{"schema":"vulnpedia.research/1","cve":"CVE-2026-9079","references":[{"url":"https://curl.se/docs/CVE-2026-9079.json","tags":["Vendor Advisory","vendor-reference"],"source":"mitre","sourceId":"curl","modified":"2026-09-15T06:03:28.741Z","origins":[{"source":"mitre","sourceId":"curl","modified":"2026-09-15T06:03:28.741Z","url":"https://curl.se/docs/CVE-2026-9079.json"},{"source":"nvd","sourceId":"CVE-2026-9079","modified":"2026-09-15T07:16:34.597","url":"https://curl.se/docs/CVE-2026-9079.json"},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://curl.se/docs/CVE-2026-9079.json"}]},{"url":"https://curl.se/docs/CVE-2026-9079.html","tags":["Patch","Vendor Advisory","vendor-reference"],"source":"mitre","sourceId":"curl","modified":"2026-09-15T06:03:28.741Z","origins":[{"source":"mitre","sourceId":"curl","modified":"2026-09-15T06:03:28.741Z","url":"https://curl.se/docs/CVE-2026-9079.html"},{"source":"nvd","sourceId":"CVE-2026-9079","modified":"2026-09-15T07:16:34.597","url":"https://curl.se/docs/CVE-2026-9079.html"},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://curl.se/docs/CVE-2026-9079.html"}]},{"url":"https://hackerone.com/reports/3750295","tags":["exploit","Exploit","Issue Tracking","Third Party Advisory","vendor-reference"],"source":"mitre","sourceId":"curl","modified":"2026-09-15T06:03:28.741Z","origins":[{"source":"mitre","sourceId":"curl","modified":"2026-09-15T06:03:28.741Z","url":"https://hackerone.com/reports/3750295"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-07-06T16:49:56.248Z","url":"https://hackerone.com/reports/3750295"},{"source":"nvd","sourceId":"CVE-2026-9079","modified":"2026-09-15T07:16:34.597","url":"https://hackerone.com/reports/3750295"},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://hackerone.com/reports/3750295"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-9079","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-9079"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2496771","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2496771"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-9079","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-9079"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-9079","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-9079"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:72506","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://access.redhat.com/errata/RHSA-2026:72506"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:69125","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://access.redhat.com/errata/RHSA-2026:69125"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:79357","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://access.redhat.com/errata/RHSA-2026:79357"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:29017","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://access.redhat.com/errata/RHSA-2026:29017"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:34975","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://access.redhat.com/errata/RHSA-2026:34975"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:56869","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://access.redhat.com/errata/RHSA-2026:56869"}]},{"source":"euvd","sourceId":"EUVD-2026-41510","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-41510","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-41510","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-41510"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"AppStream-10.0.Z.E2S:curl-debuginfo-0:8.12.1-1.el10_0.10.aarch64","product":"curl-debuginfo-0:8.12.1-1.el10_0.10.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:72506"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:rpm/redhat/curl-debuginfo@8.12.1-1.el10_0.10?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"AppStream-10.0.Z.E2S:libcurl-devel-0:8.12.1-1.el10_0.10.aarch64","product":"libcurl-devel-0:8.12.1-1.el10_0.10.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:72506"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:rpm/redhat/libcurl-devel@8.12.1-1.el10_0.10?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"AppStream-10.2.Z:curl-debugsource-0:8.12.1-4.el10_2.6.aarch64","product":"curl-debugsource-0:8.12.1-4.el10_2.6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:69125"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:rpm/redhat/curl-debugsource@8.12.1-4.el10_2.6?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"AppStream-10.2.Z:libcurl-minimal-debuginfo-0:8.12.1-4.el10_2.6.ppc64le","product":"libcurl-minimal-debuginfo-0:8.12.1-4.el10_2.6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:69125"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:rpm/redhat/libcurl-minimal-debuginfo@8.12.1-4.el10_2.6?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"BaseOS-10.0.Z.E2S:curl-debugsource-0:8.12.1-1.el10_0.10.aarch64","product":"curl-debugsource-0:8.12.1-1.el10_0.10.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:72506"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:rpm/redhat/curl-debugsource@8.12.1-1.el10_0.10?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"BaseOS-10.0.Z.E2S:libcurl-minimal-0:8.12.1-1.el10_0.10.aarch64","product":"libcurl-minimal-0:8.12.1-1.el10_0.10.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:72506"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:rpm/redhat/libcurl-minimal@8.12.1-1.el10_0.10?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"BaseOS-10.2.Z:curl-debuginfo-0:8.12.1-4.el10_2.6.aarch64","product":"curl-debuginfo-0:8.12.1-4.el10_2.6.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:69125"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:rpm/redhat/curl-debuginfo@8.12.1-4.el10_2.6?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"BaseOS-10.2.Z:libcurl-debuginfo-0:8.12.1-4.el10_2.6.aarch64","product":"libcurl-debuginfo-0:8.12.1-4.el10_2.6.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:69125"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:rpm/redhat/libcurl-debuginfo@8.12.1-4.el10_2.6?