa3cb6f2428fd10d1c08643cb69bc93d42512f561739243bed_amd64 |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:90aee1f2623f5fb562d1badfbaa9cd993d67642ef3fe6abe523335c6e13df641_ppc64le as a component of Multicluster Global Hub 1.4.5 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:e8e63947b14543af7407ec3b4639df3f7fe52198b771473670309c00d6ca8733_s390x as a component of Multicluster Global Hub 1.4.5 | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:e8e63947b14543af7407ec3b4639df3f7fe52198b771473670309c00d6ca8733_s390x, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:e8e63947b14543af7407ec3b4639df3f7fe52198b771473670309c00d6ca8733_s390x, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:e8e63947b14543af7407ec3b4639df3f7fe52198b771473670309c00d6ca8733_s390x |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f8f73e9cadc8c27f13fd947422aa74908f0cc15eb4a340bc110db757a43c6c6e_amd64 as a component of Multicluster Global Hub 1.4.5 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:29f466fffff1ebdb03c69b57e588d1359324280c82c67788195048aed9e022f5_ppc64le as a component of Multicluster Global Hub 1.4.5 | *, *, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:29f466fffff1ebdb03c69b57e588d1359324280c82c67788195048aed9e022f5_ppc64le |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:237007606257d24c4dd11ba15b48a4ab4a385d7c6b259f344ac40427d965ccb7_arm64 as a component of Multicluster Global Hub 1.4.5 | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:237007606257d24c4dd11ba15b48a4ab4a385d7c6b259f344ac40427d965ccb7_arm64, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:237007606257d24c4dd11ba15b48a4ab4a385d7c6b259f344ac40427d965ccb7_arm64, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:237007606257d24c4dd11ba15b48a4ab4a385d7c6b259f344ac40427d965ccb7_arm64 |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c7cdfe50df5e73358f348f0a9b8f7b35c6a5f4298d4bb6bedae7c7b9da882108_arm64 as a component of Multicluster Global Hub 1.4.5 | *, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c7cdfe50df5e73358f348f0a9b8f7b35c6a5f4298d4bb6bedae7c7b9da882108_arm64, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c7cdfe50df5e73358f348f0a9b8f7b35c6a5f4298d4bb6bedae7c7b9da882108_arm64 |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d6773be40f1cac558fe86a9dd564ba3f2570397c0dbe55e037bf05965987b43c_arm64 as a component of Multicluster Global Hub 1.4.5 | *, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d6773be40f1cac558fe86a9dd564ba3f2570397c0dbe55e037bf05965987b43c_arm64, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d6773be40f1cac558fe86a9dd564ba3f2570397c0dbe55e037bf05965987b43c_arm64 |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:64b490a5a70c31874ba08fbe3ac00f8be2ad74198692432a8ee4762b25e40294_ppc64le as a component of Multicluster Global Hub 1.4.5 | *, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:64b490a5a70c31874ba08fbe3ac00f8be2ad74198692432a8ee4762b25e40294_ppc64le, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:bca34c5ced99ce0605bb8ff276e99030c480adf8842f038876095669a0d46f7e_amd64 as a component of Multicluster Global Hub 1.4.5 | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:bca34c5ced99ce0605bb8ff276e99030c480adf8842f038876095669a0d46f7e_amd64, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:bca34c5ced99ce0605bb8ff276e99030c480adf8842f038876095669a0d46f7e_amd64, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:bca34c5ced99ce0605bb8ff276e99030c480adf8842f038876095669a0d46f7e_amd64 |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c7cdfe50df5e73358f348f0a9b8f7b35c6a5f4298d4bb6bedae7c7b9da882108_arm64 as a component of Multicluster Global Hub 1.4.5 | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c7cdfe50df5e73358f348f0a9b8f7b35c6a5f4298d4bb6bedae7c7b9da882108_arm64, *, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c7cdfe50df5e73358f348f0a9b8f7b35c6a5f4298d4bb6bedae7c7b9da882108_arm64 |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6bce9f138d78cd05a30d427afbd6fec50211ae3cba1174f796ec618c8862d8c7_s390x as a component of Multicluster Global Hub 1.4.5 | *, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6bce9f138d78cd05a30d427afbd6fec50211ae3cba1174f796ec618c8862d8c7_s390x, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6bce9f138d78cd05a30d427afbd6fec50211ae3cba1174f796ec618c8862d8c7_s390x |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:945a8497173aaba167a71fb4a393714905dd2d00ede0a4eb09c00c4c59727414_amd64 as a component of Multicluster Global Hub 1.4.5 | *, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:945a8497173aaba167a71fb4a393714905dd2d00ede0a4eb09c00c4c59727414_amd64, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:945a8497173aaba167a71fb4a393714905dd2d00ede0a4eb09c00c4c59727414_amd64 |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c48153736d4573aa3cb6f2428fd10d1c08643cb69bc93d42512f561739243bed_amd64 as a component of Multicluster Global Hub 1.4.5 | *, *, * |
…and 23 more
Timeline
- Feb 11, 2026 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Jul 7, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2026:2500 advisory
- https://access.redhat.com/security/cve/CVE-2025-12816 advisory
- https://access.redhat.com/security/cve/CVE-2025-15284 advisory
- https://access.redhat.com/security/cve/CVE-2025-66418 advisory
- https://access.redhat.com/security/cve/CVE-2025-66471 advisory
- https://access.redhat.com/security/cve/CVE-2025-68429 advisory
- https://access.redhat.com/security/cve/CVE-2026-21441 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2500.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2417097 issue
- https://www.cve.org/CVERecord?id=CVE-2025-12816 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-12816 advisory
- https://github.com/digitalbazaar/forge advisory
- https://github.com/digitalbazaar/forge/pull/1124 advisory
- https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq advisory
- https://kb.cert.org/vuls/id/521113 advisory
- https://www.npmjs.com/package/node-forge advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2425946 issue
- https://www.cve.org/CVERecord?id=CVE-2025-15284 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-15284 advisory
…and 22 more