CVE-2026-61801

MEDIUM 5.5

Published 2026-10-08 · Last modified 2026-10-08

The `github.com/moby/sys/user` package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing `/etc/passwd`- or `/etc/group`-style files, allowing an attacker who can supply a specially crafted file to cause excessive memory consumption and potentially terminate the affected process due to an out-of-memory condition. This issue is patched in version 0.4.1. As a workaround, avoid parsing attacker-controlled user or group database files, or validate and limit untrusted input before parsing it.

NO EXPLOITATION SIGNALS

No known exploitation, public exploit, or elevated probability at this time. Track for changes.

Exploitation likelihood

0.1%chance of exploitation in 30 days · 2nd percentile

○ In CISA KEV ○ Catalogued PoC

Impact if exploited

5.5CVSS 3.1 · MEDIUM

ConfidentialityNone
IntegrityNone
AvailabilityHigh

What an attacker needs

⚠Access: Requires local access to the host
⚠Privileges: Requires a low-privilege account
✓User interaction: No user interaction needed
✓Complexity: No special conditions — reliably repeatable

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

No public PoC is currently catalogued.

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked daily for recent CVEs, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Data snapshot: 2026-10-26T13:52:32.101Z

Affected

Vendors Moby

Products Sys

Weakness (CWE)

CWE-400: : Uncontrolled Resource Consumption

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References and research data (JSON)

Packages and version ranges

Each advisory describes its own package and affected ranges. A boundary applies to that range; it is not a universal upgrade recommendation.

github.com/moby/sys/user Go

pkg:golang/github.com/moby/sys/user
SEMVER range
- All earlier versions (introduced 0)
- Fixed boundary (excluded): 0.4.1
Additional upstream package constraints
```
{
  "database": {
    "last_known_affected_version_range": "<= 0.4.0",
    "source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-mjcv-p78q-w5fw/GHSA-mjcv-p78q-w5fw.json"
  }
}
```
GitHub Advisory Database · GHSA-mjcv-p78q-w5fw · Updated 2026-10-19T21:40:47.349593935Z

github.com/moby/sys/user Go

pkg:golang/github.com/moby/sys/user

SEMVER range

All earlier versions (introduced 0)
Fixed boundary (excluded): 0.4.1

Additional upstream package constraints

{
  "ecosystem": {
    "imports": [
      {
        "path": "github.com/moby/sys/user",
        "symbols": [
          "CurrentGroup",
          "GetAdditionalGroups",
          "GetAdditionalGroupsPath",
          "GetExecUser",
          "GetExecUserPath",
          "LookupGid",
          "LookupGroup",
          "ParseGroup",
          "ParseGroupFile",
          "ParseGroupFileFilter",
          "ParseGroupFilter"
        ]
      }
    ]
  },
  "database": {
    "source": "https://vuln.go.dev/ID/GO-2026-6686.json"
  }
}

Go Vulnerability Database · GO-2026-6686 · Updated 2026-10-19T21:31:35.458679290Z

Vendor product assessments

Showing 32 of 336 vendor product statements; 304 omitted. Read the full vendor advisory.

grafana12.4-0:12.4.12-0.4.hum1@aarch64 as a component of Red Hat Hardened Images · fixed

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
grafana12.4-0:12.4.12-0.4.hum1@src as a component of Red Hat Hardened Images · fixed

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
grafana12.4-0:12.4.12-0.4.hum1@x86_64 as a component of Red Hat Hardened Images · fixed

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
grafana13.1-0:13.1.7-0.1.hum1@aarch64 as a component of Red Hat Hardened Images · fixed

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
grafana13.1-0:13.1.7-0.1.hum1@src as a component of Red Hat Hardened Images · fixed

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
grafana13.1-0:13.1.7-0.1.hum1@x86_64 as a component of Red Hat Hardened Images · fixed

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
grafana13.2-0:13.2.3-0.1.hum1@aarch64 as a component of Red Hat Hardened Images · fixed

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
grafana13.2-0:13.2.3-0.1.hum1@src as a component of Red Hat Hardened Images · fixed

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
grafana13.2-0:13.2.3-0.1.hum1@x86_64 as a component of Red Hat Hardened Images · fixed

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
assisted/agent-preinstall-image-builder-rhel9 as a component of Assisted Installer for Red Hat OpenShift Container Platform 2 · known affected

Vendor assessment for this product only.

