{"schema":"vulnpedia.research/1","cve":"CVE-2026-88806","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309","tags":["patch","vendor-reference"],"source":"mitre","sourceId":"suse","modified":"2026-09-21T13:42:12.700Z","origins":[{"source":"mitre","sourceId":"suse","modified":"2026-09-21T13:42:12.700Z","url":"https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309"},{"source":"nvd","sourceId":"CVE-2026-88806","modified":"2026-09-22T19:40:05.870","url":"https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309"},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-88806","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-88806"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2538514","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2538514"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-88806","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-88806"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88806","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88806"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:89730","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://access.redhat.com/errata/RHSA-2026:89730"}]},{"source":"euvd","sourceId":"EUVD-2026-83914","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-83914","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-83914","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-83914"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:libX11-0:1.6.8-10.el8_10.aarch64","product":"libX11-0:1.6.8-10.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:89730"},{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."}],"purl":"pkg:rpm/redhat/libX11@1.6.8-10.el8_10?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:libX11-0:1.6.8-10.el8_10.ppc64le","product":"libX11-0:1.6.8-10.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:89730"},{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."}],"purl":"pkg:rpm/redhat/libX11@1.6.8-10.el8_10?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:libX11-0:1.6.8-10.el8_10.src","product":"libX11-0:1.6.8-10.el8_10.src as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:89730"},{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."}],"purl":"pkg:rpm/redhat/libX11@1.6.8-10.el8_10?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:libX11-common-0:1.6.8-10.el8_10.noarch","product":"libX11-common-0:1.6.8-10.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:89730"},{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."}],"purl":"pkg:rpm/redhat/libX11-common@1.6.8-10.el8_10?arch=noarch","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:libX11-debuginfo-0:1.6.8-10.el8_10.i686","product":"libX11-debuginfo-0:1.6.8-10.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:89730"},{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."}],"purl":"pkg:rpm/redhat/libX11-debuginfo@1.6.8-10.el8_10?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:libX11-debuginfo-0:1.6.8-10.el8_10.s390x","product":"libX11-debuginfo-0:1.6.8-10.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:89730"},{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."}],"purl":"pkg:rpm/redhat/libX11-debuginfo@1.6.8-10.el8_10?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:libX11-debugsource-0:1.6.8-10.el8_10.aarch64","product":"libX11-debugsource-0:1.6.8-10.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:89730"},{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."}],"purl":"pkg:rpm/redhat/libX11-debugsource@1.6.8-10.el8_10?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:libX11-debugsource-0:1.6.8-10.el8_10.ppc64le","product":"libX11-debugsource-0:1.6.8-10.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:89730"},{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."}],"purl":"pkg:rpm/redhat/libX11-debugsource@1.6.8-10.el8_10?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:libX11-devel-0:1.6.8-10.el8_10.aarch64","product":"libX11-devel-0:1.6.8-10.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:89730"},{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."}],"purl":"pkg:rpm/redhat/libX11-devel@1.6.8-10.el8_10?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:libX11-devel-0:1.6.8-10.el8_10.ppc64le","product":"libX11-devel-0:1.6.8-10.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:89730"},{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."}],"purl":"pkg:rpm/redhat/libX11-devel@1.6.8-10.el8_10?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:libX11-devel-0:1.6.8-10.el8_10.x86_64","product":"libX11-devel-0:1.6.8-10.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:89730"},{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."}],"purl":"pkg:rpm/redhat/libX11-devel@1.6.8-10.el8_10?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:libX11-xcb-0:1.6.8-10.el8_10.i686","product":"libX11-xcb-0:1.6.8-10.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:89730"},{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."}],"purl":"pkg:rpm/redhat/libX11-xcb@1.6.8-10.el8_10?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:libX11-xcb-0:1.6.8-10.el8_10.s390x","product":"libX11-xcb-0:1.6.8-10.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:89730"},{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."}],"purl":"pkg:rpm/redhat/libX11-xcb@1.6.8-10.el8_10?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:libX11-xcb-debuginfo-0:1.6.8-10.el8_10.aarch64","product":"libX11-xcb-debuginfo-0:1.6.8-10.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:89730"},{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."}],"purl":"pkg:rpm/redhat/libX11-xcb-debuginfo@1.6.8-10.el8_10?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:libX11-xcb-debuginfo-0:1.6.8-10.el8_10.ppc64le","product":"libX11-xcb-debuginfo-0:1.6.8-10.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:89730"},{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."}],"purl":"pkg:rpm/redhat/libX11-xcb-debuginfo@1.6.8-10.el8_10?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:libX11-xcb-debuginfo-0:1.6.8-10.el8_10.x86_64","product":"libX11-xcb-debuginfo-0:1.6.8-10.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:89730"},{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."}],"purl":"pkg:rpm/redhat/libX11-xcb-debuginfo@1.6.8-10.el8_10?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"red_hat_enterprise_linux_10:libX11-common","product":"libX11-common as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/libX11-common","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"red_hat_enterprise_linux_10:libX11-devel","product":"libX11-devel as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/libX11-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"red_hat_enterprise_linux_10:libX11-xcb","product":"libX11-xcb as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/libX11-xcb","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"red_hat_enterprise_linux_10:libX11.src","product":"libX11.src as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/libX11?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"red_hat_enterprise_linux_6:libX11-common","product":"libX11-common as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/libX11-common","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"red_hat_enterprise_linux_6:libX11-devel","product":"libX11-devel as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/libX11-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"red_hat_enterprise_linux_6:libX11.src","product":"libX11.src as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/libX11?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"red_hat_enterprise_linux_7:libX11","product":"libX11 as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/libX11","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"red_hat_enterprise_linux_7:libX11-common","product":"libX11-common as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/libX11-common","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"red_hat_enterprise_linux_7:libX11-devel","product":"libX11-devel as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/libX11-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"red_hat_enterprise_linux_7:libX11.src","product":"libX11.src as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/libX11?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"red_hat_enterprise_linux_9:libX11-common","product":"libX11-common as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/libX11-common","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"red_hat_enterprise_linux_9:libX11-devel","product":"libX11-devel as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/libX11-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"red_hat_enterprise_linux_9:libX11-xcb","product":"libX11-xcb as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/libX11-xcb","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"red_hat_enterprise_linux_9:libX11.src","product":"libX11.src as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid connecting to untrusted X servers. When using SSH, ensure that X11 forwarding (`ssh -X` or `ssh -Y`) is only enabled for trusted remote hosts. To prevent X11 forwarding for specific hosts, add `ForwardX11 no` to the relevant host entry in `~/.ssh/config` or `/etc/ssh/ssh_config`. Alternatively, disable X11 forwarding globally by setting `ForwardX11 no` in `/etc/ssh/ssh_config`."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/libX11?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]},{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json","productId":"red_hat_hardened_images:libX11.src","product":"libX11.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/libX11?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-88806","modified":"2026-10-26T01:43:42+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88806.json"}]}],"vendorCoverage":{"total":50,"shown":32,"omitted":18,"source":"redhat"}}