RHSA-2026:7128HighCVSS 9.6

Red Hat Security Advisory: RHACS 4.9.5 security and bug fix update

Published
April 8, 2026
Last Modified
August 20, 2026

🔗 CVE IDs covered (11)

CVE-2026-25940 →CVE-2026-27942 →CVE-2026-31938 →CVE-2026-33036 →CVE-2026-25128 →CVE-2026-25535 →CVE-2026-25755 →CVE-2026-25896 →CVE-2026-26278 →CVE-2026-31898 →CVE-2026-33186 →

📋 Description

CVE-2026-25128 — fast-xml-parser: fast-xml-parser has RangeError DoS Numeric Entities Bug CVE-2026-25535 — jsPDF: denial of service via malicious GIF dimensions CVE-2026-25755 — jsPDF: PDF object injection via unsanitized input in addJS method CVE-2026-25896 — fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling CVE-2026-25940 — jsPDF: PDF injection in AcroForm module allows arbitrary JavaScript execution (RadioButton children) CVE-2026-26278 — fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion CVE-2026-27942 — fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service CVE-2026-31898 — jspdf: jsPDF: Arbitrary code execution via unsanitized input in createAnnotation method CVE-2026-31938 — jspdf: jsPDF: Cross site scripting via unsanitized output options CVE-2026-33036 — fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass CVE-2026-33186 — google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation

🎯 Affected products46

  • Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0fa1b2d7000300a498354f90854e977b104acd7368b55043954027e083330cc7_amd64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:38d7d3976b8dab7c57fa3d836d728d7d8dd4c3708f3ad752f4b7bd8e5e5d9fdb_s390x as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6e95dd436f536f5688e495bb0e4e157ab88082b39088a203624886167be59e16_ppc64le as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:970d5dd053921bbe36ba72ea7a44792eeb3d985fd086e54e718a484e21c3238f_arm64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0e5f83114a1e501dbcb23de8b8fd2c5b8470feab7cee2304da74c65ecfc37c2c_arm64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4e53d49c420aad901e790faff75cb863a5940c75f4ae9222d252cb1184a61032_s390x as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5e598218aea7b7113132dbeafd981ba7be652452efde8ca1bcef0ab780bc3f26_amd64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7afa1136b9335128f9edefa4f01138d8f52eb0825a6b1bdc5de1d2af23ad37b4_ppc64le as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:433c4926f5a93402642d459c627a1ecf65e101a42bcce4042c36858205b93be9_arm64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:96d11ff01950830eac7df626092e231ab3ff78f678fb6ddb3e88bf58dd2bda65_ppc64le as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:e4554b911cb8df3f181ae1c3e8d3d69b2feb2985f71de1e782575b4f92165f96_amd64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:f6c3977c2d562656928aa1b8477b98174a8d26db903954bdfc766cc8dfc17c7d_s390x as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:9f24219801a7240ecf7a08ed16f837adf7166b53a3a32ddab932a144a36b7ebf_amd64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:04d163e1994dec3630cdf2f5b7a4d903369b5e36fcb7b2ab8c65300fa410d541_ppc64le as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:27e501a85a6008eca7284c56c248a72adc62e5c8a918f1455bf0f3c22dd6e1d4_arm64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ad7fad31ecb272845bd5e2e2a37598ccc97d5d88d250dc4bc67e7d26973fcd6b_s390x as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b092ad0814533fec4198ebd3f62a74c45801b0f8c167afb095b0aba7054f50da_amd64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56b6a1298a529b756765c844cd09e6201a7b5caca2cdf8d88a28814628585fa9_s390x as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:86a0e2ae3e5ad51ad5157216ce3c88fdaf4d9761c52083d4f1f4f76e0b223d6e_ppc64le as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a4d435b3cd591330f60ac1198421ce870aa26f6204145431c0de9af4f7237b2d_amd64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a524c2fe87dbe91b9972ad219f226ed7ea6e37af18a55e1568ae06a886b77f89_arm64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:399e4a7cd54180ebdfc032f604d32323c4d37ac073a05931ab515970531a6528_s390x as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:4e4a7bc8db8e40a45974038fb8aa0345f9327d15ae0374d07c9b53e37ffadaab_amd64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9023f51ebcc39adb0d1f7fcce2d7104b1ae00c4b1c69f055c33c07256a8976a9_arm64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:baee5d07635ef3035b4f64910f5e5ae9d718cdd75e720c4ca0d74b98f4ca6fbf_ppc64le as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:2df8ad9a2eca2a463edc913886cfe495cb7d801b224ed8d331954517f4101eb1_ppc64le as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:57c63eeb0553e2589ff009ea4282fc604a80a219c5aa9c5249c86c67ceef0e1b_amd64 as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:81b432dd922d7408be4661517abfa3fd203899749c2e18f101c08f090663d5ad_s390x as a component of Red Hat Advanced Cluster Security 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8815b798e4ae3b11694dda0a577e15b10885185a71375100fd68b4e09b3330fa_arm64 as a component of Red Hat Advanced Cluster Security 4.9
  • +16 more not shown

✅ Remediation

If you are using an earlier version of RHACS, you are advised to upgrade to the version of RHACS mentioned in the synopsis and release notes in order to take advantage of the enhancements, bug fixes, and/or security patches in the release. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: To mitigate this vulnerability, sanitize image data or validate resources fetched from URLs before calling the addImage or html methods, making sure that the width and height header values do not exceed safe and predefined limits. Workaround: To mitigate this vulnerability, sanitize the user-provided JavaScript code before passing it to the addJS method by strictly escaping backslashes and parentheses. Additionally, do not open PDF documents from untrusted sources. Workaround: To mitigate this vulnerability, sanitize the user-provided input before passing it to the AcroformChildClass.appearanceState property or other API members. Additionally, do not open PDF documents from untrusted sources. Workaround: To mitigate this vulnerability, configure applications using the `fast-xml-parser` XML builder to set the `preserveOrder` option to `false`. Alternatively, ensure that all XML input data is thoroughly validated before being passed to the builder to prevent the processing of malicious or malformed content. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.

🔗 References (15)