{"schema":"vulnpedia.research/1","cve":"CVE-2026-6276","references":[{"url":"https://curl.se/docs/CVE-2026-6276.json","tags":["Product"],"source":"mitre","sourceId":"curl","modified":"2026-09-15T06:03:04.059Z","origins":[{"source":"mitre","sourceId":"curl","modified":"2026-09-15T06:03:04.059Z","url":"https://curl.se/docs/CVE-2026-6276.json"},{"source":"nvd","sourceId":"CVE-2026-6276","modified":"2026-09-15T07:16:29.343","url":"https://curl.se/docs/CVE-2026-6276.json"}]},{"url":"https://curl.se/docs/CVE-2026-6276.html","tags":["Patch","Vendor Advisory","vendor-reference"],"source":"mitre","sourceId":"curl","modified":"2026-09-15T06:03:04.059Z","origins":[{"source":"mitre","sourceId":"curl","modified":"2026-09-15T06:03:04.059Z","url":"https://curl.se/docs/CVE-2026-6276.html"},{"source":"nvd","sourceId":"CVE-2026-6276","modified":"2026-09-15T07:16:29.343","url":"https://curl.se/docs/CVE-2026-6276.html"},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://curl.se/docs/CVE-2026-6276.html"}]},{"url":"https://hackerone.com/reports/3671818","tags":["exploit","Exploit","Issue Tracking","Third Party Advisory"],"source":"mitre","sourceId":"curl","modified":"2026-09-15T06:03:04.059Z","origins":[{"source":"mitre","sourceId":"curl","modified":"2026-09-15T06:03:04.059Z","url":"https://hackerone.com/reports/3671818"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-05-13T17:26:06.894Z","url":"https://hackerone.com/reports/3671818"},{"source":"nvd","sourceId":"CVE-2026-6276","modified":"2026-09-15T07:16:29.343","url":"https://hackerone.com/reports/3671818"}]},{"url":"http://www.openwall.com/lists/oss-security/2026/04/29/13","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2026-05-13T09:05:37.539Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-05-13T09:05:37.539Z","url":"http://www.openwall.com/lists/oss-security/2026/04/29/13"},{"source":"nvd","sourceId":"CVE-2026-6276","modified":"2026-09-15T07:16:29.343","url":"http://www.openwall.com/lists/oss-security/2026/04/29/13"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6276","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-6276"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2461203","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2461203"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6276","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-6276"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6276","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6276"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:12916","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://access.redhat.com/errata/RHSA-2026:12916"}]},{"source":"euvd","sourceId":"EUVD-2026-29928","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-29928","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-29928","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-29928"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"Red Hat Hardened Images:curl-0:8.20.0-0.1.hum1@aarch64","product":"curl-0:8.20.0-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:12916"},{"category":"workaround","details":"To mitigate this issue, avoid using custom `Host:` headers with libcurl, especially when reusing the same easy handle for multiple requests. This vulnerability primarily arises from specific debugging configurations."}],"purl":"pkg:rpm/redhat/curl@8.20.0-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"Red Hat Hardened Images:curl-0:8.20.0-0.1.hum1@src","product":"curl-0:8.20.0-0.1.hum1@src as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:12916"},{"category":"workaround","details":"To mitigate this issue, avoid using custom `Host:` headers with libcurl, especially when reusing the same easy handle for multiple requests. This vulnerability primarily arises from specific debugging configurations."}],"purl":"pkg:rpm/redhat/curl@8.20.0-0.1.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"Red Hat Hardened Images:curl-0:8.20.0-0.1.hum1@x86_64","product":"curl-0:8.20.0-0.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:12916"},{"category":"workaround","details":"To mitigate this issue, avoid using custom `Host:` headers with libcurl, especially when reusing the same easy handle for multiple requests. This vulnerability primarily arises from specific debugging configurations."}],"purl":"pkg:rpm/redhat/curl@8.20.0-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"confidential_compute_attestation:build-of-trustee/trustee-rhel9","product":"build-of-trustee/trustee-rhel9 as a component of Confidential Compute Attestation","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid using custom `Host:` headers with libcurl, especially when reusing the same easy handle for multiple requests. This vulnerability primarily arises from specific debugging configurations."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/trustee-rhel9?repository_url=registry.redhat.io/build-of-trustee/trustee-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-builder-rhel9","product":"openshift-sandboxed-containers/osc-podvm-builder-rhel9 as a component of Confidential Compute Attestation","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid using custom `Host:` headers with libcurl, especially when reusing the same easy handle for multiple requests. This vulnerability primarily arises from specific debugging configurations."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/osc-podvm-builder-rhel9?repository_url=registry.redhat.io/openshift-sandboxed-containers/osc-podvm-builder-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"logging_subsystem_for_red_hat_openshift:openshift-logging/cluster-logging-operator-bundle","product":"openshift-logging/cluster-logging-operator-bundle as a component of Logging Subsystem for Red Hat OpenShift","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid using custom `Host:` headers with libcurl, especially when reusing the same easy handle for multiple requests. This vulnerability primarily arises from specific debugging configurations."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/cluster-logging-operator-bundle?repository_url=registry.redhat.io/openshift-logging/cluster-logging-operator-bundle","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"logging_subsystem_for_red_hat_openshift:openshift-logging/fluentd-rhel9","product":"openshift-logging/fluentd-rhel9 as a component of Logging Subsystem for Red Hat OpenShift","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid using custom `Host:` headers with libcurl, especially when reusing the same easy handle for multiple requests. This vulnerability primarily arises from specific debugging configurations."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/fluentd-rhel9?repository_url=registry.redhat.io/openshift-logging/fluentd-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"red_hat_enterprise_linux_10:curl","product":"curl as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid using custom `Host:` headers with libcurl, especially when reusing the same easy handle for multiple requests. This vulnerability primarily arises from specific debugging configurations."