pkg:oci/agent-preinstall-image-builder-rhel9@sha256:85a570ea209d0ac4800c5314dcf04bd30f9f89119e91223d450e29f3b9444c47?repository_url=registry.redhat.io/assisted/agent-preinstall-image-builder-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
lightspeed-core/rag-tool-cpu-rhel9 as a component of Lightspeed Core · known affected

Vendor assessment for this product only.

pkg:oci/rag-tool-cpu-rhel9@sha256:ec8e42910dd3a7109d90bf77bb47e198a1580875117dc4b5365b5a85d2d8325c?repository_url=registry.redhat.io/lightspeed-core/rag-tool-cpu-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
multicluster-globalhub/multicluster-globalhub-manager-rhel9 as a component of Multicluster Global Hub · known affected

Vendor assessment for this product only.

pkg:oci/multicluster-globalhub-manager-rhel9@sha256:6c0b3f002aac0debb7d52811d21d9f8fc9d0cf2e9d2aaf92a8f47bf8093481c7?repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
advanced-cluster-security/rhacs-operator-bundle as a component of Red Hat Advanced Cluster Security 4 · known affected

Vendor assessment for this product only.

pkg:oci/rhacs-operator-bundle@sha256:347a16467b2685d3984307f64d688b7a04612a3587241325c29df936a8ca8625?repository_url=registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
rhceph/grafana-rhel9 as a component of Red Hat Ceph Storage 8 · known affected

Vendor assessment for this product only.

pkg:oci/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c?repository_url=registry.redhat.io/rhceph/grafana-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
rhem/flightctl-imagebuilder-worker-rhel9 as a component of Red Hat Edge Manager 1 · known affected

Vendor assessment for this product only.

pkg:oci/flightctl-imagebuilder-worker-rhel9@sha256:ad3e3eb6f2f6f328edd57ffa898ca25a7ece9787a59a709fe62629ca6985b6fa?repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
osbuild-composer-core as a component of Red Hat Enterprise Linux 10 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/osbuild-composer-core
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
podman-catatonit (container-tools:rhel8) as a component of Red Hat Enterprise Linux 8 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/podman-catatonit?rpmmod=container-tools:rhel8
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
osbuild-composer-dnf-json as a component of Red Hat Enterprise Linux 9 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/osbuild-composer-dnf-json
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
ubi9/skopeo as a component of Red Hat Enterprise Linux 9 · known affected

Vendor assessment for this product only.

pkg:oci/skopeo@sha256:7c4df9c709381266811fa74e0a2b28be7ce8f69f1502280747b0f26cc674b6f0?repository_url=registry.redhat.io/ubi9/skopeo
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected

Vendor assessment for this product only.

pkg:oci/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256:d42aafacf60f441165985ee9b3218cefe0632024b04ae4067cba72b441168a10?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
openshift-kni/commatrix as a component of Red Hat OpenShift Container Platform 4 · known affected

Vendor assessment for this product only.

pkg:oci/commatrix@sha256:107732baa92c1620a84f6df9bc3b062599d9d83d3f6bacc7f6caa7595d740dae?repository_url=registry.redhat.io/openshift-kni/commatrix
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
openshift4/ose-cli-artifacts-rhel9 as a component of Red Hat OpenShift Container Platform 4 · known affected

Vendor assessment for this product only.

pkg:oci/ose-cli-artifacts-rhel9@sha256:a475c0e807a29b2bd13403a82188cb7bcca7d03def92d5299fc1f9534cfd7e75?repository_url=registry.redhat.io/openshift4/ose-cli-artifacts-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
openshift4/ose-operator-framework-tools-rhel9 as a component of Red Hat OpenShift Container Platform 4 · known affected

Vendor assessment for this product only.

pkg:oci/ose-operator-framework-tools-rhel9@sha256:5d2a6c8403ceedbc51b801cb7845d0ba98c7167f5ffe6511b723d47a19b0883f?repository_url=registry.redhat.io/openshift4/ose-operator-framework-tools-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
skopeo as a component of Red Hat OpenShift Container Platform 4 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/skopeo
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
web-terminal/web-terminal-tooling-rhel9 as a component of Red Hat Web Terminal · known affected

Vendor assessment for this product only.

pkg:oci/web-terminal-tooling-rhel9@sha256:f985f3d5a9940b3cf5e231d35973d5295013242d0220756241ed5c2be0744537?repository_url=registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
buildah.src as a component of Red Hat Hardened Images · known not affected

Vendor assessment for this product only.
Reason: component not present

pkg:rpm/redhat/buildah?arch=src
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
containers-common.src as a component of Red Hat Hardened Images · known not affected

