RHSA-2026:7110HighCVSS 9.6

Red Hat Security Advisory: RHACS 4.8.10 security and bug fix update

Published
April 8, 2026
Last Modified
August 20, 2026

🔗 CVE IDs covered (12)

CVE-2026-25940 →CVE-2026-27942 →CVE-2026-33036 →CVE-2026-33186 →CVE-2026-25128 →CVE-2026-25535 →CVE-2026-25755 →CVE-2026-25896 →CVE-2026-26278 →CVE-2026-29074 →CVE-2026-31898 →CVE-2026-31938 →

📋 Description

CVE-2026-25128 — fast-xml-parser: fast-xml-parser has RangeError DoS Numeric Entities Bug CVE-2026-25535 — jsPDF: denial of service via malicious GIF dimensions CVE-2026-25755 — jsPDF: PDF object injection via unsanitized input in addJS method CVE-2026-25896 — fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling CVE-2026-25940 — jsPDF: PDF injection in AcroForm module allows arbitrary JavaScript execution (RadioButton children) CVE-2026-26278 — fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion CVE-2026-27942 — fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service CVE-2026-29074 — svgo: SVGO: Denial of Service via XML entity expansion CVE-2026-31898 — jspdf: jsPDF: Arbitrary code execution via unsanitized input in createAnnotation method CVE-2026-31938 — jspdf: jsPDF: Cross site scripting via unsanitized output options CVE-2026-33036 — fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass CVE-2026-33186 — google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation

🎯 Affected products46

  • Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:72a20b53279a3a8830af7f7d6812a61425b9a837a83f97f3f54b7050916c3fa3_s390x as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8d5b1983394113e7a4cf8029bb50f2530e858910b7020466b8e6a4933b6dae1a_amd64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:9371852170e6c5b3ddbaaf9ed6700117bac6d791c987814fde375f3301996876_arm64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:cb58f46536545fbc77c9bfc029d772ffa9c09d59db69efbc33e339e8ad294be5_ppc64le as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0c9d3da8882bca445233259f751594ac7fb884b58b22980bd312b97589af064a_ppc64le as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:16ba303094b01480fe620c48fd42df6603979fe17b2b70a1686ea0c0cee7eea7_s390x as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:aede8db305e402acdf3a6cdac67d0bcc54902955f2a54fadf6b13e1e69c6462a_arm64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:c0081d8795d5bb8a32b36fcb892a6864dd62392dc6ef32fc2b9a20449e120743_amd64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5533b87f5a3c9df67608236393d31507dd2b1f0af0ca787997f9dfed44222d9d_amd64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:8a3f82a33e522ce518e52411d48475cb47bea153176b833eace73fc24a5b7672_ppc64le as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c7d8d836b92a80d6d02a8ea73a69d773b0983d9bae4f217b8f4adb39a0e00d86_s390x as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:d9d95fe1014cf1632681171d34f760a1d7ffe81c81df1fb9942c1a08f4ffb857_arm64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:66a5990c109ebfefd445dea871123c2af717cd482b78db4b8aabd7a3eeb61e38_amd64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4f00761fa67936c65ae05c98d28886873321679ed3d0a8741526332e57b2455e_amd64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:5abaa5a39ec732af6d795a087e91ef68483c9897c33cfe1a9de9035484348dec_ppc64le as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:81587f2e1630a5bcdea8c6b4ba1459a3e00e070bd4cb8eac80a923aac18dd4ba_s390x as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c6907a16bc9d855c22a72d3f801ecbc0b0a014468711589c3a2a48afd5b4681c_arm64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:07d8cbd4310eda65e515533621df271cc8ac1818b1b275b50b961cbcc591bf76_ppc64le as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:2b894cfaf6b322e5404e8f6926e6f4b6bc230857b8d7918d78e1e0025c52d2e7_s390x as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4dae0bdb7b8acbef7a2d1eca02b9d1084de550024669d87639bfddfae8a89fba_arm64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9e6efacfc68bf8bdcf7148ce051c79091ef69a485d119e3c098063fa1f4f8470_amd64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2c2762b767c9512634c69fa3ec231f749a61569684d5abcce965d89ea23dcf85_s390x as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4296c95011ba9beaca9f2de8a4287e7b0f859d88bb1025886048c1da85858a3f_ppc64le as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:be836e869ab59f6b479706659afec22ff7739660f6f410ab7dca73c0108fe3f8_amd64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f717ea17f778b7422f8f9800cbe0af01466beb363472b3cac500baffae4f899b_arm64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3e106a6f9ce4cd8dd5e82e21402e6ad0583188c299c7fc246c57c2485b90ad06_s390x as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4a94f65f4fdf3d27ec688042749b6d09d8e435cb1e6d3800a998cf05596ed1a9_arm64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:62b563c730d30a8f349dafe29cdd949ec2d59cd005e978b5837dd100e2366ee8_amd64 as a component of Red Hat Advanced Cluster Security 4.8
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:b774310e45bc427b4cfd9b46ab513fa2d93e0c8867515bced6722b4d4e0c721b_ppc64le as a component of Red Hat Advanced Cluster Security 4.8
  • +16 more not shown

✅ Remediation

If you are using an earlier version of RHACS, you are advised to upgrade to the version of RHACS mentioned in the synopsis and release notes in order to take advantage of the enhancements, bug fixes, and/or security patches in the release. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: To mitigate this vulnerability, sanitize image data or validate resources fetched from URLs before calling the addImage or html methods, making sure that the width and height header values do not exceed safe and predefined limits. Workaround: To mitigate this vulnerability, sanitize the user-provided JavaScript code before passing it to the addJS method by strictly escaping backslashes and parentheses. Additionally, do not open PDF documents from untrusted sources. Workaround: To mitigate this vulnerability, sanitize the user-provided input before passing it to the AcroformChildClass.appearanceState property or other API members. Additionally, do not open PDF documents from untrusted sources. Workaround: To mitigate this vulnerability, configure applications using the `fast-xml-parser` XML builder to set the `preserveOrder` option to `false`. Alternatively, ensure that all XML input data is thoroughly validated before being passed to the builder to prevent the processing of malicious or malformed content. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.

🔗 References (16)