VULNERABILITY REMEDIATION

CVE remediation guides

Move from asset identification to supported remediation and post-change verification while keeping source evidence visible.

These defensive guides do not provide exploit reproduction or bypass instructions.
01

Confirm exposure first

Match the product, version, installation path, and external exposure before treating a score as an action order.

02

Prefer supported fixes

Use vendor advisories and supported update paths. An unverified fixed-version field stays visibly unresolved.

03

Verify and retain rollback

Confirm version state, service health, access paths, logs, and rollback readiness after the change.

20,185 guide candidatesPage 869 of 1683
Review reviewHighResearch in progress
CVE-2026-50131

fedify-dev fedify, vocab-runtime

Affected
>= >= 0.11.2, < 1.9.12, >= >= 1.10.0, < 1.10.11, >= >= 2.0.0, < 2.0.19, >= >= 2.1.0, < 2.1.15, >= >= 2.2.0, < 2.2.4
Fixed
No verified fixed-version field is available yet
Review reviewHighResearch in progress
CVE-2026-48110

Eugeny russh

Affected
>= >= 0.34.0, < 0.61.0
Fixed
No verified fixed-version field is available yet
Review reviewHighResearch in progress
CVE-2026-46702

Eugeny russh

Affected
>= >= 0.34.0, < 0.61.1
Fixed
No verified fixed-version field is available yet
Review reviewHighResearch in progress
CVE-2026-46689

kanidm

Affected
< 1.9.3
Fixed
No verified fixed-version field is available yet
Review reviewHighResearch in progress
CVE-2026-46679

libp2p js-libp2p

Affected
< 15.0.23
Fixed
No verified fixed-version field is available yet
Review reviewHighResearch in progress
CVE-2026-46673

Eugeny russh

Affected
< 0.60.3
Fixed
No verified fixed-version field is available yet
Review reviewHighFixed-version data
CVE-2026-46669

openvm-org openvm

Affected
< 1.6.0
Fixed
1.6.0
Review reviewHighResearch in progress
CVE-2026-46654

Plonky3

Affected
< 0.4.3, >= >= 0.5.0, < 0.5.3
Fixed
No verified fixed-version field is available yet
Review reviewHighResearch in progress
CVE-2026-46625

js-cookie js-cookie, Cryostat 4 on RHEL 9, Red Hat Advanced Cluster Security for Kubernetes 4.10

Affected
< 3.0.7
Fixed
No verified fixed-version field is available yet
Review reviewHighFixed-version data
CVE-2026-46522

ImageMagick ImageMagick, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 6

Affected
< 6.9.13-48, >= 7.0.0-0 < 7.1.2-23
Fixed
6.9.13-48, 7.1.2-23
Review reviewHighFixed-version data
CVE-2026-46520

ImageMagick ImageMagick, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 6

Affected
< 6.9.13-48, >= 7.0.0-0 < 7.1.2-23
Fixed
6.9.13-48, 7.1.2-23
Review reviewHighResearch in progress
CVE-2026-45783

libp2p js-libp2p

Affected
< 16.2.6
Fixed
No verified fixed-version field is available yet