Skip to main content
View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

  1. Recon
    Gain local system access
  2. Delivery
    Identify GLib-dependent process
  3. Exploit
    Craft URI with massive escapable characters
  4. Install
    Trigger g_escape_uri_string() call
  5. C2
    Integer overflow in size calculation
  6. Execute
    Undersized heap allocation
  7. Impact
    Buffer overflow during write
  8. Step 8
    Process crash or code execution

Vulnerability Assessment

Weakness
CWE
CWE-190
OWASP Top 10:2025
A06:2021 - Vulnerable and Outdated Components
ASVS 5.0
V15 - Secure Coding and Architecture Integer overflow checks
MITRE ATT&CK

1 technique across 1 tactic: Execution

The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up.

Sign in to read
Exploitation Conditions

Local access to the target system running affected GLib versions on Red Hat Enterprise Linux 9.0 or 10.0. Attacker must be able to provide input to an application or system component that calls g_escape_uri_string() on attacker-controlled data. Specifically requires the ability to supply a URI string containing a very large number of characters that require percent-encoding (unacceptable characters in URI context such as spaces, special characters, or non-ASCII bytes). The integer overflow condition requires sufficient quantity of escapable characters to cause the length calculation to wrap around, which sets a practical minimum input size threshold. No authentication, privileges, or user interaction required per CVSS vector (PR:N/UI:N), but exploitation is limited to local attack vector (AV:L) - remote exploitation is not possible without chaining with another vulnerability that provides local code execution. The unscoped impact (S:U) means exploitation affects only the vulnerable GLib component, not other system resources.
Impact

The CVSS 7.7 score reflects local attack vector (AV:L) with low complexity (AC:L) and no privileges required (PR:N), indicating that any local user or process can trigger the vulnerability without authentication. However, real-world risk signals show significant divergence: EPSS exploitation probability is remarkably low at 0.01% (1st percentile), suggesting security researchers and attackers are not prioritizing this vulnerability despite public exploit code availability. The vulnerability is NOT listed in CISA KEV, confirming no known active exploitation in the wild. The local-only attack vector substantially limits weaponization potential compared to network-exploitable flaws. The CVSS vector indicates high integrity and availability impact but no confidentiality impact (C:N/I:H/A:H), suggesting the overflow is more likely to cause crashes or limited memory corruption rather than information disclosure. The requirement for 'a very large number of unacceptable characters' creates a practical exploitation barrier - attackers must control input to g_escape_uri_string() and provide crafted strings of sufficient length to trigger the integer overflow. For SSVC decision framework: exploitation status is POC-only (not active), technical impact is partial (I/A but not C), and automatable potential is limited by local access requirement. This is a patch-when-convenient priority for most organizations unless GLib is exposed in privileged contexts processing untrusted URI input.
Exploit ScenarioDerived

A local attacker with unprivileged access to a RHEL 9.0 system runs a malicious program or script that invokes a GLib-dependent application (such as a GNOME utility or system daemon) with a specially crafted URI string containing thousands of characters requiring percent-encoding. The crafted input triggers integer overflow in g_escape_uri_string()'s buffer size calculation, causing heap corruption that could lead to application crash (denial of service) or potentially arbitrary code execution in the context of the vulnerable process. Public proof-of-concept code demonstrating the integer overflow condition is available, lowering the technical barrier for exploitation.
Act Now Prioritize within 24-48h. Why: Active threat signals + CRITICAL/HIGH severity.
Patch available 0.0% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv2 – Apr 19, 2026

Heap-based buffer overflow in GLib's g_escape_uri_string() function allows local attackers to achieve high-integrity and high-availability impacts through integer overflow in escaped string length calculation. The vulnerability affects Red Hat Enterprise Linux 9.0 and 10.0 across multiple architectures (x86_64, ARM64, IBM Z, PowerPC). Vendor patches are available via multiple RHSA advisories. Publicly available exploit code exists, but EPSS score remains extremely low (0.01%, 1st percentile), suggesting minimal real-world exploitation activity despite the availability of technical details.

