CVE-2026-11837: Red Hat Enterprise Linux 10.0 Extended Update Support (exact versions not specified); +5 more affected products

Affected technology

Red Hat Enterprise Linux 10.0 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenStack Platform 17.1 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenStack Platform 18.0 · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source
Function: uses

Attack conditions (Vendor/CNA, CVSS 3.1): Local · Low privileges required · User interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · User interaction required

What an attacker can do

The source reports that an attacker could gain higher privileges under the conditions described by the source. Vendor/CNA’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality, integrity and availability impact as high.