Confirm exposure first
Match the product, version, installation path, and external exposure before treating a score as an action order.
VULNERABILITY REMEDIATION
CVE remediation guides
Move from asset identification to supported remediation and post-change verification while keeping source evidence visible.
These defensive guides do not provide exploit reproduction or bypass instructions.Prefer supported fixes
Use vendor advisories and supported update paths. An unverified fixed-version field stays visibly unresolved.
Verify and retain rollback
Confirm version state, service health, access paths, logs, and rollback readiness after the change.
19,384 guide candidatesPage 1028 of 1616
Review reviewHighFixed-version data
CVE-2026-8090Mozilla Firefox, Thunderbird, Red Hat Enterprise Linux 10
- Affected
- < 115.35.2, < 150.0.2, >= 128.0 < 140.10.2
- Fixed
- 115.35.2, 150.0.2, 140.10.2
Review reviewCriticalResearch in progress
CVE-2026-42010Red Hat Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 8
- Affected
- 4.0, 6.0, 7.0, 8.0, 9.0, 10.0
- Fixed
- No verified fixed-version field is available yet
Review reviewHighFixed-version data
CVE-2026-41139josdejong mathjs, Cryostat 4, Red Hat Developer Hub
- Affected
- >= >= 13.1.0, >= 13.1.0 < 15.2.0
- Fixed
- 15.2.0
Review reviewHighFixed-version data
CVE-2026-42216AcademySoftwareFoundation openexr, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support
- Affected
- >= >= 3.0.0, >= >= 3.3.0, >= >= 3.4.0, >= 3.0.0 < 3.2.9, >= 3.3.0 < 3.3.11, >= 3.4.0 < 3.4.11
- Fixed
- 3.2.9, 3.3.11, 3.4.11
Review reviewHighResearch in progress
CVE-2026-41675xmldom xmldom, Red Hat Developer Hub 1.9, Red Hat Build of Podman Desktop
- Affected
- >= xmldom <= 0.6.0, >= @xmldom/xmldom >= 0.9.0, < 0.9.10, >= @xmldom/xmldom < 0.8.13
- Fixed
- No verified fixed-version field is available yet
Review reviewHighResearch in progress
CVE-2026-41674xmldom xmldom, Red Hat Developer Hub 1.8, Red Hat Developer Hub 1.9
- Affected
- >= xmldom <= 0.6.0, >= @xmldom/xmldom >= 0.9.0, < 0.9.10, >= @xmldom/xmldom < 0.8.13
- Fixed
- No verified fixed-version field is available yet
Review reviewHighResearch in progress
CVE-2026-41673xmldom xmldom, Red Hat Developer Hub 1.9, Red Hat Build of Podman Desktop
- Affected
- >= xmldom <= 0.6.0, >= @xmldom/xmldom >= 0.9.0, < 0.9.10, >= @xmldom/xmldom < 0.8.13
- Fixed
- No verified fixed-version field is available yet
Review reviewHighResearch in progress
CVE-2026-41672xmldom xmldom, Red Hat Developer Hub 1.9, Red Hat Build of Podman Desktop
- Affected
- >= xmldom <= 0.6.0, >= @xmldom/xmldom >= 0.9.0, < 0.9.10, >= @xmldom/xmldom < 0.8.13
- Fixed
- No verified fixed-version field is available yet
Review reviewHighFixed-version data
CVE-2026-41142AcademySoftwareFoundation openexr, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support
- Affected
- >= >= 3.0.0, >= >= 3.3.0, >= >= 3.4.0, >= 3.0.0 < 3.2.9, >= 3.3.0 < 3.3.11, >= 3.4.0 < 3.4.11
- Fixed
- 3.2.9, 3.3.11, 3.4.11
Review reviewCriticalFixed-version data
CVE-2026-40982Spring Spring Cloud Config, Red Hat Enterprise Linux 8, Red Hat JBoss Enterprise Application Platform Expansion Pack
- Affected
- >= 3.1.0 < 3.1.14, >= 4.1.0 < 4.1.10, >= 4.2.0 < 4.2.7, >= 4.3.0 < 4.3.3, >= 5.0.0 < 5.0.3
- Fixed
- 3.1.14, 4.1.10, 4.2.7, 4.3.3, 5.0.3
Review reviewHighFixed-version data
CVE-2026-40981Spring Spring Cloud Config, Red Hat Enterprise Linux 8, Red Hat JBoss Enterprise Application Platform Expansion Pack
- Affected
- >= 3.1.0 < 3.1.14, >= 4.1.0 < 4.1.10, >= 4.2.0 < 4.2.7, >= 4.3.0 < 4.3.3, >= 5.0.0 < 5.0.3
- Fixed
- 3.1.14, 4.1.10, 4.2.7, 4.3.3, 5.0.3
Known exploitedCriticalResearch in progress
CVE-2026-0300Palo Alto Networks PAN-OS
- Affected
- 12.1.0, 11.2.0, 11.1.0, 10.2.0, 10.2.1, 10.2.2, 10.2.3, 10.2.4, 10.2.5, 10.2.6, 10.2.7, 10.2.8, 10.2.9, 10.2.10, 10.2.11, 10.2.12, 10.2.13, 10.2.14, 10.2.15
- Fixed
- No verified fixed-version field is available yet