VDB
RHSA-2026:56854
RHSA-2026:56854
PUBLISHED
CVSS 7.400000095367432 HIGH
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
Risk Scores
CVSS 3.1
7.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-oauth-server-rhel9@sha256:f0e3636cd6e2ad46328a252d332cfdd67273479a5609dd36a1b294d20ffd940e_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | registry.redhat.io/openshift4/ose-kube-storage-version-migrator-rhel9@sha256:2b6fd645850961fc03f4264c5521376cd9501dab8a5f9fc294f44db7884fbfb6_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:404f3e753265a01bca746f01e909d040245bf29dffffe574f4c1bda3291fb5bd_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | registry.redhat.io/openshift4/ose-multus-cni-microshift-rhel9@sha256:63e29e6052aed28a59b63317d81ac6470eec16f6f30c39c91e5ac93b3d9b529a_s390x as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | registry.redhat.io/openshift4/ose-operator-marketplace-rhel9@sha256:7efb2eaf3710dc677bfbcb432b30b2343269ca4a139cfa81166578bb7f40b81b_s390x as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cli-rhel9@sha256:51614bec06f35364ba8911429ff4dd8f41ca5c60cf9afb64845a9b82b04d1aee_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-olm-rhel9-operator@sha256:df9a5e23a1b05adff2504b4d614a4bdd9d4af5fbc7ba34e43b0e5da51aeb14e8_s390x as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | registry.redhat.io/openshift4/ose-openstack-cinder-csi-driver-rhel9@sha256:ad1f758014864a895140db42afebb1937b7b6db3821bcc15f412c18b83cf8627_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | registry.redhat.io/openshift4/ose-openstack-cloud-controller-manager-rhel9@sha256:303109f9cc690aa717e4e9405ac052eb2c5d6ddf0d748a197945d883120a00ff_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:61a67896cabd7ff21fc85f22259dd045b920c8512a5ece3c5ecb5d511bc146c4_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-cloud-controller-manager-rhel9-operator@sha256:9771f1593f5e9a5cee05802a239e8b6d8f9c4569f7b723a3194a64a34333bac3_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8e1dcd1cd5c4678ffc67a221907a1db96b1d30f38a8d97c5db732aba77e64ed8_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | registry.redhat.io/openshift4/ose-operator-lifecycle-manager-rhel9@sha256:aa9ad491fe3d6732ccd1b90d32b07cdac1cffb6f2b05c51d642b258ebcd97103_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:709775db9dbd207c8c78eb3a97dffb8edd49b830ff219eb437c85af9a981fa43_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9456276dbf618402a907c957fd780a435cdc2290890ee3c1253543a9a6e4a9ad_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | registry.redhat.io/openshift4/ose-docker-registry-rhel9@sha256:a60e5a5a5078c6567809d4d654fffff9b92d1e2a8feadad6fe71a8a474ae1a3b_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-cloud-controller-manager-rhel9-operator@sha256:efe9fd19b191ee4bff88ce1930282926d72fab422b94cc4b5e5ce08a5953d2f6_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-machine-approver-rhel9@sha256:1ad2bb7ca57f18a923eb70b7d05b7a6787b8d31e8c6ac9381f7210569e53329b_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | registry.redhat.io/openshift4/ose-multus-cni-rhel9@sha256:acab52ca27364a710117bb9bf88001cf902501d6c345635e56768ab33fb7d856_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:098f26d6639fb33083a8c1cd3dee57bb6ea70ff13182fd3e24c1ede0bc55537a_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | * |
…and 636 more
Timeline
- Aug 26, 2026 CVE Published
- Oct 14, 2026 CVE Updated
- Oct 14, 2026 Distribution Patch
- Oct 14, 2026 Distribution Patch
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
References
- https://github.com/advisories/GHSA-35jh-r3h4-6jhm advisory
- https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c advisory
- https://access.redhat.com/errata/RHSA-2026:56854 advisory
- https://access.redhat.com/security/cve/CVE-2025-68121 advisory
- https://access.redhat.com/security/cve/CVE-2026-27140 advisory
- https://access.redhat.com/security/cve/CVE-2026-27143 advisory
- https://access.redhat.com/security/cve/CVE-2026-27144 advisory
- https://access.redhat.com/security/cve/CVE-2026-33186 advisory
- https://access.redhat.com/security/cve/CVE-2026-33814 advisory
- https://access.redhat.com/security/cve/CVE-2026-39820 advisory
- https://access.redhat.com/security/cve/CVE-2026-42499 advisory
- https://access.redhat.com/security/cve/CVE-2026-4800 advisory
- https://access.redhat.com/security/cve/CVE-2026-50236 advisory
- https://access.redhat.com/security/cve/CVE-2026-50237 advisory
- https://access.redhat.com/security/cve/CVE-2026-9277 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_56854.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2437111 issue
- https://www.cve.org/CVERecord?id=CVE-2025-68121 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-68121 advisory
…and 65 more