SECUFOCUSNOW
VULNERABILITY REMEDIATION

CVE remediation guides

Move from asset identification to supported remediation and post-change verification while keeping source evidence visible.

These defensive guides do not provide exploit reproduction or bypass instructions.
01

Confirm exposure first

Match the product, version, installation path, and external exposure before treating a score as an action order.

02

Prefer supported fixes

Use vendor advisories and supported update paths. An unverified fixed-version field stays visibly unresolved.

03

Verify and retain rollback

Confirm version state, service health, access paths, logs, and rollback readiness after the change.

19,060 guide candidatesPage 1125 of 1589
Known exploitedCriticalFixed-version data
CVE-2026-33017

Langflow

Affected
< 1.9.0, < 1.8.2
Fixed
1.8.2
Review reviewHighFixed-version data
CVE-2026-32875

ultrajson ultrajson, Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 17.1

Affected
>= >= 5.1.0, >= 5.1.0 < 5.12.0
Fixed
5.12.0
Review reviewHighFixed-version data
CVE-2026-32874

ultrajson ultrajson, Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 17.1

Affected
>= >= 5.4.0, >= 5.4.0 < 5.12.0
Fixed
5.12.0
Review reviewHighFixed-version data
CVE-2026-32829

PSeitz lz4_flex, Logging Subsystem for Red Hat OpenShift 6.2, Logging Subsystem for Red Hat OpenShift 6.4

Affected
< 0.11.6, >= >= 0.12.0, < 0.12.1, 0.12.0
Fixed
0.11.6
Review reviewHighResearch in progress
CVE-2026-3029

Artifex Software Inc. *PyMuPDF* PyMuPDF, Red Hat Enterprise Linux AI (RHEL AI) 3

Affected
>= 1.26.5 < 1.26.7
Fixed
No verified fixed-version field is available yet
Review reviewHighResearch in progress
CVE-2026-4424

Red Hat Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 7 Extended Lifecycle Support

Affected
4.0, 4.16, 6.0, 7.0, 8.0, 9.0, 10.0, 8.2, 8.4
Fixed
No verified fixed-version field is available yet
Priority reviewHighResearch in progress
CVE-2025-71260

BMC Software, Inc. FootPrints, footprints

Affected
>= 20.20.02 <= 20.24.01.001
Fixed
No verified fixed-version field is available yet
Review reviewCriticalFixed-version data
CVE-2006-10003

TODDR XML::Parser, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support

Affected
<= 2.47, < 2.48
Fixed
2.48
Review reviewCriticalResearch in progress
CVE-2025-15031

mlflow mlflow/mlflow, Red Hat OpenShift AI (RHOAI), mlflow

Affected
>= unspecified <= latest, <= 3.10.1
Fixed
No verified fixed-version field is available yet
Review reviewCriticalResearch in progress
CVE-2026-25873

Beijing Academy of Artificial Intelligence (BAAI) OmniGen2-RL

Affected
See the vendor advisory and NVD configuration data
Fixed
No verified fixed-version field is available yet
Review reviewHighFixed-version data
CVE-2026-27135

nghttp2 nghttp2, JBoss Core Services for RHEL 8, JBoss Core Services on RHEL 7

Affected
< 1.68.1, >= V3.1.6
Fixed
1.68.1
Review reviewHighResearch in progress
CVE-2026-26740

Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support

Affected
5.2.2
Fixed
No verified fixed-version field is available yet