Earlier versions of this analysis (1)
v1 Mar 19, 2026 - 06:22 CVSS 7.7

A heap-based buffer overflow vulnerability exists in the glib library's g_escape_uri_string() function due to an integer overflow in buffer size calculation when processing strings with a very large number of characters requiring URI escaping. This vulnerability affects multiple Red Hat Enterprise Linux 9.0 and 10.0 distributions across various architectures (x86_64, ARM64, IBM Z, Power). A proof-of-concept exploit is publicly available, though EPSS scoring indicates only 0.01% exploitation probability (1st percentile), suggesting limited active exploitation in the wild despite the availability of exploit code.

RemediationAI

Apply vendor-released patches from Red Hat security advisories corresponding to your specific RHEL version and architecture using standard package management (dnf update glib2 or yum update glib2). For RHEL 9.0 systems, consult advisories RHSA-2026:0936, RHSA-2026:0975, RHSA-2026:0991, RHSA-2026:1323-1327, RHSA-2026:1465, and RHSA-2026:1608. For RHEL 10.0 systems, reference RHSA-2026:1624-1627, RHSA-2026:1652, and RHSA-2026:1736. Complete advisory URLs and architecture-specific package details are available at access.redhat.com/errata. If immediate patching is not feasible, implement application-level input validation to restrict URI string length processed by GLib-dependent applications, though this workaround has limited effectiveness since GLib is a dependency of numerous system components and enforcing length limits may break legitimate functionality. Monitor processes using GLib for unexpected crashes that could indicate exploitation attempts, and consider restricting local access privileges to reduce attack surface, though the PR:N vector means even unprivileged local users can trigger the condition.

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Sign in to check
Technical ContextAI · show details

GLib is a foundational low-level library providing core application building blocks for C programs, including data structure handling, portability wrappers, and utilities like URI string manipulation. The g_escape_uri_string() function is designed to percent-encode characters in URI strings that are not allowed in specific URI components. The vulnerability stems from CWE-190 (Integer Overflow or Wraparound) in the buffer size calculation logic when processing strings containing an extremely large number of characters requiring escaping. When calculating the length needed for the escaped output, the integer arithmetic overflows, resulting in allocation of an undersized buffer on the heap. Subsequent write operations during the escaping process then write beyond the allocated buffer boundary, creating a heap-based buffer overflow condition. This affects systems using GLib as a dependency, which includes numerous GNOME applications and system utilities across Red Hat Enterprise Linux distributions on x86_64, aarch64, s390x, and ppc64le architectures.

Know when Glib gets its next vulnerability

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Vendor (redhat) PRIMARY 7.7 HIGH
AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
SUSE HIGH
Red Hat 7.7 MEDIUM

Primary rating from Vendor (redhat).

CVSS VectorVendor: redhat

Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
High

Lifecycle Timeline

3
Patch released
Mar 31, 2026 - 21:13 nvd
Patch available
PoC Detected
Mar 19, 2026 - 06:16 vuln.today
Public exploit code
CVE Published
Nov 26, 2025 - 15:15 nvd
HIGH 7.7

DescriptionCVE.org

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.

Executive ViewAI

Why It Matters

CVE-2025-13601 is a heap buffer overflow in GLib affecting Red Hat Enterprise Linux 9.0 and 10.0 that could allow local attackers to crash systems or execute code with elevated privileges. While publicly available exploit code exists, the extremely low EPSS score (0.01%) indicates minimal real-world exploitation activity to date. Organizations running affected RHEL versions should prioritize patching to eliminate this local attack vector.

Business Impact: High
Compensating Controls

Apply vendor patch. If patching cannot be immediately deployed: restrict local system access to trusted users only, disable unnecessary local user accounts, implement host-based access controls to limit process execution privileges, and monitor system logs for unusual process termination or segmentation faults indicative of exploitation attempts.

Threat Intelligence Overview

Threat Score
5.0/10
Composite threat intelligence
EPSS Score
0.0%
Top 99% exploitable
Threat Intel
1
1 source
Exploit
POC
Public exploit code exists
Data Quality
6 sources
Confidence: High
NVD CVE.org EPSS CISA Vendor VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity HIGH
CISA KEV No
Public POC Yes
EPSS 0.0%
Patch available Yes
Active threat Yes
Deciding rule
Active threat signals + CRITICAL/HIGH severity
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived
Scheduled
Exploitation· derived
Poc
System Exposure· derived
Small
Automatable· derived
No
Human Impact
High

Priority Score

68
Low Medium High Critical
KEV: 0
EPSS: 0
CVSS: +38
PoC: +20
Weaponized: 0
Threat intel: +10
Gov advisory: 0

Attack Technique

Buffer Overflow HIGH

A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.

