{"schema":"vulnpedia.research/1","cve":"CVE-2026-94543","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/vercel/next.js/security/advisories/GHSA-4jqv-mc3x-m676","tags":["x_refsource_CONFIRM","Vendor Advisory","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-02T15:16:49.658Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-02T15:16:49.658Z","url":"https://github.com/vercel/next.js/security/advisories/GHSA-4jqv-mc3x-m676"},{"source":"nvd","sourceId":"CVE-2026-94543","modified":"2026-10-06T17:17:27.960","url":"https://github.com/vercel/next.js/security/advisories/GHSA-4jqv-mc3x-m676"},{"source":"ghsa","sourceId":"GHSA-4jqv-mc3x-m676","url":"https://github.com/vercel/next.js/security/advisories/GHSA-4jqv-mc3x-m676"},{"source":"ghsa","sourceId":"GHSA-4jqv-mc3x-m676","modified":"2026-10-07T20:45:06.342983181Z","url":"https://github.com/vercel/next.js/security/advisories/GHSA-4jqv-mc3x-m676"},{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://github.com/vercel/next.js/security/advisories/GHSA-4jqv-mc3x-m676"}]},{"url":"https://github.com/vercel/next.js/commit/52c94abdd2ea5f416f5e8353ea8a2edd3fe311b8","tags":["x_refsource_MISC","Patch","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-02T15:16:49.658Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-02T15:16:49.658Z","url":"https://github.com/vercel/next.js/commit/52c94abdd2ea5f416f5e8353ea8a2edd3fe311b8"},{"source":"nvd","sourceId":"CVE-2026-94543","modified":"2026-10-06T17:17:27.960","url":"https://github.com/vercel/next.js/commit/52c94abdd2ea5f416f5e8353ea8a2edd3fe311b8"},{"source":"ghsa","sourceId":"GHSA-4jqv-mc3x-m676","url":"https://github.com/vercel/next.js/commit/52c94abdd2ea5f416f5e8353ea8a2edd3fe311b8"},{"source":"ghsa","sourceId":"GHSA-4jqv-mc3x-m676","modified":"2026-10-07T20:45:06.342983181Z","url":"https://github.com/vercel/next.js/commit/52c94abdd2ea5f416f5e8353ea8a2edd3fe311b8"},{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://github.com/vercel/next.js/commit/52c94abdd2ea5f416f5e8353ea8a2edd3fe311b8"}]},{"url":"https://github.com/vercel/next.js/commit/719e4c67d6e92df60246f95e1d96e2dd60789a52","tags":["x_refsource_MISC","Patch","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-02T15:16:49.658Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-02T15:16:49.658Z","url":"https://github.com/vercel/next.js/commit/719e4c67d6e92df60246f95e1d96e2dd60789a52"},{"source":"nvd","sourceId":"CVE-2026-94543","modified":"2026-10-06T17:17:27.960","url":"https://github.com/vercel/next.js/commit/719e4c67d6e92df60246f95e1d96e2dd60789a52"},{"source":"ghsa","sourceId":"GHSA-4jqv-mc3x-m676","url":"https://github.com/vercel/next.js/commit/719e4c67d6e92df60246f95e1d96e2dd60789a52"},{"source":"ghsa","sourceId":"GHSA-4jqv-mc3x-m676","modified":"2026-10-07T20:45:06.342983181Z","url":"https://github.com/vercel/next.js/commit/719e4c67d6e92df60246f95e1d96e2dd60789a52"},{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://github.com/vercel/next.js/commit/719e4c67d6e92df60246f95e1d96e2dd60789a52"}]},{"url":"https://github.com/vercel/next.js/releases/tag/v15.5.27","tags":["x_refsource_MISC","Release Notes","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-02T15:16:49.658Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-02T15:16:49.658Z","url":"https://github.com/vercel/next.js/releases/tag/v15.5.27"},{"source":"nvd","sourceId":"CVE-2026-94543","modified":"2026-10-06T17:17:27.960","url":"https://github.com/vercel/next.js/releases/tag/v15.5.27"},{"source":"ghsa","sourceId":"GHSA-4jqv-mc3x-m676","url":"https://github.com/vercel/next.js/releases/tag/v15.5.27"},{"source":"ghsa","sourceId":"GHSA-4jqv-mc3x-m676","modified":"2026-10-07T20:45:06.342983181Z","url":"https://github.com/vercel/next.js/releases/tag/v15.5.27"},{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://github.com/vercel/next.js/releases/tag/v15.5.27"}]},{"url":"https://github.com/vercel/next.js/releases/tag/v16.3.8","tags":["x_refsource_MISC","Release