Get real-time updates on Telegram
P5Verified
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
CVE-2026-12383, CVE-2026-27145, CVE-2026-33811, CVE-2026-34993, CVE-2026-39820, CVE-2026-40898, CVE-2026-42499, CVE-2026-42504, CVE-2026-44545, CVE-2026-48526, CVE-2026-54059, CVE-2026-54060, CVE-2026-55379, CVE-2026-55380, CVE-2026-59197, CVE-2026-59885, CVE-2026-59886 affects automation-eda-controller. EPSS 0.00279 (percentile 0.18451), scored 2026-10-03. Fixed version: 0:1.1.21-1.el8ap. Fixed version: 0:1.1.21-1.el8ap. Fixed version: 0:1.1.21-1.el8ap. Fixed version: 0:1.1.21-1.el8ap. Fixed version: 0:1.1.21-1.el8ap. Fixed version: 0:1.1.21-1.el9ap. Fixed version: 0:1.1.21-1.el9ap.
- CVE
- CVE-2026-12383, CVE-2026-27145, CVE-2026-33811, CVE-2026-34993, CVE-2026-39820, CVE-2026-40898, CVE-2026-42499, CVE-2026-42504, CVE-2026-44545, CVE-2026-48526, CVE-2026-54059, CVE-2026-54060, CVE-2026-55379, CVE-2026-55380, CVE-2026-59197, CVE-2026-59885, CVE-2026-59886
- Product
- automation-eda-controller
- CCR priority
- 0.1 /100 (P5)
- CVSS
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H · OSV.dev
- EPSS
- 0.00279 · percentile 0.18451 · 2026-10-03
- KEV
- no
Affected products
- automation-eda-controller · Fixed version: 0:1.1.21-1.el8ap
- automation-eda-controller-base · Fixed version: 0:1.1.21-1.el8ap
- automation-eda-controller-base-services · Fixed version: 0:1.1.21-1.el8ap
- automation-eda-controller-event-stream-services · Fixed version: 0:1.1.21-1.el8ap
- automation-eda-controller-worker-services · Fixed version: 0:1.1.21-1.el8ap
- automation-eda-controller · Fixed version: 0:1.1.21-1.el9ap
- automation-eda-controller-base · Fixed version: 0:1.1.21-1.el9ap
- automation-eda-controller-base-services · Fixed version: 0:1.1.21-1.el9ap
- automation-eda-controller-event-stream-services · Fixed version: 0:1.1.21-1.el9ap
- automation-eda-controller-worker-services · Fixed version: 0:1.1.21-1.el9ap
- receptor · Fixed version: 0:1.6.7-1.el8ap
- receptor · Fixed version: 0:1.6.7-1.el8ap
- receptor · Fixed version: 0:1.6.7-1.el8ap
- receptor · Fixed version: 0:1.6.7-1.el9ap
- receptor · Fixed version: 0:1.6.7-1.el9ap
- receptor · Fixed version: 0:1.6.7-1.el9ap
- automation-gateway-proxy-server · Fixed version: 0:2.5.10-7.el8ap
- automation-gateway-proxy-server · Fixed version: 0:2.6.17-2.el9ap
- python3.12-aiohttp · Fixed version: 0:3.14.1-2.el8ap
- python3.12-aiohttp · Fixed version: 0:3.14.1-2.el9ap
- automation-gateway-proxy · Fixed version: 0:2.5.10-7.el8ap
- automation-gateway-proxy-debugsource · Fixed version: 0:2.5.10-7.el8ap
- automation-gateway-proxy-server-debuginfo · Fixed version: 0:2.5.10-7.el8ap
- automation-gateway-proxy · Fixed version: 0:2.6.17-2.el9ap
- automation-gateway-proxy-debugsource · Fixed version: 0:2.6.17-2.el9ap
- automation-gateway-proxy-server-debuginfo · Fixed version: 0:2.6.17-2.el9ap
- receptorctl · Fixed version: 0:1.6.7-1.el8ap
- receptorctl · Fixed version: 0:1.6.7-1.el8ap
- receptor-debuginfo · Fixed version: 0:1.6.7-1.el8ap
- receptor-debugsource · Fixed version: 0:1.6.7-1.el8ap
- receptorctl · Fixed version: 0:1.6.7-1.el8ap
- receptorctl · Fixed version: 0:1.6.7-1.el9ap
- receptorctl · Fixed version: 0:1.6.7-1.el9ap
- receptor-debuginfo · Fixed version: 0:1.6.7-1.el9ap
- receptor-debugsource · Fixed version: 0:1.6.7-1.el9ap
- receptorctl · Fixed version: 0:1.6.7-1.el9ap
- python3.12-daphne · Fixed version: 0:4.2.2-1.el8ap
- python3.12-daphne · Fixed version: 0:4.2.2-1.el9ap
- automation-controller-venv-tower · Fixed version: 0:4.6.31-1.el8ap
- automation-controller-venv-tower · Fixed version: 0:4.6.31-1.el9ap
- python3.12-pillow · Fixed version: 0:12.3.0-1.el8ap
- python3.12-pillow · Fixed version: 0:12.3.0-1.el9ap
- python3.12-pyasn1 · Fixed version: 0:0.6.4-1.el8ap
- python3.12-pyasn1 · Fixed version: 0:0.6.4-1.el9ap
Provenance
- OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-12383.html