RHSA-2026:35940HighCVSS 10.0

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published
July 6, 2026
Last Modified
August 2, 2026

🔗 CVE IDs covered (10)

CVE-2026-57214 →CVE-2026-57215 →CVE-2026-57220 →CVE-2026-57211 →CVE-2026-57213 →CVE-2026-57217 →CVE-2026-57218 →CVE-2026-57219 →CVE-2026-57221 →CVE-2026-57212 →

📋 Description

CVE-2026-57211 — rabbitmq: RabbitMQ: Information disclosure via path validation bypass in management plugin CVE-2026-57212 — rabbitmq-server: RabbitMQ: Denial of Service via oversized JSON bodies in HTTP API CVE-2026-57213 — rabbitmq-server: RabbitMQ: Information Disclosure via Cross-Site Scripting in Federation Management CVE-2026-57214 — RabbitMQ: RabbitMQ: Cross-site Scripting in management UI allows arbitrary JavaScript execution CVE-2026-57215 — RabbitMQ: RabbitMQ: Persistent foreign bindings allow unauthorized message routing CVE-2026-57217 — rabbitmq: RabbitMQ: Authorization bypass allows unauthorized topic writes and binds during metadata-store failures CVE-2026-57218 — rabbitmq-server: RabbitMQ: Information disclosure due to improper consumer reauthorization CVE-2026-57219 — RabbitMQ: RabbitMQ: OAuth 2 client secret disclosure via obsolete API endpoint CVE-2026-57220 — rabbitmq-server: RabbitMQ: Denial of Service via oversized stream frames CVE-2026-57221 — RabbitMQ: RabbitMQ: Information disclosure via authorization bypass in AMQP 0-9-1 operations

🎯 Affected products4

  • Red Hat Hardened Images
  • rabbitmq-server4-2-main@aarch64 as a component of Red Hat Hardened Images
  • rabbitmq-server4-2-main@src as a component of Red Hat Hardened Images
  • rabbitmq-server4-2-main@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/

🔗 References (15)