Notes","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-02T15:16:49.658Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-02T15:16:49.658Z","url":"https://github.com/vercel/next.js/releases/tag/v16.3.8"},{"source":"nvd","sourceId":"CVE-2026-94543","modified":"2026-10-06T17:17:27.960","url":"https://github.com/vercel/next.js/releases/tag/v16.3.8"},{"source":"ghsa","sourceId":"GHSA-4jqv-mc3x-m676","url":"https://github.com/vercel/next.js/releases/tag/v16.3.8"},{"source":"ghsa","sourceId":"GHSA-4jqv-mc3x-m676","modified":"2026-10-07T20:45:06.342983181Z","url":"https://github.com/vercel/next.js/releases/tag/v16.3.8"},{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://github.com/vercel/next.js/releases/tag/v16.3.8"}]},{"url":"https://osv.dev/vulnerability/GHSA-4jqv-mc3x-m676","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-4jqv-mc3x-m676","modified":"2026-10-07T20:45:06.342983181Z","origins":[{"source":"ghsa","sourceId":"GHSA-4jqv-mc3x-m676","url":"https://osv.dev/vulnerability/GHSA-4jqv-mc3x-m676"},{"source":"ghsa","sourceId":"GHSA-4jqv-mc3x-m676","modified":"2026-10-07T20:45:06.342983181Z","url":"https://osv.dev/vulnerability/GHSA-4jqv-mc3x-m676"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94543","tags":["ADVISORY","vendor-reference"],"source":"ghsa","sourceId":"GHSA-4jqv-mc3x-m676","modified":"2026-10-07T20:45:06.342983181Z","origins":[{"source":"ghsa","sourceId":"GHSA-4jqv-mc3x-m676","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94543"},{"source":"ghsa","sourceId":"GHSA-4jqv-mc3x-m676","modified":"2026-10-07T20:45:06.342983181Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94543"},{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94543"}]},{"url":"https://github.com/vercel/next.js","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-4jqv-mc3x-m676","modified":"2026-10-07T20:45:06.342983181Z","origins":[{"source":"ghsa","sourceId":"GHSA-4jqv-mc3x-m676","url":"https://github.com/vercel/next.js"},{"source":"ghsa","sourceId":"GHSA-4jqv-mc3x-m676","modified":"2026-10-07T20:45:06.342983181Z","url":"https://github.com/vercel/next.js"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-94543","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-94543"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2545233","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2545233"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-94543","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-94543"}]},{"source":"euvd","sourceId":"EUVD-2026-91670","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-91670","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-91670","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-91670"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-4jqv-mc3x-m676","url":"https://osv.dev/vulnerability/GHSA-4jqv-mc3x-m676","ecosystem":"npm","name":"next","purl":"pkg:npm/next","ranges":[{"type":"SEMVER","events":[{"introduced":"15.0.0"},{"fixed":"15.5.27"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-4jqv-mc3x-m676/GHSA-4jqv-mc3x-m676.json"},"modified":"2026-10-07T20:45:06.342983181Z","origins":[{"source":"ghsa","sourceId":"GHSA-4jqv-mc3x-m676","modified":"2026-10-07T20:45:06.342983181Z","url":"https://osv.dev/vulnerability/GHSA-4jqv-mc3x-m676"}]},{"source":"ghsa","sourceId":"GHSA-4jqv-mc3x-m676","url":"https://osv.dev/vulnerability/GHSA-4jqv-mc3x-m676","ecosystem":"npm","name":"next","purl":"pkg:npm/next","ranges":[{"type":"SEMVER","events":[{"introduced":"16.0.0"},{"fixed":"16.3.8"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-4jqv-mc3x-m676/GHSA-4jqv-mc3x-m676.json"},"modified":"2026-10-07T20:45:06.342983181Z","origins":[{"source":"ghsa","sourceId":"GHSA-4jqv-mc3x-m676","modified":"2026-10-07T20:45:06.342983181Z","url":"https://osv.dev/vulnerability/GHSA-4jqv-mc3x-m676"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json","productId":"red_hat_enterprise_linux_10:firefox","product":"firefox as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/firefox","origins":[{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json"}]},{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json","productId":"red_hat_enterprise_linux_10:firefox.src","product":"firefox.src as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/firefox?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json"}]},{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json","productId":"red_hat_enterprise_linux_10:thunderbird","product":"thunderbird as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/thunderbird","origins":[{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json"}]},{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json","productId":"red_hat_enterprise_linux_10:thunderbird.src","product":"thunderbird.src as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/thunderbird?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json"}]},{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json","productId":"red_hat_enterprise_linux_7:firefox","product":"firefox as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/firefox","origins":[{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json"}]},{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json","productId":"red_hat_enterprise_linux_7:firefox.src","product":"firefox.src as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/firefox?