Integer Overflow MEDIUM

Integer overflow occurs when an arithmetic operation produces a result that exceeds the maximum value a given integer type can store.

Affected Products (CPE)CVE.org

cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:aarch64:*
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder_for_x86_64:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0:*:*:*:*:*:aarch64:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_x86_64:9.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:10.0:*:*:*:*:*:aarch64:*
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:10.0_s390x:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:10.0_ppc64le:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder_for_x86_64:10.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:10.0:*:*:*:*:*:aarch64:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:10.0_s390x:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:10.0_ppc64le:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_x86_64:10.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:8.0:*:*:*:*:*:aarch64:*
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder_for_x86_64:8.0:*:*:*:*:*:*:*
+ 82 more

More in Glib

View all
CVE-2024-52533 CRITICAL POC
9.8 Nov 11

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CON
CVE-2018-16428 CRITICAL POC
9.8 Sep 04

In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference. Rated critical sev
CVE-2021-27219 HIGH POC
7.5 Feb 15

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. Rated high severity (CVSS 7.5), this vulne
CVE-2020-35457 HIGH POC
7.8 Dec 14

GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entri
CVE-2018-16429 HIGH POC
7.5 Sep 04

GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c, related to utf
CVE-2020-6750 MEDIUM POC
5.9 Jan 09

GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting v
CVE-2025-14087 CRITICAL
9.8 Dec 10

Heap corruption in GLib (GNOME's core C utility library) lets remote attackers trigger a buffer-underflow in the GVarian
CVE-2021-28153 MEDIUM POC
5.3 Mar 11

An issue was discovered in GNOME GLib before 2.66.8. Rated medium severity (CVSS 5.3), this vulnerability is remotely ex
CVE-2019-12450 CRITICAL
9.8 May 29

file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while

CVE-2024-34397 MEDIUM POC
5.2 May 07

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. Rated medium severity (CVSS 5.
CVE-2026-58016 CRITICAL
9.1 Jun 30

Denial of service in GNOME GLib (versions before 2.88.1) arises when g_dbus_node_info_new_for_xml() parses malformed D-B
CVE-2026-58014 HIGH
8.6 Jun 30

Denial of service (and a 1-byte out-of-bounds read) in GNOME GLib before 2.88.1 arises from an off-by-one error in g_key

Same weakness CWE-190 – Integer Overflow or Wraparound

View all
CVE-2013-2729 CRITICAL POC
9.8
CVE-2015-8651 HIGH
8.8
CVE-2012-5054 HIGH POC
8.8
CVE-2014-0569 CRITICAL POC
9.3
CVE-2023-21716 CRITICAL POC
9.8
CVE-2017-3599 HIGH POC
7.5
CVE-2017-7529 HIGH
7.5
CVE-2016-1010 HIGH
8.8

