{"schema":"vulnpedia.research/1","cve":"CVE-2026-69186","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/c-ares/c-ares/security/advisories/GHSA-jv8r-gqr9-68wj","tags":["x_refsource_CONFIRM","exploit","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-09-18T17:25:42.440Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-09-18T17:25:42.440Z","url":"https://github.com/c-ares/c-ares/security/advisories/GHSA-jv8r-gqr9-68wj"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-09-18T19:51:33.881Z","url":"https://github.com/c-ares/c-ares/security/advisories/GHSA-jv8r-gqr9-68wj"},{"source":"nvd","sourceId":"CVE-2026-69186","modified":"2026-09-23T18:12:04.247","url":"https://github.com/c-ares/c-ares/security/advisories/GHSA-jv8r-gqr9-68wj"},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://github.com/c-ares/c-ares/security/advisories/GHSA-jv8r-gqr9-68wj"}]},{"url":"https://github.com/c-ares/c-ares/pull/1134","tags":["x_refsource_MISC","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-09-18T17:25:42.440Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-09-18T17:25:42.440Z","url":"https://github.com/c-ares/c-ares/pull/1134"},{"source":"nvd","sourceId":"CVE-2026-69186","modified":"2026-09-23T18:12:04.247","url":"https://github.com/c-ares/c-ares/pull/1134"},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://github.com/c-ares/c-ares/pull/1134"}]},{"url":"https://github.com/c-ares/c-ares/commit/e47c203f91cd8b749c8736bc18d75a31ffdec8f4","tags":["x_refsource_MISC","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-09-18T17:25:42.440Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-09-18T17:25:42.440Z","url":"https://github.com/c-ares/c-ares/commit/e47c203f91cd8b749c8736bc18d75a31ffdec8f4"},{"source":"nvd","sourceId":"CVE-2026-69186","modified":"2026-09-23T18:12:04.247","url":"https://github.com/c-ares/c-ares/commit/e47c203f91cd8b749c8736bc18d75a31ffdec8f4"},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://github.com/c-ares/c-ares/commit/e47c203f91cd8b749c8736bc18d75a31ffdec8f4"}]},{"url":"https://github.com/c-ares/c-ares/commit/eaded4cb200b2a5f8d73f11021ff7c8d6968aaab","tags":["x_refsource_MISC","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-09-18T17:25:42.440Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-09-18T17:25:42.440Z","url":"https://github.com/c-ares/c-ares/commit/eaded4cb200b2a5f8d73f11021ff7c8d6968aaab"},{"source":"nvd","sourceId":"CVE-2026-69186","modified":"2026-09-23T18:12:04.247","url":"https://github.com/c-ares/c-ares/commit/eaded4cb200b2a5f8d73f11021ff7c8d6968aaab"},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://github.com/c-ares/c-ares/commit/eaded4cb200b2a5f8d73f11021ff7c8d6968aaab"}]},{"url":"https://github.com/c-ares/c-ares/releases/tag/v1.34.7","tags":["x_refsource_MISC","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-09-18T17:25:42.440Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-09-18T17:25:42.440Z","url":"https://github.com/c-ares/c-ares/releases/tag/v1.34.7"},{"source":"nvd","sourceId":"CVE-2026-69186","modified":"2026-09-23T18:12:04.247","url":"https://github.com/c-ares/c-ares/releases/tag/v1.34.7"},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://github.com/c-ares/c-ares/releases/tag/v1.34.7"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-69186","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-69186"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2538212","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2538212"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-69186","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-69186"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69186","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69186"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:40574","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://access.redhat.com/errata/RHSA-2026:40574"}]},{"source":"euvd","sourceId":"EUVD-2026-83212","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-83212","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-83212","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-83212"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"Red Hat Hardened Images:c-ares-0:1.34.8-2.hum1@aarch64","product":"c-ares-0:1.34.8-2.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:40574"},{"category":"workaround","details":"Configure applications that use c-ares to query only trusted DNS resolvers over a trusted network path (CME-202 host firewall; CME-203 network segmentation). Restrict DNS responses from untrusted sources so a malicious or on-path resolver cannot deliver crafted replies. There is no complete library-level workaround; apply a fixed c-ares update when available."}],"purl":"pkg:rpm/redhat/c-ares@1.34.8-2.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"Red Hat Hardened Images:c-ares-0:1.34.8-2.hum1@src","product":"c-ares-0:1.34.8-2.hum1@src as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:40574"},{"category":"workaround","details":"Configure applications that use c-ares to query only trusted DNS resolvers over a trusted network path (CME-202 host firewall; CME-203 network segmentation). Restrict DNS responses from untrusted sources so a malicious or on-path resolver cannot deliver crafted replies. There is no complete library-level workaround; apply a fixed c-ares update when available."