{"schema":"vulnpedia.research/1","cve":"CVE-2026-87654","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","tags":["Release Notes","Vendor Advisory","vendor-reference"],"source":"mitre","sourceId":"Chrome","modified":"2026-09-09T00:09:34.590Z","origins":[{"source":"mitre","sourceId":"Chrome","modified":"2026-09-09T00:09:34.590Z","url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html"},{"source":"nvd","sourceId":"CVE-2026-87654","modified":"2026-09-10T04:18:31.987","url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html"},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html"}]},{"url":"https://issues.chromium.org/issues/536444790","tags":["Permissions Required","vendor-reference"],"source":"mitre","sourceId":"Chrome","modified":"2026-09-09T00:09:34.590Z","origins":[{"source":"mitre","sourceId":"Chrome","modified":"2026-09-09T00:09:34.590Z","url":"https://issues.chromium.org/issues/536444790"},{"source":"nvd","sourceId":"CVE-2026-87654","modified":"2026-09-10T04:18:31.987","url":"https://issues.chromium.org/issues/536444790"},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://issues.chromium.org/issues/536444790"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-87654","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-87654"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2530305","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2530305"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-87654","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-87654"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87654","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87654"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:84584","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://access.redhat.com/errata/RHSA-2026:84584"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:84583","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://access.redhat.com/errata/RHSA-2026:84583"}]},{"source":"euvd","sourceId":"EUVD-2026-74504","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-74504","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-74504","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-74504"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.1-1.el8_10.aarch64","product":"webkit2gtk3-0:2.54.1-1.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:84584"}],"purl":"pkg:rpm/redhat/webkit2gtk3@2.54.1-1.el8_10?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.1-1.el8_10.s390x","product":"webkit2gtk3-debuginfo-0:2.54.1-1.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:84584"}],"purl":"pkg:rpm/redhat/webkit2gtk3-debuginfo@2.54.1-1.el8_10?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.1-1.el8_10.ppc64le","product":"webkit2gtk3-devel-0:2.54.1-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:84584"}],"purl":"pkg:rpm/redhat/webkit2gtk3-devel@2.54.1-1.el8_10?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.1-1.el8_10.i686","product":"webkit2gtk3-jsc-0:2.54.1-1.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:84584"}],"purl":"pkg:rpm/redhat/webkit2gtk3-jsc@2.54.1-1.el8_10?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.1-1.el8_10.aarch64","product":"webkit2gtk3-jsc-devel-0:2.54.1-1.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:84584"}],"purl":"pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.54.1-1.el8_10?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-0:2.54.1-1.el9_8.aarch64","product":"webkit2gtk3-0:2.54.1-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:84583"}],"purl":"pkg:rpm/redhat/webkit2gtk3@2.54.1-1.el9_8?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.54.1-1.el9_8.s390x","product":"webkit2gtk3-debuginfo-0:2.54.1-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:84583"}],"purl":"pkg:rpm/redhat/webkit2gtk3-debuginfo@2.54.1-1.el9_8?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.54.1-1.el9_8.ppc64le","product":"webkit2gtk3-devel-0:2.54.1-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:84583"}],"purl":"pkg:rpm/redhat/webkit2gtk3-devel@2.54.1-1.el9_8?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.54.1-1.el9_8.i686","product":"webkit2gtk3-jsc-0:2.54.1-1.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:84583"}],"purl":"pkg:rpm/redhat/webkit2gtk3-jsc@2.54.1-1.el9_8?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.54.1-1.el9_8.aarch64","product":"webkit2gtk3-jsc-devel-0:2.54.1-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:84583"}],"purl":"pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.54.1-1.el9_8?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.1-1.el9_8.x86_64","product":"webkit2gtk3-jsc-devel-debuginfo-0:2.54.1-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:84583"}],"purl":"pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.54.1-1.el9_8?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"red_hat_enterprise_linux_6:webkitgtk","product":"webkitgtk as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/webkitgtk","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"red_hat_enterprise_linux_6:webkitgtk-devel","product":"webkitgtk-devel as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/webkitgtk-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"red_hat_enterprise_linux_6:webkitgtk-doc","product":"webkitgtk-doc as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/webkitgtk-doc","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"red_hat_enterprise_linux_6:webkitgtk.src","product":"webkitgtk.src as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/webkitgtk?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"red_hat_enterprise_linux_7:webkitgtk4","product":"webkitgtk4 as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/webkitgtk4","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"red_hat_enterprise_linux_7:webkitgtk4-devel","product":"webkitgtk4-devel as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/webkitgtk4-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"red_hat_enterprise_linux_7:webkitgtk4-doc","product":"webkitgtk4-doc as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/webkitgtk4-doc","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"red_hat_enterprise_linux_7:webkitgtk4-jsc","product":"webkitgtk4-jsc as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/webkitgtk4-jsc","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"red_hat_enterprise_linux_7:webkitgtk4-jsc-devel","product":"webkitgtk4-jsc-devel as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/webkitgtk4-jsc-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"red_hat_enterprise_linux_7:webkitgtk4-plugin-process-gtk2","product":"webkitgtk4-plugin-process-gtk2 as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/webkitgtk4-plugin-process-gtk2","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"red_hat_enterprise_linux_7:webkitgtk4.src","product":"webkitgtk4.src as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/webkitgtk4?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"red_hat_enterprise_linux_10:firefox","product":"firefox as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/firefox","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"red_hat_enterprise_linux_10:thunderbird","product":"thunderbird as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/thunderbird","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"red_hat_enterprise_linux_7:firefox.src","product":"firefox.src as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/firefox?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"red_hat_enterprise_linux_7:webkitgtk3","product":"webkitgtk3 as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/webkitgtk3","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"red_hat_enterprise_linux_7:webkitgtk3.src","product":"webkitgtk3.src as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/webkitgtk3?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"red_hat_enterprise_linux_8:firefox.src","product":"firefox.src as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/firefox?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"red_hat_enterprise_linux_8:mozjs60.src","product":"mozjs60.src as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/mozjs60?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"red_hat_enterprise_linux_8:thunderbird.src","product":"thunderbird.src as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/thunderbird?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"red_hat_enterprise_linux_9:firefox.src","product":"firefox.src as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/firefox?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]},{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json","productId":"red_hat_enterprise_linux_9:thunderbird.src","product":"thunderbird.src as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/thunderbird?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-87654","modified":"2026-10-19T04:32:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87654.json"}]}],"vendorCoverage":{"total":126,"shown":32,"omitted":94,"source":"redhat"}}