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"Red Hat Cost Management On-Premise 1:registry.redhat.io/costmanagement/costmanagement-ui-rhel10@sha256:39700faac93e613fdd8139aed7b6dbb79a4d542f3f3cca6be04c4edce72eaf5d_amd64","product":"registry.redhat.io/costmanagement/costmanagement-ui-rhel10@sha256:39700faac93e613fdd8139aed7b6dbb79a4d542f3f3cca6be04c4edce72eaf5d_amd64 as a component of Red Hat Cost Management On-Premise 1","status":"fixed","remediations":[{"category":"vendor_fix","details":"The container image provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command.","url":"https://access.redhat.com/errata/RHSA-2026:79357"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:oci/costmanagement-ui-rhel10@sha256%3A39700faac93e613fdd8139aed7b6dbb79a4d542f3f3cca6be04c4edce72eaf5d?arch=amd64&repository_url=registry.redhat.io/costmanagement/costmanagement-ui-rhel10&tag=1791460851","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"Red Hat Hardened Images:libcurl-minimal-0:8.21.0-0.1.hum1@aarch64","product":"libcurl-minimal-0:8.21.0-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:29017"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:rpm/redhat/libcurl-minimal@8.21.0-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"Red Hat Hardened Images:rust-gdb-0:1.96.1-1.hum1@noarch@public-hummingbird-x86_64-rpms","product":"rust-gdb-0:1.96.1-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:34975"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:rpm/redhat/rust-gdb@1.96.1-1.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.96.1-1.hum1@noarch@public-hummingbird-aarch64-rpms","product":"rust-std-static-wasm32-unknown-unknown-0:1.96.1-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:34975"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:rpm/redhat/rust-std-static-wasm32-unknown-unknown@1.96.1-1.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"Red Hat JBoss Core Services 2.4.62.SP5","product":"Red Hat JBoss Core Services 2.4.62.SP5","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:56869"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"confidential_compute_attestation:build-of-trustee/trustee-rhel9","product":"build-of-trustee/trustee-rhel9 as a component of Confidential Compute Attestation","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/trustee-rhel9?repository_url=registry.redhat.io/build-of-trustee/trustee-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-payload-rhel9","product":"openshift-sandboxed-containers/osc-podvm-payload-rhel9 as a component of Confidential Compute Attestation","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/osc-podvm-payload-rhel9?repository_url=registry.redhat.io/openshift-sandboxed-containers/osc-podvm-payload-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rust.src","product":"rust.src as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/rust?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"red_hat_jboss_core_services:libcurl.so","product":"libcurl.so as a component of Red Hat JBoss Core Services","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:generic/libcurl.so","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8","product":"openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/ose-rhel-coreos-8?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-8","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9","product":"openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/ose-rhel-coreos-9?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-9","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"red_hat_enterprise_linux_10:cargo","product":"cargo as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/cargo","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"red_hat_enterprise_linux_10:rust-lldb","product":"rust-lldb as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/rust-lldb","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"red_hat_enterprise_linux_10:rust-toolset","product":"rust-toolset as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/rust-toolset","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"red_hat_enterprise_linux_10:s390utils-cpacfstatsd","product":"s390utils-cpacfstatsd as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/s390utils-cpacfstatsd","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"red_hat_enterprise_linux_10:s390utils-zdsfs","product":"s390utils-zdsfs as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/s390utils-zdsfs","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"red_hat_enterprise_linux_6:curl.src","product":"curl.src as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/curl?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"red_hat_enterprise_linux_8:aspnetcore-runtime-dbg-8.0","product":"aspnetcore-runtime-dbg-8.0 as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"red_hat_enterprise_linux_8:dotnet-runtime-8.0","product":"dotnet-runtime-8.0 as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/dotnet-runtime-8.0","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"red_hat_enterprise_linux_8:dotnet8.0.src","product":"dotnet8.0.src as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/dotnet8.0?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"red_hat_enterprise_linux_9:curl-minimal","product":"curl-minimal as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/curl-minimal","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"red_hat_enterprise_linux_9:rust-debugger-common","product":"rust-debugger-common as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/rust-debugger-common","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"red_hat_enterprise_linux_9:rust-std-static-wasm32-wasi","product":"rust-std-static-wasm32-wasi as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/rust-std-static-wasm32-wasi","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]},{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json","productId":"red_hat_trusted_profile_analyzer:rhtpa/rhtpa-trustification-service-rhel9","product":"rhtpa/rhtpa-trustification-service-rhel9 as a component of Red Hat Trusted Profile Analyzer","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/rhtpa-trustification-service-rhel9?repository_url=registry.redhat.io/rhtpa/rhtpa-trustification-service-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-9079","modified":"2026-10-09T01:07:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json"}]}],"vendorCoverage":{"total":247,"shown":32,"omitted":215,"source":"redhat"}}