Vendor assessment for this product only.
Reason: component not present

pkg:rpm/redhat/[email protected]?arch=src
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
grype.src as a component of Red Hat Hardened Images · known not affected

Vendor assessment for this product only.
Reason: component not present

pkg:rpm/redhat/[email protected]?arch=src
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
podman.src as a component of Red Hat Hardened Images · known not affected

Vendor assessment for this product only.
Reason: component not present

pkg:rpm/redhat/podman?arch=src
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
skopeo.src as a component of Red Hat Hardened Images · known not affected

Vendor assessment for this product only.
Reason: component not present

pkg:rpm/redhat/skopeo?arch=src
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
syft.src as a component of Red Hat Hardened Images · known not affected

Vendor assessment for this product only.
Reason: component not present

pkg:rpm/redhat/[email protected]?arch=src
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
trivy.src as a component of Red Hat Hardened Images · known not affected

Vendor assessment for this product only.
Reason: component not present

pkg:rpm/redhat/[email protected]?arch=src
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00

All CVSS metrics

MEDIUM 5.5 v3.1 · CNA Primary
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
MEDIUM 5.5 v3.1 · NVD Secondary
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References

Advisories

https://github.com/moby/sys/security/advisories/GHSA-mjcv-p78q-w5fw x_refsource_CONFIRMWEBADVISORYvendor-referenceCVE record · GitHub_M · Updated 2026-10-08T16:22:25.558Z
NVD · CVE-2026-61801 · Updated 2026-10-08T21:35:53.890
GitHub Advisory Database · GHSA-mjcv-p78q-w5fw
Go Vulnerability Database · GO-2026-6686
GitHub Advisory Database · GHSA-mjcv-p78q-w5fw · Updated 2026-10-19T21:40:47.349593935Z
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
https://osv.dev/vulnerability/GHSA-mjcv-p78q-w5fw ADVISORYGitHub Advisory Database · GHSA-mjcv-p78q-w5fw
GitHub Advisory Database · GHSA-mjcv-p78q-w5fw · Updated 2026-10-19T21:40:47.349593935Z
https://osv.dev/vulnerability/GO-2026-6686 ADVISORYGo Vulnerability Database · GO-2026-6686
Go Vulnerability Database · GO-2026-6686 · Updated 2026-10-19T21:31:35.458679290Z
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-61801.json vendor-advisoryRed Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95094 ADVISORYEUVD · EUVD-2026-95094

Technical & other

https://github.com/moby/sys/pull/221 x_refsource_MISCWEBvendor-referenceCVE record · GitHub_M · Updated 2026-10-08T16:22:25.558Z
NVD · CVE-2026-61801 · Updated 2026-10-08T21:35:53.890
GitHub Advisory Database · GHSA-mjcv-p78q-w5fw
Go Vulnerability Database · GO-2026-6686
GitHub Advisory Database · GHSA-mjcv-p78q-w5fw · Updated 2026-10-19T21:40:47.349593935Z
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
https://github.com/moby/sys/commit/85a71bbe1faa36c552a960e6a5f3d0cfb632fbbe x_refsource_MISCWEBFIXvendor-referenceCVE record · GitHub_M · Updated 2026-10-08T16:22:25.558Z
NVD · CVE-2026-61801 · Updated 2026-10-08T21:35:53.890
GitHub Advisory Database · GHSA-mjcv-p78q-w5fw
Go Vulnerability Database · GO-2026-6686
GitHub Advisory Database · GHSA-mjcv-p78q-w5fw · Updated 2026-10-19T21:40:47.349593935Z
Red Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
https://github.com/moby/sys PACKAGEGitHub Advisory Database · GHSA-mjcv-p78q-w5fw
GitHub Advisory Database · GHSA-mjcv-p78q-w5fw · Updated 2026-10-19T21:40:47.349593935Z
https://access.redhat.com/security/cve/CVE-2026-61801 vendor-referenceRed Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
https://bugzilla.redhat.com/show_bug.cgi?id=2548048 vendor-referenceRed Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
https://www.cve.org/CVERecord?id=CVE-2026-61801 vendor-referenceRed Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
https://nvd.nist.gov/vuln/detail/CVE-2026-61801 vendor-referenceRed Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
https://access.redhat.com/errata/RHSA-2026:76677 vendor-remediationRed Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
https://access.redhat.com/errata/RHSA-2026:76448 vendor-remediationRed Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00
https://access.redhat.com/errata/RHSA-2026:76430 vendor-remediationRed Hat · CVE-2026-61801 · Updated 2026-10-15T11:20:56+00:00

Sources: NVD · CVE.org · EPSS