}],"purl":"pkg:rpm/redhat/c-ares@1.34.8-2.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"Red Hat Hardened Images:c-ares-0:1.34.8-2.hum1@x86_64","product":"c-ares-0:1.34.8-2.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:40574"},{"category":"workaround","details":"Configure applications that use c-ares to query only trusted DNS resolvers over a trusted network path (CME-202 host firewall; CME-203 network segmentation). Restrict DNS responses from untrusted sources so a malicious or on-path resolver cannot deliver crafted replies. There is no complete library-level workaround; apply a fixed c-ares update when available."}],"purl":"pkg:rpm/redhat/c-ares@1.34.8-2.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"Red Hat Hardened Images:c-ares-devel-0:1.34.8-2.hum1@aarch64","product":"c-ares-devel-0:1.34.8-2.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:40574"},{"category":"workaround","details":"Configure applications that use c-ares to query only trusted DNS resolvers over a trusted network path (CME-202 host firewall; CME-203 network segmentation). Restrict DNS responses from untrusted sources so a malicious or on-path resolver cannot deliver crafted replies. There is no complete library-level workaround; apply a fixed c-ares update when available."}],"purl":"pkg:rpm/redhat/c-ares-devel@1.34.8-2.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"Red Hat Hardened Images:c-ares-devel-0:1.34.8-2.hum1@x86_64","product":"c-ares-devel-0:1.34.8-2.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:40574"},{"category":"workaround","details":"Configure applications that use c-ares to query only trusted DNS resolvers over a trusted network path (CME-202 host firewall; CME-203 network segmentation). Restrict DNS responses from untrusted sources so a malicious or on-path resolver cannot deliver crafted replies. There is no complete library-level workaround; apply a fixed c-ares update when available."}],"purl":"pkg:rpm/redhat/c-ares-devel@1.34.8-2.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"red_hat_enterprise_linux_10:c-ares","product":"c-ares as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"Configure applications that use c-ares to query only trusted DNS resolvers over a trusted network path (CME-202 host firewall; CME-203 network segmentation). Restrict DNS responses from untrusted sources so a malicious or on-path resolver cannot deliver crafted replies. There is no complete library-level workaround; apply a fixed c-ares update when available."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/c-ares","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"red_hat_enterprise_linux_10:c-ares-devel","product":"c-ares-devel as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"Configure applications that use c-ares to query only trusted DNS resolvers over a trusted network path (CME-202 host firewall; CME-203 network segmentation). Restrict DNS responses from untrusted sources so a malicious or on-path resolver cannot deliver crafted replies. There is no complete library-level workaround; apply a fixed c-ares update when available."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/c-ares-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"red_hat_enterprise_linux_10:c-ares.src","product":"c-ares.src as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"Configure applications that use c-ares to query only trusted DNS resolvers over a trusted network path (CME-202 host firewall; CME-203 network segmentation). Restrict DNS responses from untrusted sources so a malicious or on-path resolver cannot deliver crafted replies. There is no complete library-level workaround; apply a fixed c-ares update when available."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/c-ares?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8","product":"openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"Configure applications that use c-ares to query only trusted DNS resolvers over a trusted network path (CME-202 host firewall; CME-203 network segmentation). Restrict DNS responses from untrusted sources so a malicious or on-path resolver cannot deliver crafted replies. There is no complete library-level workaround; apply a fixed c-ares update when available."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/ose-rhel-coreos-8?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-8","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9","product":"openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"Configure applications that use c-ares to query only trusted DNS resolvers over a trusted network path (CME-202 host firewall; CME-203 network segmentation). Restrict DNS responses from untrusted sources so a malicious or on-path resolver cannot deliver crafted replies. There is no complete library-level workaround; apply a fixed c-ares update when available."