RHSA-2026:16874HighCVSS 8.2

Red Hat Security Advisory: Network Observability 1.11.2 for OpenShift

Published
May 13, 2026
Last Modified
August 14, 2026

🔗 CVE IDs covered (13)

CVE-2026-42039 →CVE-2026-42041 →CVE-2026-42043 →CVE-2025-62718 →CVE-2025-69873 →CVE-2026-4800 →CVE-2026-25679 →CVE-2026-32282 →CVE-2026-40175 →CVE-2026-32280 →CVE-2026-40895 →CVE-2026-42033 →CVE-2026-42035 →

📋 Description

CVE-2025-62718 — axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization CVE-2025-69873 — ajv: ReDoS via $data reference CVE-2026-4800 — lodash: lodash: Arbitrary code execution via untrusted input in template imports CVE-2026-25679 — net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-32280 — crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building CVE-2026-32282 — golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root CVE-2026-40175 — axios: Axios: Remote Code Execution via Prototype Pollution escalation CVE-2026-40895 — follow-redirects: follow-redirects: Information disclosure via cross-domain redirects CVE-2026-42033 — axios: Axios: HTTP Transport Hijacking via Prototype Pollution CVE-2026-42035 — axios: Axios: Arbitrary HTTP header injection via prototype pollution CVE-2026-42039 — axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data CVE-2026-42041 — axios: Axios: Authentication bypass due to prototype pollution of HTTP error handling CVE-2026-42043 — axios: Axios: NO_PROXY bypass via crafted URL

🎯 Affected products26

  • Network Observability (NETOBSERV) 1.11.2
  • registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:34419f34d0ae67c8f212caf1ef2676b5d2631857401e9243c3cedfb403a8b0f5_arm64 as a component of Network Observability (NETOBSERV) 1.11.2
  • registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:37effb6127e21b88a237af6559921fdc75ab412d5ca50091439ee2ddc109d93a_ppc64le as a component of Network Observability (NETOBSERV) 1.11.2
  • registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:3d2ae0071d04ec457752b05fa372decdf1ad4ec7bfd14625184744456d71b150_amd64 as a component of Network Observability (NETOBSERV) 1.11.2
  • registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:cb26d81b79328a29cfeded49038bfe9248597adc98a8877b6973a9602bf2fac8_s390x as a component of Network Observability (NETOBSERV) 1.11.2
  • registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:036bb1885155decf5f9a678951122bab77d612d7a508267554a126fb90e3a384_arm64 as a component of Network Observability (NETOBSERV) 1.11.2
  • registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:2548b2b664f5d6630cd49ea9a412941eed178e9932d5eabdec7488c336a911b7_s390x as a component of Network Observability (NETOBSERV) 1.11.2
  • registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:693c5d89ab3f7b13b72d98bfa78f5632589996f48a95220b6b5202bd9bcd8054_ppc64le as a component of Network Observability (NETOBSERV) 1.11.2
  • registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:d61e2799e52a2d7c00f581dddc26358fcec6df8d9663c72b9d2bc0dea3e550ea_amd64 as a component of Network Observability (NETOBSERV) 1.11.2
  • registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:12f64cd35aea9a907db0f11f2f0a346b5a39d1cfca8e851e7c5f5d0f4ff8a456_arm64 as a component of Network Observability (NETOBSERV) 1.11.2
  • registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3a1e2b780939ff380032e94fb2b653f7b738b5a1706b733a9ddedd35f01f65b1_s390x as a component of Network Observability (NETOBSERV) 1.11.2
  • registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e9df7189264996a042194a2a08babad5c703bc0dc69ac6d72e6b8fb4378824f9_amd64 as a component of Network Observability (NETOBSERV) 1.11.2
  • registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:f60d2d51d7971e140fcd2c73107168631b178f5a7eec07fed30fe958ebb7c360_ppc64le as a component of Network Observability (NETOBSERV) 1.11.2
  • registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0bea960a5b46eb1204096eb80204d6f4814580a41f65043d3e10e8f982d2ba4a_arm64 as a component of Network Observability (NETOBSERV) 1.11.2
  • registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:43019d28d2d58f0af12dabcb681fb8c01aff90f8e5e141a72281ed5faf2c1def_amd64 as a component of Network Observability (NETOBSERV) 1.11.2
  • registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7b7ee20cafcdb78df63448e63a2ae5e797494f344bc619d27eaa39e47d81b853_ppc64le as a component of Network Observability (NETOBSERV) 1.11.2
  • registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:cc160fbb3939fc99f543af6ce9fcf9d81b6165c2a0cf4f6984c519393c577428_s390x as a component of Network Observability (NETOBSERV) 1.11.2
  • registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:376f34874cc5734670e73a0830b5b4b8224ae1e8783986e9a8139eda36d59d7c_s390x as a component of Network Observability (NETOBSERV) 1.11.2
  • registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:59a0cc6beb2d4d1de1a30107ad92f93f7d21706d22c547a9916f6f8021e2931f_ppc64le as a component of Network Observability (NETOBSERV) 1.11.2
  • registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5f30dc8addf11a96c9e7323134e2bcf45872e6d7885656b23c8b9f8428d27495_amd64 as a component of Network Observability (NETOBSERV) 1.11.2
  • registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e0f617d537bb574974c138cd72f9f3948cf881b38ea06dbd535889d52a2c9521_arm64 as a component of Network Observability (NETOBSERV) 1.11.2
  • registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:1144012ab4bb84b1f73804cb44a0f0febf2a30a5f41d5b301b9eccd125aa4c76_amd64 as a component of Network Observability (NETOBSERV) 1.11.2
  • registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:1a403eeab4784559f7866c8841d04acb62f8668ff729ac1f37e7a46dbce3ffa5_ppc64le as a component of Network Observability (NETOBSERV) 1.11.2
  • registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:79c5750018bc03c8119de664b624c95ee7d30bd14cb712d6ffab73ef3ae221d6_arm64 as a component of Network Observability (NETOBSERV) 1.11.2
  • registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:a59db5410dea24e7f0d722200a53990c1ec375ddad8567c1c77bada7f14b81d4_amd64 as a component of Network Observability (NETOBSERV) 1.11.2
  • registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:ace6c6f62c97256f64974228f7b88026645e82281c69dda2d3e72ac7ba90e734_s390x as a component of Network Observability (NETOBSERV) 1.11.2

✅ Remediation

For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: To mitigate this issue, disable the $data feature if your application does not require it. If $data must be used, implement strict validation of the input fields that are referenced by the pattern keyword to ensure they contain only expected and safe characters. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (17)