Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

🗓️ 04 May 2026 14:10:09Reported by RedHatType

Security update for Red Hat Ansible Automation Platform 2.6 addressing account hijacking and denial of service vulnerabilities.

Reporter	Title	Published	Views	Family All 4029
vulnersOsv	0.2-ui (0.0.1), 1k-tasks (>=2.3.0, <=3.0.2) +2394 more potentially affected by CVE-2026-27606 via rollup (>=2.0.0, <=2.79.2)	25 Feb 202606:17	–	vulnersosv
vulnersOsv	0.2-ui (0.0.1), 1k-tasks (>=2.3.0, <=3.0.2) +2394 more potentially affected by CVE-2026-27606 via rollup (>=2.0.0, <=2.79.2)	25 Feb 202622:37	–	vulnersosv
vulnersOsv	10-javascriptlib (1.0.0), 1k-tasks (>=3.1.0, <=3.6.1) +449 more potentially affected by CVE-2026-27606 via rollup (>=3.0.0, <=3.29.5)	25 Feb 202622:37	–	vulnersosv
vulnersOsv	10up-toolkit (>=6.0.0-next.0, <=6.5.1), @0ti.me/ts-test-deps (0.2.0) +6562 more potentially affected by CVE-2026-26996 via minimatch (>=9.0.0, <=9.0.5)	18 Feb 202622:38	–	vulnersosv
vulnersOsv	@0zd0/nx-oxfmt (>=0.0.1, <=0.1.1), @10xly/eslint-config (>=1.0.0, <=1.0.8) +1114 more potentially affected by CVE-2026-26996 via minimatch (>=10.0.0, <=10.1.3)	18 Feb 202622:38	–	vulnersosv
vulnersOsv	1k-tasks (>=4.0.0, <=4.2.2), @adobe/helix-deploy (>=9.3.8, <=9.6.1) +407 more potentially affected by CVE-2026-27606 via rollup (>=4.0.2, <=4.58.0)	25 Feb 202606:17	–	vulnersosv
vulnersOsv	@graphql-mesh/plugin-rate-limit (>=0.2.23-alpha-20230403140649-57714f1dd, <=1.0.0), @graphql-mesh/plugin-snapshot (>=0.1.24-alpha-20230403140649-57714f1dd, <=1.0.0) +13 more potentially affected by CVE-2026-26996 via minimatch (>=8.0.2, <=8.0.4)	18 Feb 202622:38	–	vulnersosv
vulnersOsv	10-javascriptlib (1.0.0), 1k-tasks (>=3.1.0, <=3.6.1) +449 more potentially affected by CVE-2026-27606 via rollup (>=3.0.0, <=3.29.5)	25 Feb 202606:17	–	vulnersosv
vulnersOsv	-tompan-reacttemplate (>=1.0.1, <=1.1.0), 02.aula (1.0.0) +55778 more potentially affected by CVE-2026-26996 via minimatch (>=3.0.0, <=3.1.2)	18 Feb 202622:38	–	vulnersosv
vulnersOsv	org.webjars.npm:github-com-datatables-datatablessrc (2.0.5), org.webjars.npm:vite (>=2.9.0, <=6.3.5) +1 more potentially affected by CVE-2026-27606 via org.webjars.npm:rollup (>=2.79.2, <=4.45.1)	25 Feb 202606:17	–	vulnersosv

Source	Link
access	www.access.redhat.com/security/updates/classification/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

25 Aug 2026 13:31Current

7.1High risk

Vulners AI Score7.1

CVSS 3.19.1 - 9.8

CVSS 49.3

EPSS0.01455

SSVC