VULNERABILITY REMEDIATION

CVE remediation guides

Move from asset identification to supported remediation and post-change verification while keeping source evidence visible.

These defensive guides do not provide exploit reproduction or bypass instructions.
01

Confirm exposure first

Match the product, version, installation path, and external exposure before treating a score as an action order.

02

Prefer supported fixes

Use vendor advisories and supported update paths. An unverified fixed-version field stays visibly unresolved.

03

Verify and retain rollback

Confirm version state, service health, access paths, logs, and rollback readiness after the change.

19,287 guide candidatesPage 1082 of 1608
Review reviewCriticalResearch in progress
CVE-2026-20911

LibRaw LibRaw, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7

Affected
>= Commit 0b56545, >= Commit d20315b, 0.22.0, 0.22.1
Fixed
No verified fixed-version field is available yet
Review reviewCriticalResearch in progress
CVE-2026-20889

LibRaw LibRaw, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

Affected
>= Commit d20315b, 0.22.0
Fixed
No verified fixed-version field is available yet
Review reviewCriticalFixed-version data
CVE-2026-5735

Mozilla Firefox, Thunderbird, Red Hat Enterprise Linux 10

Affected
< 149.0.2
Fixed
149.0.2
Review reviewCriticalFixed-version data
CVE-2026-5734

Mozilla Firefox, Thunderbird, Red Hat Enterprise Linux 10

Affected
< 140.9.1, < 149.0.2
Fixed
140.9.1, 149.0.2
Review reviewHighFixed-version data
CVE-2026-5733

Mozilla Firefox, Thunderbird, Red Hat Enterprise Linux 10

Affected
< 149.0.2
Fixed
149.0.2
Review reviewHighFixed-version data
CVE-2026-5732

Mozilla Firefox, Thunderbird, Red Hat Enterprise Linux 10

Affected
< 140.9.1, < 149.0.2
Fixed
140.9.1, 149.0.2
Review reviewCriticalResearch in progress
CVE-2026-5731

Mozilla Firefox, Thunderbird, Red Hat Enterprise Linux 10

Affected
115.34.0, 140.9.0, 149.0.1
Fixed
No verified fixed-version field is available yet
Review reviewHighFixed-version data
CVE-2026-32144

Erlang OTP, Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 17.1

Affected
>= 601a012837ea0a5c8095bf24223132824177124d, >= 27.0 < 27.3.4.10, >= 28.0 < 28.4.2, >= 1.16 < 1.17.1.2, >= 1.18 < 1.20.3, >= 11.2 < 11.2.12.7, > 11.3 < 11.5.4
Fixed
27.3.4.10, 28.4.2, 1.17.1.2, 1.20.3, 11.2.12.7, 11.5.4
Review reviewHighFixed-version data
CVE-2026-28808

Erlang OTP, Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 17.1

Affected
>= 07b8f441ca711f9812fad9e9115bab3c3aa92f79, >= 5.10 < 9.1.0.6, > 9.2 < 9.3.2.4, > 9.4 < 9.6.2, >= 17.0 < 26.2.5.19, >= 27.0 < 27.3.4.10, >= 28.0 < 28.4.2
Fixed
9.1.0.6, 9.3.2.4, 9.6.2, 26.2.5.19, 27.3.4.10, 28.4.2
Priority reviewHighFixed-version data
CVE-2026-22666

Dolibarr Dolibarr ERP/CRM, dolibarr erp/crm

Affected
< 23.0.2
Fixed
23.0.2
Review reviewHighResearch in progress
CVE-2026-31842

Tinyproxy Project Tinyproxy, tinyproxy

Affected
<= 1.11.3
Fixed
No verified fixed-version field is available yet
Known exploitedHighFixed-version data
CVE-2026-34197

Apache Software Foundation Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ

Affected
< 5.19.4, >= 6.0.0 < 6.2.3
Fixed
5.19.4, 6.2.3