VDB

RHSA-2026%3A4652

RHSA-2026%3A4652 PUBLISHED CVSS 7.800000190734863 HIGH

Record from OSV · Published March 16, 2026

Red Hat Security Advisory: grub2 security update

Risk scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

VendorProductVersions
Red Hat:enterprise_linux_eus:10.0grub2-tools-minimal-debuginfo0, 0
Red Hat:enterprise_linux_eus:10.0grub2-efi-aa64-cdboot0, 0
Red Hat:enterprise_linux_eus:10.0grub2-tools-debuginfo0, 0
Red Hat:enterprise_linux_eus:10.0grub2-tools0, 0
Red Hat:enterprise_linux_eus:10.0grub2-emu-debuginfo0, 0
Red Hat:enterprise_linux_eus:10.0grub2-debugsource0, 0
Red Hat:enterprise_linux_eus:10.0grub2-common0, 0
Red Hat:enterprise_linux_eus:10.0grub2-tools-extra0, 0
Red Hat:enterprise_linux_eus:10.0grub20, 0
Red Hat:enterprise_linux_eus:10.0grub2-efi-x640, 0
Red Hat:enterprise_linux_eus:10.0grub2-efi-aa64-modules0, 0
Red Hat:enterprise_linux_eus:10.0grub2-pc-modules0, 0
Red Hat:enterprise_linux_eus:10.0grub2-efi-x64-cdboot0, 0
Red Hat:enterprise_linux_eus:10.0grub2-ppc64le0, 0
Red Hat:enterprise_linux_eus:10.0grub2-debuginfo0, 0
Red Hat:enterprise_linux_eus:10.0grub2-ppc64le-modules0, 0
Red Hat:enterprise_linux_eus:10.0grub2-tools-efi-debuginfo0, 0
Red Hat:enterprise_linux_eus:10.0grub2-efi-aa640, 0
Red Hat:enterprise_linux_eus:10.0grub2-efi-x64-modules0, 0
Red Hat:enterprise_linux_eus:10.0grub2-tools-efi0, 0

…and 3 more

Timeline

  • Mar 16, 2026 CVE Published
  • May 1, 2026 Distribution Patch (2 in total, the first dated here)
  • May 1, 2026 Security Advisory (2 in total, the first dated here)
  • May 14, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln RHSA-2026%3A4652
vulnetix vdb fixes RHSA-2026%3A4652

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/RHSA-2026%253A4652/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›