Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

🗓️ 29 Jul 2026 22:07:21Reported by RedHatType

redhat🔗 access.redhat.com👁 29 Views

Red Hat Hardened Images RPMs bug fix and enhancement update for nodejs26 components.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: undici does not validate the type property of a duck-typed blob-like request body before using it as the Content-Type header on the HTTP/1.1 dispatcher	9 Sep 202620:51	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in undici affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	2 Nov 202614:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	14 Oct 202615:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to undici and nodemailer.	29 Sep 202607:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses vulnerable software versions of Java and NodeJs which is vulnerable to CVE-2026-70906, CVE-2026-61308, CVE-2026-70907, CVE-2026-60589, CVE-2026-16440, CVE-2026-56846, CVE-2026-56848, CVE-2026-58043	29 Oct 202617:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses undici-7.28.0.tgz which is vulnerable to CVE-2026-13697.	7 Sep 202605:22	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerabilities exists in cyclops of IBM Netezza Appliance	8 Sep 202617:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software	11 Nov 202602:22	–	ibm
GithubExploit	Exploit for Improper Authentication in Nodejs Node.Js	23 Oct 202623:44	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Nodejs Node.Js	23 Oct 202623:44	–	githubexploit

Source	Link
access	www.access.redhat.com/security/cve/CVE-2026-13697
access	www.access.redhat.com/security/cve/CVE-2026-14643
access	www.access.redhat.com/security/cve/CVE-2026-15157
access	www.access.redhat.com/security/cve/CVE-2026-16728
access	www.access.redhat.com/security/cve/CVE-2026-16729
access	www.access.redhat.com/security/cve/CVE-2026-56847
access	www.access.redhat.com/security/cve/CVE-2026-56850
access	www.access.redhat.com/security/cve/CVE-2026-58039
access	www.access.redhat.com/security/cve/CVE-2026-58040
access	www.access.redhat.com/security/cve/CVE-2026-58043

13 Nov 2026 12:59Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.17.4 - 9.1

CVSS 37.5

EPSS0.00463

SSVC

red hat hardened images nodejs twenty six v8 development rpm update security bug fix