AZL-88290 CVE-2026-39821 affecting package sriov-network-device-plugin for versions less than 3.7.0-6

🗓️ 22 May 2026 16:16:20Reported by GoogleType

osv🔗 osv.dev👁 4 Views

Privilege escalation in sriov-network-device-plugin < 3.7.0-6 via improper IDNA Punycode handling.

Reporter	Title	Published	Views	Family All 3416
OSV	RHSA-2026:53374 Red Hat Security Advisory: rhc security update	12 Aug 202610:16	–	osv
OSV	RHSA-2026:53412 Red Hat Security Advisory: opentelemetry-collector security update	12 Aug 202610:16	–	osv
OSV	RHSA-2026:53413 Red Hat Security Advisory: opentelemetry-collector security update	12 Aug 202610:16	–	osv
OSV	RHSA-2026:53415 Red Hat Security Advisory: opentelemetry-collector security update	12 Aug 202610:16	–	osv
OSV	RHSA-2026:54191 Red Hat Security Advisory: rhc-worker-script security update	12 Aug 202610:16	–	osv
OSV	RHSA-2026:54401 Red Hat Security Advisory: rhc security update	13 Aug 202610:17	–	osv
OSV	RHSA-2026:54580 Red Hat Security Advisory: OpenShift Container Platform 4.20.34 packages and security update	19 Aug 202610:22	–	osv
OSV	RHSA-2026:54757 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 security advisory	14 Aug 202610:17	–	osv
OSV	RHSA-2026:56143 Red Hat Security Advisory: grafana-pcp security update	19 Aug 202610:22	–	osv
OSV	RHSA-2026:56223 Red Hat Security Advisory: grafana-pcp security update	19 Aug 202610:22	–	osv

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-39821

30 Aug 2026 05:26Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.19.6

EPSS0.00692

SSVC

sriov-network-device-plugin IDNA Punycode privilege escalation ToASCII ToUnicode library dependency