{"schema":"vulnpedia.research/1","cve":"CVE-2026-110869","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/nodemailer/nodemailer/security/advisories/GHSA-4ffr-jq9g-5ffx","tags":["vendor-advisory","exploit","vendor-reference"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T22:52:57.866Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T22:52:57.866Z","url":"https://github.com/nodemailer/nodemailer/security/advisories/GHSA-4ffr-jq9g-5ffx"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-15T15:35:29.075Z","url":"https://github.com/nodemailer/nodemailer/security/advisories/GHSA-4ffr-jq9g-5ffx"},{"source":"nvd","sourceId":"CVE-2026-110869","modified":"2026-10-16T18:14:51.460","url":"https://github.com/nodemailer/nodemailer/security/advisories/GHSA-4ffr-jq9g-5ffx"},{"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","url":"https://github.com/nodemailer/nodemailer/security/advisories/GHSA-4ffr-jq9g-5ffx"}]},{"url":"https://www.vulncheck.com/advisories/nodemailer-3.0.0-before-10.0.13-redos-via-smtp-auth-mechanism-detection-regexes","tags":["third-party-advisory","vendor-reference"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T22:52:57.866Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T22:52:57.866Z","url":"https://www.vulncheck.com/advisories/nodemailer-3.0.0-before-10.0.13-redos-via-smtp-auth-mechanism-detection-regexes"},{"source":"nvd","sourceId":"CVE-2026-110869","modified":"2026-10-16T18:14:51.460","url":"https://www.vulncheck.com/advisories/nodemailer-3.0.0-before-10.0.13-redos-via-smtp-auth-mechanism-detection-regexes"},{"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","url":"https://www.vulncheck.com/advisories/nodemailer-3.0.0-before-10.0.13-redos-via-smtp-auth-mechanism-detection-regexes"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110869.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110869.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-110869","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-110869"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2552974","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2552974"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-110869","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-110869"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110869","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110869"}]},{"source":"euvd","sourceId":"EUVD-2026-101752","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101752","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-101752","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101752"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110869.json","productId":"self-service_automation_portal_2:ansible-automation-platform/bootc-automation-portal-rhel9","product":"ansible-automation-platform/bootc-automation-portal-rhel9 as a component of Self-service automation portal 2","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. The upstream fix is available in nodemailer 10.0.13 and later; updates for affected Red Hat products that bundle nodemailer are being pursued through the respective product teams."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-automation-portal-rhel9@sha256:8553c734145775879bdfe2befa9f2df1c22c6d7db2f2251401c3cc517a7e0394?repository_url=registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110869.json"}]},{"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110869.json","productId":"red_hat_developer_hub:rhdh/rhdh-hub-rhel9","product":"rhdh/rhdh-hub-rhel9 as a component of Red Hat Developer Hub","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_in_execute_path","purl":"pkg:oci/rhdh-hub-rhel9@sha256:0f02ae0b8405912741a180af1c290feac2003e69d062bec9c7cd5d13f8732dc9?repository_url=registry.redhat.io/rhdh/rhdh-hub-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110869.json"}]},{"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110869.json","productId":"red_hat_enterprise_linux_10:grafana","product":"grafana as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/grafana","origins":[{"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110869.json"}]},{"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110869.json","productId":"red_hat_enterprise_linux_10:grafana-selinux","product":"grafana-selinux as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/grafana-selinux","origins":[{"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110869.json"}]},{"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110869.json","productId":"red_hat_enterprise_linux_10:grafana.src","product":"grafana.src as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/grafana?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110869.json"}]},{"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110869.json","productId":"red_hat_hardened_images:grafana12.4.src","product":"grafana12.4.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/grafana12.4@12.4.12-0.4.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110869.json"}]},{"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110869.json","productId":"red_hat_hardened_images:grafana13.1.src","product":"grafana13.1.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/grafana13.1@13.1.7-0.1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110869.json"}]},{"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110869.json","productId":"red_hat_hardened_images:grafana13.2.src","product":"grafana13.2.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/grafana13.2@13.2.3-0.1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-110869","modified":"2026-10-23T17:24:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110869.json"}]}],"vendorCoverage":{"total":8,"shown":8,"omitted":0,"source":"redhat"}}