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2020-0796 CRITICAL POC
10.0
CVE-2019-11043 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: High
Product Status
Container suse/manager/4.3/proxy-httpd:4.3.16.2.9.73.4 Container suse/sle-micro/base-5.5:2.0.4-5.8.230 Container suse/sle-micro/kvm-5.5:2.0.4-3.5.441 Image SLES15-SP4-BYOS Image SLES15-SP4-BYOS-Azure Image SLES15-SP4-BYOS-EC2 Image SLES15-SP4-BYOS-GCE Image SLES15-SP4-HPC-BYOS Image SLES15-SP4-HPC-BYOS-Azure Image SLES15-SP4-HPC-BYOS-EC2 Image SLES15-SP4-HPC-BYOS-GCE Image SLES15-SP4-HPC-EC2 Image SLES15-SP4-HPC-GCE Image SLES15-SP4-Hardened-BYOS Image SLES15-SP4-Hardened-BYOS-Azure Image SLES15-SP4-Hardened-BYOS-EC2 Image SLES15-SP4-Hardened-BYOS-GCE Image SLES15-SP4-Manager-Server-4-3-BYOS Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE Image SLES15-SP4-Micro-5-3-BYOS Image SLES15-SP4-Micro-5-3-BYOS-Azure Image SLES15-SP4-Micro-5-4-BYOS Image SLES15-SP4-Micro-5-4-BYOS-Azure Image SLES15-SP5-Azure-3P Image SLES15-SP5-Azure-Basic Image SLES15-SP5-Azure-Standard Image SLES15-SP5-BYOS-Azure Image SLES15-SP5-BYOS-EC2 Image SLES15-SP5-BYOS-GCE Image SLES15-SP5-EC2 Image SLES15-SP5-GCE Image SLES15-SP5-HPC-Azure Image SLES15-SP5-HPC-BYOS-Azure Image SLES15-SP5-HPC-BYOS-EC2 Image SLES15-SP5-HPC-BYOS-GCE Image SLES15-SP5-Hardened-BYOS-Azure Image SLES15-SP5-Hardened-BYOS-EC2 Image SLES15-SP5-Hardened-BYOS-GCE Image SLES15-SP5-Micro-5-5 Image SLES15-SP5-Micro-5-5-Azure Image SLES15-SP5-Micro-5-5-BYOS Image SLES15-SP5-Micro-5-5-BYOS-Azure Image SLES15-SP5-Micro-5-5-EC2 Affected
Container suse/manager/4.3/proxy-salt-broker:4.3.16.2.9.63.4 Affected
Container suse/manager/5.0/x86_64/proxy-httpd:latest Container suse/manager/5.0/x86_64/server:latest Container suse/multi-linux-manager/5.1/x86_64/proxy-httpd:5.1.2.8.15.2 Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:5.1.2.9.13.2 Container suse/multi-linux-manager/5.1/x86_64/server:5.1.2.8.13.2 Image SLES15-SP6 Image SLES15-SP6-Azure-3P Image SLES15-SP6-Azure-Basic Image SLES15-SP6-Azure-Standard Image SLES15-SP6-BYOS Image SLES15-SP6-BYOS-Azure Image SLES15-SP6-BYOS-EC2 Image SLES15-SP6-BYOS-GCE Image SLES15-SP6-CHOST-BYOS Image SLES15-SP6-CHOST-BYOS-Aliyun Image SLES15-SP6-CHOST-BYOS-Azure Image SLES15-SP6-CHOST-BYOS-EC2 Image SLES15-SP6-CHOST-BYOS-GCE Image SLES15-SP6-CHOST-BYOS-GDC Image SLES15-SP6-CHOST-BYOS-SAP-CCloud Image SLES15-SP6-EC2 Image SLES15-SP6-EC2-ECS-HVM Image SLES15-SP6-GCE Image SLES15-SP6-HPC Image SLES15-SP6-HPC-Azure Image SLES15-SP6-HPC-BYOS Image SLES15-SP6-HPC-BYOS-Azure Image SLES15-SP6-HPC-BYOS-EC2 Image SLES15-SP6-HPC-BYOS-GCE Image SLES15-SP6-HPC-EC2 Image SLES15-SP6-HPC-GCE Image SLES15-SP6-Hardened-BYOS Image SLES15-SP6-Hardened-BYOS-Azure Image SLES15-SP6-Hardened-BYOS-EC2 Image SLES15-SP6-Hardened-BYOS-GCE Image SLES15-SP7-Azure-3P Image SLES15-SP7-Azure-Basic Image SLES15-SP7-Azure-Standard Image SLES15-SP7-BYOS-Azure Image SLES15-SP7-BYOS-EC2 Image SLES15-SP7-BYOS-GCE Image SLES15-SP7-CHOST-BYOS-Aliyun Image SLES15-SP7-CHOST-BYOS-Azure Image SLES15-SP7-CHOST-BYOS-EC2 Image SLES15-SP7-CHOST-BYOS-GCE Image SLES15-SP7-CHOST-BYOS-GDC Image SLES15-SP7-CHOST-BYOS-SAP-CCloud Image SLES15-SP7-EC2 Image SLES15-SP7-EC2-ECS-HVM Image SLES15-SP7-GCE Image SLES15-SP7-GCE-3P Image SLES15-SP7-HPC-Azure Image SLES15-SP7-HPC-BYOS-Azure Image SLES15-SP7-HPC-BYOS-EC2 Image SLES15-SP7-HPC-BYOS-GCE Image SLES15-SP7-Hardened-BYOS-Azure Image SLES15-SP7-Hardened-BYOS-EC2 Image SLES15-SP7-Hardened-BYOS-GCE Image proxy-httpd-image Image server-image Affected
Container suse/manager/5.0/x86_64/proxy-salt-broker:latest Container suse/manager/5.0/x86_64/server-attestation:latest Container suse/manager/5.0/x86_64/server-hub-xmlrpc-api:latest Container suse/multi-linux-manager/5.1/x86_64/server-hub-xmlrpc-api:5.1.2.8.13.1 Container suse/multi-linux-manager/5.1/x86_64/server-saline:5.1.2.9.13.1 Image proxy-salt-broker-image Image server-hub-xmlrpc-api-image Image server-saline-image Affected
Container suse/sl-micro/6.0/baremetal-os-container:2.1.3-6.115 Container suse/sl-micro/6.0/base-os-container:2.1.3-7.81 Container suse/sl-micro/6.0/kvm-os-container:2.1.3-6.102 Container suse/sl-micro/6.0/rt-os-container:2.1.3-7.117 Image SL-Micro Image SLE-Micro Image SLE-Micro-Azure Image SLE-Micro-BYOS Image SLE-Micro-BYOS-Azure Image SLE-Micro-BYOS-EC2 Image SLE-Micro-BYOS-GCE Image SLE-Micro-EC2 Image SLE-Micro-GCE Affected

