VDB
RHSA-2026:79357
RHSA-2026:79357
PUBLISHED
CVSS 5.599999904632568 MEDIUM
Record from redhat · Published October 8, 2026
A flaw was found in libcurl. A logical error in the connection pooling mechanism may cause libcurl to reuse an authenticated connection for an unintended service. This could allow an application to wrongfully reuse an existing connection to the same server that was authenticated for a different service, potentially leading to unauthorized access or information disclosure.
Risk scores
CVSS 3.1
5.599999904632568
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/costmanagement/costmanagement-ui-rhel10@sha256:39700faac93e613fdd8139aed7b6dbb79a4d542f3f3cca6be04c4edce72eaf5d_amd64 as a component of Red Hat Cost Management On-Premise 1 | * |
Timeline
- Oct 8, 2026 CVE Published
- Oct 12, 2026 CVE Updated
- Oct 12, 2026 Distribution Patch (2 in total, the first dated here)
- Oct 12, 2026 Security Advisory (56 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln RHSA-2026:79357
vulnetix vdb fixes RHSA-2026:79357Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/RHSA-2026%3A79357/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-8x5r-mjx8-83hv advisory
- https://www.vulncheck.com/advisories/rsync-algorithmic-complexity-dos-via-hash-search advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2515373 issue
- https://www.cve.org/CVERecord?id=CVE-2026-70454 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-70454 advisory
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-3c3x-ww2w-5r5p advisory
- https://www.vulncheck.com/advisories/rsync-tls-certificate-validation-bypass-via-ssl-openssl-mode advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2515406 issue
- https://www.cve.org/CVERecord?id=CVE-2026-70455 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-70455 advisory
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-rjvj-qgqg-cvx9 advisory
- https://www.vulncheck.com/advisories/rsync-dos-via-zt-zstandard-compression-thread-exhaustion advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2515395 issue
- https://www.cve.org/CVERecord?id=CVE-2026-70456 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-70456 advisory
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-78jc-79jv-v6rw advisory
- https://www.vulncheck.com/advisories/rsync-heap-out-of-bounds-write-via-read-args advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2515407 issue
- https://www.cve.org/CVERecord?id=CVE-2026-70457 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-70457 advisory
…and 311 more