VDB
RHSA-2026:57191
RHSA-2026:57191
PUBLISHED
CVSS 7.400000095367432 HIGH
A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.
Risk Scores
CVSS 3.1
7.400000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:ef9c0127779215de7daa112d1beaac3e8c176ab03a86b61c2250a1e43c0fdaec_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:24319d4c54862dac31e5eceb503fb626762accad6cb434008646d02cf23bde57_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16 | * |
| Red Hat | registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:7b130b370261dc1279188b1ada4ae929aeff27bd749010ba7b55ade0331d554f_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16 | * |
| Red Hat | registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:04366e08e2a03a5f24078cb03b67f36c66787c090a9eec95b1ae55231e4948d7_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:cf6c3b763a17c200c7ef1b105c2ab558203d87abfecc1b9e9af66415373e56b3_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:54eb822ca241db4c7481ef52e9dc1069b957136b114ea4459bf9cbe3c2c6035b_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16 | * |
| Red Hat | registry.redhat.io/rhacm2/thanos-rhel9@sha256:2e90b421bc49e7845fcd4528664f57e52608dbab5b8a628f3a1515d285005612_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16 | * |
| Red Hat | registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:13b72cab9b71cf128eac02fe4c2b54a63e4d75559e64fae055321b4984201238_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:435755aba4f2b2e53134ef7249816d788f0544441dc70e87ead7cf78ed074fdc_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:6c3d3e358287ff955a6fab54274956da72067bdf0d0e2451b6eed96c7fd2ba3a_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:5132e9c25bfa0ac763ec581295eba8833ff22c1cf9d3e0c801daa99a4329407e_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:fda7afaec72c13b9200bb9559cf6586a84c37a3e1105199cb6564936d31c8f8a_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16 | * |
| Red Hat | registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:d8919c8fb893ea8848491fac51a9f3d8fc54a682cfae4adf1c2ff8d682ef0557_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16 | * |
| Red Hat | registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:f83096517feaf64f14d485207b941471864baf00b14abd961e6a5f121618b41f_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16 | * |
| Red Hat | registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:b46a144a0d97f6740da8293a973c4e0e46ed0458afed6d2ba84f14b76de7dbc0_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:01737f39853a4119b0892d2df491c857fa076a99daf888856903e6e3565207f9_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16 | * |
| Red Hat | registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:caa35bd206a8293dd3a6154a8295e0a6d077f447db54f6c1eb43b73ed45e37c2_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16 | * |
| Red Hat | registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:97722f5a9e269cd3d6ff78c64adab8027ff69c151adecc9eb2060ff8ba78ba13_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16 | * |
| Red Hat | registry.redhat.io/rhacm2/console-rhel9@sha256:75910c4198336f86a0b345b116437dd608a35a975a0c92c684a77945b464a66d_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16 | * |
| Red Hat | registry.redhat.io/rhacm2/prometheus-rhel9@sha256:28d158bacb3b94ccfca2b4e6c88e133528d55b9ee2b7e79b05581f707d3c9177_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.16 | * |
…and 168 more
Timeline
- Aug 19, 2026 CVE Published
- Sep 9, 2026 CVE Updated
- Sep 9, 2026 Distribution Patch
- Sep 9, 2026 Distribution Patch
- Sep 9, 2026 Security Advisory
- Sep 9, 2026 Security Advisory
- Sep 9, 2026 Security Advisory
- Sep 9, 2026 Security Advisory
- Sep 9, 2026 Security Advisory
- Sep 9, 2026 Security Advisory
- Sep 9, 2026 Security Advisory
- Sep 9, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:57191 advisory
- https://access.redhat.com/security/cve/CVE-2026-13676 advisory
- https://access.redhat.com/security/cve/CVE-2026-14362 advisory
- https://access.redhat.com/security/cve/CVE-2026-25681 advisory
- https://access.redhat.com/security/cve/CVE-2026-27136 advisory
- https://access.redhat.com/security/cve/CVE-2026-33377 advisory
- https://access.redhat.com/security/cve/CVE-2026-33811 advisory
- https://access.redhat.com/security/cve/CVE-2026-33814 advisory
- https://access.redhat.com/security/cve/CVE-2026-39828 advisory
- https://access.redhat.com/security/cve/CVE-2026-39829 advisory
- https://access.redhat.com/security/cve/CVE-2026-42151 advisory
- https://access.redhat.com/security/cve/CVE-2026-42502 advisory
- https://access.redhat.com/security/cve/CVE-2026-42504 advisory
- https://access.redhat.com/security/cve/CVE-2026-44486 advisory
- https://access.redhat.com/security/cve/CVE-2026-44487 advisory
- https://access.redhat.com/security/cve/CVE-2026-44488 advisory
- https://access.redhat.com/security/cve/CVE-2026-44492 advisory
- https://access.redhat.com/security/cve/CVE-2026-44494 advisory
- https://access.redhat.com/security/cve/CVE-2026-44495 advisory
- https://access.redhat.com/security/cve/CVE-2026-44496 advisory
…and 173 more