What is RHSA-2026:67571?

RHSA-2026:67571 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: Red Hat Web Terminal Operator 1.13.1 release.

Which CVE IDs does RHSA-2026:67571 cover?

RHSA-2026:67571 covers the following CVE IDs: CVE-2026-33818, CVE-2026-56853, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2026:67571?

RHSA-2026:67571 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

Which products are affected by RHSA-2026:67571?

RHSA-2026:67571 affects 5 products, including: Red Hat Web Terminal 1.13; registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:9183850d0dcd63f2797c95efbdb9d2cb2819297da3a6263ab3a6bd8ca87f1dac_amd64 as a component of Red Hat Web Terminal 1.13; registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:971144ce45abdc4a000822ea97e814612a12c89c53d834bdab5b09b3ee317c7e_amd64 as a component of Red Hat Web Terminal 1.13; registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:764c61d2ba2856753a704bf143bb081002710b11631cd5d7c91a9363208d194f_amd64 as a component of Red Hat Web Terminal 1.13; registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:92404f6ee24cb58305e9c6d44f290cd6a82cdc57dfc1854854a21bab32da560f_amd64 as a component of Red Hat Web Terminal 1.13.

RHSA-2026:67571HighCVSS 7.5

Red Hat Security Advisory: Red Hat Web Terminal Operator 1.13.1 release.

Vendor

Red Hat Product Security

Published

September 15, 2026

Last Modified

October 14, 2026

🔗 CVE IDs covered (5)

CVE-2026-33818 →CVE-2026-56853 →CVE-2026-56859 →CVE-2026-56860 →CVE-2026-56862 →

📋 Description

CVE-2026-33818 — encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-56853 — net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service CVE-2026-56859 — encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue CVE-2026-56860 — net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution CVE-2026-56862 — crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

🎯 Affected products5

Red Hat Web Terminal 1.13
registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:9183850d0dcd63f2797c95efbdb9d2cb2819297da3a6263ab3a6bd8ca87f1dac_amd64 as a component of Red Hat Web Terminal 1.13
registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:971144ce45abdc4a000822ea97e814612a12c89c53d834bdab5b09b3ee317c7e_amd64 as a component of Red Hat Web Terminal 1.13
registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:764c61d2ba2856753a704bf143bb081002710b11631cd5d7c91a9363208d194f_amd64 as a component of Red Hat Web Terminal 1.13
registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:92404f6ee24cb58305e9c6d44f290cd6a82cdc57dfc1854854a21bab32da560f_amd64 as a component of Red Hat Web Terminal 1.13

✅ Remediation

To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.18 or higher. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 CVE IDs covered (5)

📋 Description

🎯 Affected products5

✅ Remediation

🔗 References (13)