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/curl","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"red_hat_enterprise_linux_10:libcurl-devel","product":"libcurl-devel as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid using custom `Host:` headers with libcurl, especially when reusing the same easy handle for multiple requests. This vulnerability primarily arises from specific debugging configurations."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/libcurl-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"red_hat_enterprise_linux_6:curl","product":"curl as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid using custom `Host:` headers with libcurl, especially when reusing the same easy handle for multiple requests. This vulnerability primarily arises from specific debugging configurations."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/curl","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"red_hat_enterprise_linux_6:libcurl-devel","product":"libcurl-devel as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid using custom `Host:` headers with libcurl, especially when reusing the same easy handle for multiple requests. This vulnerability primarily arises from specific debugging configurations."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/libcurl-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"red_hat_enterprise_linux_7:libcurl","product":"libcurl as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid using custom `Host:` headers with libcurl, especially when reusing the same easy handle for multiple requests. This vulnerability primarily arises from specific debugging configurations."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/libcurl","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"red_hat_enterprise_linux_8:curl.src","product":"curl.src as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid using custom `Host:` headers with libcurl, especially when reusing the same easy handle for multiple requests. This vulnerability primarily arises from specific debugging configurations."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/curl?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"red_hat_enterprise_linux_8:libcurl-minimal","product":"libcurl-minimal as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid using custom `Host:` headers with libcurl, especially when reusing the same easy handle for multiple requests. This vulnerability primarily arises from specific debugging configurations."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/libcurl-minimal","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"red_hat_enterprise_linux_9:libcurl","product":"libcurl as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid using custom `Host:` headers with libcurl, especially when reusing the same easy handle for multiple requests. This vulnerability primarily arises from specific debugging configurations."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/libcurl","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"red_hat_enterprise_linux_9:snphost.src","product":"snphost.src as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid using custom `Host:` headers with libcurl, especially when reusing the same easy handle for multiple requests. This vulnerability primarily arises from specific debugging configurations."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/snphost?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8","product":"openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid using custom `Host:` headers with libcurl, especially when reusing the same easy handle for multiple requests. This vulnerability primarily arises from specific debugging configurations."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/ose-rhel-coreos-8?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-8","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"red_hat_trusted_profile_analyzer:rhtpa/rhtpa-trustification-service-rhel9","product":"rhtpa/rhtpa-trustification-service-rhel9 as a component of Red Hat Trusted Profile Analyzer","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid using custom `Host:` headers with libcurl, especially when reusing the same easy handle for multiple requests. This vulnerability primarily arises from specific debugging configurations."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/rhtpa-trustification-service-rhel9?repository_url=registry.redhat.io/rhtpa/rhtpa-trustification-service-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"red_hat_enterprise_linux_10:cargo","product":"cargo as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/cargo","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"red_hat_enterprise_linux_10:rust-debugger-common","product":"rust-debugger-common as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/rust-debugger-common","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"red_hat_enterprise_linux_10:rust-src","product":"rust-src as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/rust-src","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"red_hat_enterprise_linux_10:rust-std-static-wasm32-wasip1","product":"rust-std-static-wasm32-wasip1 as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/rust-std-static-wasm32-wasip1","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"red_hat_enterprise_linux_10:rust.src","product":"rust.src as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/rust?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"red_hat_enterprise_linux_10:s390utils-cmsfs-fuse","product":"s390utils-cmsfs-fuse as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/s390utils-cmsfs-fuse","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"red_hat_enterprise_linux_10:s390utils-devel","product":"s390utils-devel as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/s390utils-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"red_hat_enterprise_linux_10:s390utils-se-data","product":"s390utils-se-data as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/s390utils-se-data","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"red_hat_enterprise_linux_10:trustee-guest-components.src","product":"trustee-guest-components.src as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/trustee-guest-components?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"red_hat_enterprise_linux_9:rust","product":"rust as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/rust","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"red_hat_enterprise_linux_9:rust-doc","product":"rust-doc as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/rust-doc","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"red_hat_enterprise_linux_9:rust-std-static","product":"rust-std-static as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/rust-std-static","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"red_hat_enterprise_linux_9:rust-toolset","product":"rust-toolset as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/rust-toolset","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]},{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json","productId":"red_hat_hardened_images:rust.src","product":"rust.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/rust?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-6276","modified":"2026-09-22T12:22:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6276.json"}]}],"vendorCoverage":{"total":102,"shown":32,"omitted":70,"source":"redhat"}}