VULNERABILITY REMEDIATIONCVE remediation guides
Move from asset identification to supported remediation and post-change verification while keeping source evidence visible.
These defensive guides do not provide exploit reproduction or bypass instructions. 01Confirm exposure first
Match the product, version, installation path, and external exposure before treating a score as an action order.
02Prefer supported fixes
Use vendor advisories and supported update paths. An unverified fixed-version field stays visibly unresolved.
03Verify and retain rollback
Confirm version state, service health, access paths, logs, and rollback readiness after the change.
19,042 guide candidatesPage 1128 of 1587
Review reviewHighFixed-version data
CVE-2026-23941Erlang OTP, erlang/inets, erlang/otp
- Affected
- >= 84adefa331c4159d432d22840663c38f155cd4c1, >= 5.10 < 9.1.0.5, >= 9.3 < 9.3.2.3, >= 9.6 < 9.6.1, >= 17.0 < 26.2.5.18, >= 27.0 < 27.3.4.9, >= 28.0 < 28.4.1
- Fixed
- 9.1.0.5, 9.3.2.3, 9.6.1, 26.2.5.18, 27.3.4.9, 28.4.1
Review reviewHighFixed-version data
CVE-2026-23940hexpm hexpm, hex.pm
- Affected
- >= 82911daf5f8fb2ab44f298e3ba22b90bc1ae3746 < 495f01607d3eae4aed7ad09b2f54f31ec7a7df01, < 2026-03-10, < 2026-03-09
- Fixed
- 2026-03-09
Review reviewHighFixed-version data
CVE-2026-2229undici undici, Cryostat 4 on RHEL 9, Red Hat Enterprise Linux 10
- Affected
- < 6.24.0, >= 7.0.0 < 7.24.0
- Fixed
- 6.24.0, 7.24.0
Review reviewHighFixed-version data
CVE-2026-1528undici undici, Cryostat 4 on RHEL 9, Red Hat Enterprise Linux 10
- Affected
- >= >= 6.0.0 < 6.24.0, >= 7.0.0 < 7.24.0
- Fixed
- 6.24.0, 7.24.0
Review reviewHighFixed-version data
CVE-2026-1526undici undici, Cryostat 4 on RHEL 9, Red Hat Enterprise Linux 10
- Affected
- < 6.24.0, >= 7.0.0 < 7.24.0
- Fixed
- 6.24.0, 7.24.0
Review reviewHighFixed-version data
CVE-2026-32274psf black, Red Hat Ansible Automation Platform 2.5, Red Hat Ansible Automation Platform 2.6
- Affected
- >= >= 24.3.0, < 26.3.1
- Fixed
- 26.3.1
Review reviewHighFixed-version data
CVE-2026-32141WebReflection flatted, Cluster Observability Operator 1.5.0, Red Hat Developer Hub 1.8
- Affected
- < 3.4.0
- Fixed
- 3.4.0
Review reviewHighResearch in progress
CVE-2026-28356defnull multipart, Red Hat AI Inference Server 3.2, Red Hat OpenShift AI 2.25
- Affected
- >= >= 1.3.0, < 1.3.1, < 1.2.2
- Fixed
- No verified fixed-version field is available yet
Review reviewHighFixed-version data
CVE-2026-3989SGLang SGLang, sglang
- Affected
- >= 0.5.10, < 0.5.10
- Fixed
- 0.5.10
Review reviewHighFixed-version data
CVE-2023-43010Apple iOS and iPadOS, Safari, macOS
- Affected
- >= unspecified < 17.2, >= unspecified < 14.2, >= unspecified < 16.7.15, >= unspecified < 15.8.7, >= 16.0 < 16.7.15, >= 17.0 < 17.2
- Fixed
- 17.2, 15.8.7, 16.7.15, 14.2
Review reviewCriticalResearch in progress
CVE-2025-66956the affected product
- Affected
- See the vendor advisory and NVD configuration data
- Fixed
- No verified fixed-version field is available yet
Review reviewHighFixed-version data
CVE-2026-20074Cisco Cisco IOS XR Software, ios xr
- Affected
- 7.8.1, 7.9.1, 7.10.1, 7.8.2, 7.8.22, 7.9.2, 7.11.1, 7.9.21, 7.10.2, 24.1.1, 7.11.2, 24.2.1, 24.1.2, 24.2.11, 24.3.1, 24.4.1, 24.2.2, 7.8.23, 7.11.21, 24.2.20
- Fixed
- 25.2.2