VDB
RHSA-2026:76752
RHSA-2026:76752
PUBLISHED
CVSS 8.100000381469727 HIGH
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
Risk Scores
CVSS 3.1
8.100000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/compliance/openshift-security-profiles-rhel8-operator@sha256:8bb1e64b1105386b4ddcb4549bb7618b794181e68ec5875e80f3ee99eea528a8_ppc64le as a component of OpenShift Security Profiles Operator 1 | * |
| Red Hat | registry.redhat.io/compliance/openshift-selinuxd-rhel8@sha256:6f35aaaf2d33fff09ecabbff2048781b66f126dd3b1ed034542d8dc5b2b85aa8_amd64 as a component of OpenShift Security Profiles Operator 1 | * |
| Red Hat | registry.redhat.io/compliance/openshift-security-profiles-rhel8-operator@sha256:34ce8f296a463ea17f20f19ec091e9d92a6c8bb403d05639f0bca20c1bfa92c0_amd64 as a component of OpenShift Security Profiles Operator 1 | * |
| Red Hat | registry.redhat.io/compliance/openshift-selinuxd-rhel10@sha256:724605df834be1a7b03b9bbfdcfaf21c47371f79a15cf014a8d7bec2561b45c4_amd64 as a component of OpenShift Security Profiles Operator 1 | * |
| Red Hat | registry.redhat.io/compliance/openshift-security-profiles-operator-bundle@sha256:c72387fec40491e8df9125ca05edfc8809023c91177361bc2fd16f8674d54163_amd64 as a component of OpenShift Security Profiles Operator 1 | * |
| Red Hat | registry.redhat.io/compliance/openshift-selinuxd-rhel9@sha256:0f55528b87d9505b147ede7931c1eb9221bbd4db256c08fbec6d656009059af6_ppc64le as a component of OpenShift Security Profiles Operator 1 | * |
| Red Hat | registry.redhat.io/compliance/openshift-selinuxd-rhel9@sha256:6f90e5ef3592c06e6d26e7bfc7696546a56d879ea75c6acfe44116a7e967f196_amd64 as a component of OpenShift Security Profiles Operator 1 | * |
| Red Hat | registry.redhat.io/compliance/openshift-selinuxd-rhel8@sha256:1541055c8cfb27cdcc42d64476fcab9029961fb4f69a8d7e0b0789757fa61898_ppc64le as a component of OpenShift Security Profiles Operator 1 | * |
| Red Hat | registry.redhat.io/compliance/openshift-selinuxd-rhel10@sha256:4310e1d83cbb157cefb9cffb5f05e43193471297c70a3d120428817a41a3da74_ppc64le as a component of OpenShift Security Profiles Operator 1 | * |
Timeline
- Oct 6, 2026 CVE Published
- Oct 26, 2026 CVE Updated
- Oct 26, 2026 Distribution Patch
- Oct 26, 2026 Distribution Patch
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
- Oct 26, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:76752 advisory
- https://access.redhat.com/security/cve/CVE-2025-68121 advisory
- https://access.redhat.com/security/cve/CVE-2026-25679 advisory
- https://access.redhat.com/security/cve/CVE-2026-27145 advisory
- https://access.redhat.com/security/cve/CVE-2026-32280 advisory
- https://access.redhat.com/security/cve/CVE-2026-32281 advisory
- https://access.redhat.com/security/cve/CVE-2026-32282 advisory
- https://access.redhat.com/security/cve/CVE-2026-32283 advisory
- https://access.redhat.com/security/cve/CVE-2026-33186 advisory
- https://access.redhat.com/security/cve/CVE-2026-33810 advisory
- https://access.redhat.com/security/cve/CVE-2026-33811 advisory
- https://access.redhat.com/security/cve/CVE-2026-33818 advisory
- https://access.redhat.com/security/cve/CVE-2026-34986 advisory
- https://access.redhat.com/security/cve/CVE-2026-39820 advisory
- https://access.redhat.com/security/cve/CVE-2026-39821 advisory
- https://access.redhat.com/security/cve/CVE-2026-39828 advisory
- https://access.redhat.com/security/cve/CVE-2026-39829 advisory
- https://access.redhat.com/security/cve/CVE-2026-39830 advisory
- https://access.redhat.com/security/cve/CVE-2026-39831 advisory
- https://access.redhat.com/security/cve/CVE-2026-39835 advisory
…and 211 more