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/ose-rhel-coreos-9?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-9","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"red_hat_enterprise_linux_10:nodejs","product":"nodejs as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"red_hat_enterprise_linux_10:nodejs-full-i18n","product":"nodejs-full-i18n as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs-full-i18n","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"red_hat_enterprise_linux_6:c-ares-devel","product":"c-ares-devel as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/c-ares-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"red_hat_enterprise_linux_7:c-ares-devel","product":"c-ares-devel as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/c-ares-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"red_hat_enterprise_linux_8:c-ares-devel","product":"c-ares-devel as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/c-ares-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"red_hat_enterprise_linux_8:nodejs-docs::nodejs:22","product":"nodejs-docs (nodejs:22) as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs-docs?rpmmod=nodejs:22","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"red_hat_enterprise_linux_8:nodejs-full-i18n::nodejs:24","product":"nodejs-full-i18n (nodejs:24) as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs-full-i18n?rpmmod=nodejs:24","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"red_hat_enterprise_linux_8:nodejs-nodemon.src::nodejs:22","product":"nodejs-nodemon.src (nodejs:22) as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs-nodemon?arch=src&rpmmod=nodejs:22","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"red_hat_enterprise_linux_8:nodejs-packaging-bundler::nodejs:22","product":"nodejs-packaging-bundler (nodejs:22) as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs-packaging-bundler?rpmmod=nodejs:22","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"red_hat_enterprise_linux_8:nodejs-packaging.src::nodejs:24","product":"nodejs-packaging.src (nodejs:24) as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs-packaging?arch=src&rpmmod=nodejs:24","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"red_hat_enterprise_linux_8:nodejs.src::nodejs:22","product":"nodejs.src (nodejs:22) as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs?arch=src&rpmmod=nodejs:22","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"red_hat_enterprise_linux_8:nodejs::nodejs:24","product":"nodejs (nodejs:24) as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs?rpmmod=nodejs:24","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"red_hat_enterprise_linux_8:v8-12.4-devel::nodejs:24","product":"v8-12.4-devel (nodejs:24) as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/v8-12.4-devel?rpmmod=nodejs:24","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"red_hat_enterprise_linux_9:c-ares","product":"c-ares as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/c-ares","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"red_hat_enterprise_linux_9:nodejs-docs::nodejs:22","product":"nodejs-docs (nodejs:22) as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs-docs?rpmmod=nodejs:22","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"red_hat_enterprise_linux_9:nodejs-full-i18n::nodejs:24","product":"nodejs-full-i18n (nodejs:24) as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs-full-i18n?rpmmod=nodejs:24","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"red_hat_enterprise_linux_9:nodejs-libs::nodejs:24","product":"nodejs-libs (nodejs:24) as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs-libs?rpmmod=nodejs:24","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"red_hat_enterprise_linux_9:nodejs.src::nodejs:24","product":"nodejs.src (nodejs:24) as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs?arch=src&rpmmod=nodejs:24","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"red_hat_enterprise_linux_9:nodejs::nodejs:26","product":"nodejs (nodejs:26) as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs?rpmmod=nodejs:26","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"red_hat_enterprise_linux_9:npm::nodejs:26","product":"npm (nodejs:26) as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/npm?rpmmod=nodejs:26","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"openshift_service_mesh_3:istio-proxy-selinux","product":"istio-proxy-selinux as a component of OpenShift Service Mesh 3","status":"under_investigation","remediations":[],"purl":"pkg:rpm/redhat/istio-proxy-selinux","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]},{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json","productId":"openshift_service_mesh_3:istio-proxy.src","product":"istio-proxy.src as a component of OpenShift Service Mesh 3","status":"under_investigation","remediations":[],"purl":"pkg:rpm/redhat/istio-proxy?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-69186","modified":"2026-10-22T20:32:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69186.json"}]}],"vendorCoverage":{"total":76,"shown":32,"omitted":44,"source":"redhat"}}