RHSA-2026:9077HighCVSS 7.8

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published
April 20, 2026
Last Modified
August 25, 2026

🔗 CVE IDs covered (5)

CVE-2026-32203 →CVE-2026-33116 →CVE-2026-26131 →CVE-2026-26171 →CVE-2026-32178 →

📋 Description

CVE-2026-26131 — dotnet: .NET: Privilege escalation via incorrect default permissions CVE-2026-26171 — dotnet: .NET: Security Bypass and Denial of Service Vulnerability CVE-2026-32178 — dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw CVE-2026-32203 — dotnet: .NET: Denial of Service via stack overflow CVE-2026-33116 — dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform

🎯 Affected products4

  • Red Hat Hardened Images
  • dotnet10-0-main@aarch64 as a component of Red Hat Hardened Images
  • dotnet10-0-main@src as a component of Red Hat Hardened Images
  • dotnet10-0-main@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security's standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.

🔗 References (9)