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json"}]},{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json","productId":"red_hat_enterprise_linux_8:firefox","product":"firefox as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/firefox","origins":[{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json"}]},{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json","productId":"red_hat_enterprise_linux_8:firefox.src","product":"firefox.src as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/firefox?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json"}]},{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json","productId":"red_hat_enterprise_linux_8:thunderbird","product":"thunderbird as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/thunderbird","origins":[{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json"}]},{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json","productId":"red_hat_enterprise_linux_8:thunderbird.src","product":"thunderbird.src as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/thunderbird?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json"}]},{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json","productId":"red_hat_enterprise_linux_9:firefox","product":"firefox as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/firefox","origins":[{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json"}]},{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json","productId":"red_hat_enterprise_linux_9:firefox-x11","product":"firefox-x11 as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/firefox-x11","origins":[{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json"}]},{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json","productId":"red_hat_enterprise_linux_9:firefox.src","product":"firefox.src as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/firefox?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json"}]},{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json","productId":"red_hat_enterprise_linux_9:thunderbird","product":"thunderbird as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/thunderbird","origins":[{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json"}]},{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json","productId":"red_hat_enterprise_linux_9:thunderbird.src","product":"thunderbird.src as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/thunderbird?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json"}]},{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-cuda-rhel9","product":"rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-cuda-rhel9@sha256:b45f3bc25a7d3c9f3bfdc1de3be6db59f6c3109f62326d74fae14e832a797981?repository_url=registry.redhat.io/rhelai3/bootc-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json"}]},{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gaudi-rhel9","product":"rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-gaudi-rhel9@sha256:e1057b59ca1be9501332abf97230855e85c7df858356be0da9dce230ea7e98e1?repository_url=registry.redhat.io/rhelai3/bootc-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json"}]},{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-rocm-rhel9","product":"rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-rocm-rhel9@sha256:38ce057f97034bbb8eaea574d41cc7eebaeaa9265a4cdd966476dd3fac129c3c?repository_url=registry.redhat.io/rhelai3/bootc-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json"}]},{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/disk-image-cuda-rhel9","product":"rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/disk-image-cuda-rhel9@sha256:5489bd1cdbb7f1a5ce80e9ad688b66c6bb8688b2b202a2a86b5c2205cdd6e126?repository_url=registry.redhat.io/rhelai3/disk-image-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json"}]},{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json","productId":"red_hat_trusted_artifact_signer:rhtas/rekor-search-ui-rhel9","product":"rhtas/rekor-search-ui-rhel9 as a component of Red Hat Trusted Artifact Signer","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:oci/rekor-search-ui-rhel9@sha256:7933b00020529ecbdfa107a238939773c9aa003cfa12e2236a2d397dc22acc52?repository_url=registry.redhat.io/rhtas/rekor-search-ui-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-94543","modified":"2026-10-05T16:47:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94543.json"}]}],"vendorCoverage":{"total":20,"shown":20,"omitted":0,"source":"redhat"}}