Threat IntelligenceMISP

CISA Advisories
ICSA-26-188-05
Sources: CISA (public domain)

References

Advisories & patches
ADVISORY https://access.redhat.com/errata/RHSA-2026:0936 ADVISORY https://access.redhat.com/errata/RHSA-2026:0975 ADVISORY https://access.redhat.com/errata/RHSA-2026:0991 ADVISORY https://access.redhat.com/errata/RHSA-2026:1323 ADVISORY https://access.redhat.com/errata/RHSA-2026:1324 ADVISORY https://access.redhat.com/errata/RHSA-2026:1326 ADVISORY https://access.redhat.com/errata/RHSA-2026:1327 ADVISORY https://access.redhat.com/errata/RHSA-2026:1465 ADVISORY https://access.redhat.com/errata/RHSA-2026:1608 ADVISORY https://access.redhat.com/errata/RHSA-2026:1624 ADVISORY https://access.redhat.com/errata/RHSA-2026:1625 ADVISORY https://access.redhat.com/errata/RHSA-2026:1626 ADVISORY https://access.redhat.com/errata/RHSA-2026:1627 ADVISORY https://access.redhat.com/errata/RHSA-2026:1652 ADVISORY https://access.redhat.com/errata/RHSA-2026:1736 ADVISORY https://access.redhat.com/errata/RHSA-2026:2064 ADVISORY https://access.redhat.com/errata/RHSA-2026:2072 ADVISORY https://access.redhat.com/errata/RHSA-2026:2485 ADVISORY https://access.redhat.com/errata/RHSA-2026:2563 ADVISORY https://access.redhat.com/errata/RHSA-2026:2633 ADVISORY https://access.redhat.com/errata/RHSA-2026:2659 ADVISORY https://access.redhat.com/errata/RHSA-2026:2671 ADVISORY https://access.redhat.com/security/cve/CVE-2025-13601 ADVISORY https://bugzilla.redhat.com/show_bug.cgi?id=2416741 ADVISORY https://vuldb.com/vuln/333600 ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:4441/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:4442/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:4504/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:0018/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20032/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20045/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20074/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20493/ REF https://access.redhat.com/errata/RHSA-2026:18344 REF https://access.redhat.com/errata/RHSA-2026:18705 REF https://access.redhat.com/errata/RHSA-2026:2974 REF https://access.redhat.com/errata/RHSA-2026:3415 REF https://access.redhat.com/errata/RHSA-2026:4419 REF https://access.redhat.com/errata/RHSA-2026:7461 REF https://cert-portal.siemens.com/productcert/html/ssa-253495.html REF https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4914

Search Externally

GitHub PoC Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy