{"id":"CVE-2026-74860","aliases":[],"cve":{"records":[{"id":"CVE-2026-74860","source":"redhat","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-08-17T09:57:05.862Z","published":"2026-09-08T11:27:45.158Z","modified":"2026-11-11T13:22:48.574Z"}],"publishers":[{"name":"redhat","role":"CNA","organizationId":"53f830b8-0a3f-465b-8143-3b8a9948e749","modified":"2026-11-11T13:22:48.574Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-09-08T12:11:11.416Z"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:64463","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:71585","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:71586","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:71641","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:72470","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:72475","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:72476","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:79357","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:82939","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:89750","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:89759","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:90309","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:91202","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:91204","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:91206","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:91207","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:91217","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:91218","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:91219","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:91224","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:91232","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:91233","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:91234","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:91235","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:91236","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:91237","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:91238","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:91241","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:91242","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:91243","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:91244","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:91245","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:91246","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:91248","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:91249","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:92352","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:92589","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:93463","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:93473","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:93791","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:94459","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:94468","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:94474","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:94476","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:98468","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:98572","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/security/cve/CVE-2026-74860","tags":["vdb-entry","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529697","tags":["issue-tracking","x_refsource_REDHAT"],"source":"redhat"}],"weaknesses":[{"id":"CWE-763","description":"Release of Invalid Pointer or Reference","source":"redhat"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-09-08T12:08:31.722346Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Libxml2: double-free/uaf in libxml2 python bindings","titleSource":"redhat","descriptionSource":"redhat","description":"A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.","score":8.5,"severity":"high","published":"2026-09-08T11:27:45.158Z","modified":"2026-11-11T13:22:48.574Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 10","platforms":[],"versions":[{"version":"0:2.12.5-10.el10_2.4","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 10","platforms":[],"versions":[{"version":"0:2.12.5-15.el10_3.2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:10.3"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 10.0 Extended Update Support","platforms":[],"versions":[{"version":"0:2.12.5-9.el10_0.9","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","platforms":[],"versions":[{"version":"0:2.9.1-6.el7_9.20","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/o:redhat:rhel_els:7"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8","platforms":[],"versions":[{"version":"0:2.9.7-21.el8_10.9","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8","platforms":[],"versions":[{"version":"0:2.9.7-21.el8_10.9","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","platforms":[],"versions":[{"version":"0:2.9.7-9.el8_4.20","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","platforms":[],"versions":[{"version":"0:2.9.7-9.el8_4.20","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","platforms":[],"versions":[{"version":"0:2.9.7-13.el8_6.24","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","platforms":[],"versions":[{"version":"0:2.9.7-13.el8_6.24","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","platforms":[],"versions":[{"version":"0:2.9.7-16.el8_8.24","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","platforms":[],"versions":[{"version":"0:2.9.7-16.el8_8.24","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[{"version":"0:2.9.13-14.el9_8.5","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[{"version":"0:2.9.13-18.el9_9.1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[{"version":"0:2.9.13-14.el9_8.5","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[{"version":"0:2.9.13-18.el9_9.1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","platforms":[],"versions":[{"version":"0:2.9.13-3.el9_2.20","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","platforms":[],"versions":[{"version":"0:2.9.13-13.el9_4.10","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:rhel_e4s:9.4::appstream","cpe:/o:redhat:rhel_e4s:9.4::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9.6 Extended Update Support","platforms":[],"versions":[{"version":"0:2.9.13-13.el9_6","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/o:redhat:rhel_eus:9.6::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Cert Manager support for Red Hat OpenShift release 1.20","platforms":[],"versions":[{"version":"1790589912","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Cert Manager support for Red Hat OpenShift release 1.20","platforms":[],"versions":[{"version":"1790589914","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Cert Manager support for Red Hat OpenShift release 1.20","platforms":[],"versions":[{"version":"1790589855","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Cost Management On-Premise 1","platforms":[],"versions":[{"version":"1791460851","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:cost_management_on_premise:1::el10"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Hardened Images","platforms":[],"versions":[{"version":"2.15.4-0.1.hum1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:hummingbird:1"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.0","platforms":[],"versions":[{"version":"1793041986","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.0","platforms":[],"versions":[{"version":"1793041981","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.0","platforms":[],"versions":[{"version":"1793042072","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.0","platforms":[],"versions":[{"version":"1793042067","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.0","platforms":[],"versions":[{"version":"1793041987","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.0","platforms":[],"versions":[{"version":"1793329709","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.0","platforms":[],"versions":[{"version":"1793328358","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.4","platforms":[],"versions":[{"version":"1793042006","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.4","platforms":[],"versions":[{"version":"1793042145","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.4","platforms":[],"versions":[{"version":"1793042006","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.4","platforms":[],"versions":[{"version":"1793042011","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.4","platforms":[],"versions":[{"version":"1793042086","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.4","platforms":[],"versions":[{"version":"1793042088","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.4","platforms":[],"versions":[{"version":"1793041995","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.4","platforms":[],"versions":[{"version":"1793042074","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.4","platforms":[],"versions":[{"version":"1793042008","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.4","platforms":[],"versions":[{"version":"1793326837","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.5","platforms":[],"versions":[{"version":"1793042010","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.5","platforms":[],"versions":[{"version":"1793042162","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.5","platforms":[],"versions":[{"version":"1793042004","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.5","platforms":[],"versions":[{"version":"1793042092","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.5","platforms":[],"versions":[{"version":"1793042117","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.5","platforms":[],"versions":[{"version":"1793042093","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.5","platforms":[],"versions":[{"version":"1793042114","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.5","platforms":[],"versions":[{"version":"1793042024","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.5","platforms":[],"versions":[{"version":"1793042008","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI 3.5","platforms":[],"versions":[{"version":"1793327660","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Update Infrastructure 5","platforms":[],"versions":[{"version":"1791978534","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:rhui:5::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Update Infrastructure 5","platforms":[],"versions":[{"version":"1791978528","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:rhui:5::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Update Infrastructure 5","platforms":[],"versions":[{"version":"1791978528","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:rhui:5::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Update Infrastructure 5","platforms":[],"versions":[{"version":"1791964013","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:rhui:5::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Update Infrastructure 5","platforms":[],"versions":[{"version":"1791978693","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:rhui:5::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 10","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/a:redhat:enterprise_linux:10"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 6","platforms":[],"versions":[],"defaultStatus":"unknown","cpes":["cpe:/o:redhat:rhel_els:6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/a:redhat:enterprise_linux:8"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/a:redhat:enterprise_linux:9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat Hardened Images","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/a:redhat:hummingbird:1"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI (RHOAI)","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/a:redhat:openshift_ai"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI (RHOAI)","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/a:redhat:openshift_ai"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI (RHOAI)","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/a:redhat:openshift_ai"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift AI (RHOAI)","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/a:redhat:openshift_ai"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift Container Platform 4","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/a:redhat:openshift:4"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift Container Platform 4","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/a:redhat:openshift:4"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift Container Platform 4","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/a:redhat:openshift:4"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"},{"vendor":"Red Hat","name":"Red Hat OpenShift Container Platform 5","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/a:redhat:openshift:5"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"}],"remediation":[],"references":["https://access.redhat.com/errata/RHSA-2026:64463","https://access.redhat.com/errata/RHSA-2026:71585","https://access.redhat.com/errata/RHSA-2026:71586","https://access.redhat.com/errata/RHSA-2026:71641","https://access.redhat.com/errata/RHSA-2026:72470","https://access.redhat.com/errata/RHSA-2026:72475","https://access.redhat.com/errata/RHSA-2026:72476","https://access.redhat.com/errata/RHSA-2026:79357","https://access.redhat.com/errata/RHSA-2026:82939","https://access.redhat.com/errata/RHSA-2026:89750","https://access.redhat.com/errata/RHSA-2026:89759","https://access.redhat.com/errata/RHSA-2026:90309","https://access.redhat.com/errata/RHSA-2026:91202","https://access.redhat.com/errata/RHSA-2026:91204","https://access.redhat.com/errata/RHSA-2026:91206","https://access.redhat.com/errata/RHSA-2026:91207","https://access.redhat.com/errata/RHSA-2026:91217","https://access.redhat.com/errata/RHSA-2026:91218","https://access.redhat.com/errata/RHSA-2026:91219","https://access.redhat.com/errata/RHSA-2026:91224","https://access.redhat.com/errata/RHSA-2026:91232","https://access.redhat.com/errata/RHSA-2026:91233","https://access.redhat.com/errata/RHSA-2026:91234","https://access.redhat.com/errata/RHSA-2026:91235","https://access.redhat.com/errata/RHSA-2026:91236","https://access.redhat.com/errata/RHSA-2026:91237","https://access.redhat.com/errata/RHSA-2026:91238","https://access.redhat.com/errata/RHSA-2026:91241","https://access.redhat.com/errata/RHSA-2026:91242","https://access.redhat.com/errata/RHSA-2026:91243","https://access.redhat.com/errata/RHSA-2026:91244","https://access.redhat.com/errata/RHSA-2026:91245","https://access.redhat.com/errata/RHSA-2026:91246","https://access.redhat.com/errata/RHSA-2026:91248","https://access.redhat.com/errata/RHSA-2026:91249","https://access.redhat.com/errata/RHSA-2026:92352","https://access.redhat.com/errata/RHSA-2026:92589","https://access.redhat.com/errata/RHSA-2026:93463","https://access.redhat.com/errata/RHSA-2026:93473","https://access.redhat.com/errata/RHSA-2026:93791","https://access.redhat.com/errata/RHSA-2026:94459","https://access.redhat.com/errata/RHSA-2026:94468","https://access.redhat.com/errata/RHSA-2026:94474","https://access.redhat.com/errata/RHSA-2026:94476","https://access.redhat.com/errata/RHSA-2026:98468","https://access.redhat.com/errata/RHSA-2026:98572","https://access.redhat.com/security/cve/CVE-2026-74860","https://bugzilla.redhat.com/show_bug.cgi?id=2529697"],"sources":[{"name":"CVE","id":"CVE-2026-74860","modified":"2026-11-11T13:22:48.574Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"}],"assessments":[{"source":"redhat","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","score":8.5}],"sourceAffected":[],"observedAt":"2026-11-11T14:39:49.286Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T02:45:32.518Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-30T01:55:34.025Z","attemptedAt":"2026-10-30T01:55:34.025Z"},{"source":"GHSA","status":"available","checkedAt":"2026-10-30T01:55:34.025Z","attemptedAt":"2026-10-30T01:55:34.025Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-30T01:55:34.043Z","attemptedAt":"2026-10-30T01:55:34.043Z"},{"source":"EPSS","status":"available","checkedAt":"2026-10-30T01:55:34.025Z","attemptedAt":"2026-10-30T01:55:34.025Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-74860","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74860","modified":"2026-10-30T01:16:46.517","score":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","checkedAt":"2026-10-30T01:55:34.025Z"},{"source":"GitHub Advisory Database","id":"GHSA-8626-cqqj-mfff","url":"https://github.com/advisories/GHSA-8626-cqqj-mfff","modified":"2026-10-29T21:30:51Z","score":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","checkedAt":"2026-10-30T01:55:34.025Z"},{"source":"FIRST EPSS","id":"CVE-2026-74860","url":"https://www.first.org/epss/","probability":0.00658,"percentile":0.51379,"date":"2026-10-29","checkedAt":"2026-10-30T01:55:34.025Z"},{"source":"ENISA EUVD","id":"EUVD-2026-72691","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-72691","modified":"Oct 30, 2026, 12:06:37 AM","score":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","checkedAt":"2026-10-30T01:55:34.043Z"}],"aiSummary":{"text":"A flaw in libxml2 with Python bindings enabled can be exploited by a remote attacker with a specially crafted XML document, triggering a double-free error and potentially causing a denial of service. The affected versions and products are not specified.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-11T15:06:07.718Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-74860"}]}}