AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Red HatCVE-2026-9165

Red Hat Advanced Cluster Security 4: denial of service

Red Hat

CVE-2026-9165 · Published Jul 6, 2026 · updated Sep 8, 2026

High7.7
No fix yet
Red Hat advisory

A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). Central does not limit the depth of GraphQL queries served on the authenticated GraphQL API. An authenticated user with a valid API token can send deeply nested queries that cause excessive resource consumption in Central, resulting in a denial of service for the management plane.

Affected versions

PackageAffectedFixed in
Red Hat Advanced Cluster Security 4
Product
all versionsNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-400

More Red Hat advisories

All Red Hat
High 8.0Jul 7Red Hat SSSD: path traversalCVE-2026-14476no fix yetHigh 8.8Jul 7Red Hat SSSD: insecure defaultCVE-2026-14474no fix yetHigh 7.3Jul 7Red Hat GIMP: integer overflowCVE-2026-58384no fix yetMedium 5.5Jul 6Red Hat GIMP. The PlayStation TIM loader: integer overflowCVE-2026-59089no fix yetHigh 7.3Jul 6Red Hat GIMP: memory corruptionCVE-2026-58380no fix yetMedium 4.8Jul 5A flaw exists in the org.keycloak.broker.oidc package where the OIDC broker...CVE-2026-14781no fix yet