RH
Product
Red Hat Ansible Automation Platform 2.6
On CISA KEVExploited in the wild
74
CVEs
1
On KEV
9.9
Max CVSS
1
New 30D
Severity mix
Critical 14High 42Medium 17Low 3
Watch
Add Red Hat Ansible Automation Platform 2.6 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-48710 In wildKEV | 6.5 | May 26 | Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks Affected: All versions, or not specified |
| CVE-2026-84724 | 6.6 | Sep 23 | Automation-controller: automation-controller: systemjob extra_vars.days argument injection into uncontainerized control-plane awx-manage process Affected: All versions, or not specified |
| CVE-2026-84716 | 6.6 | Sep 23 | Automation-controller: automation-controller: instance install_bundle issues 10-year, non-revocable receptor mesh-ca certificates for caller-chosen (and case-variant impersonating) hostnames Affected: All versions, or not specified |
| CVE-2026-84720 | 6.5 | Sep 23 | Automation-controller: automation-controller: workflowjobnode.ancestor_artifacts lacks prevent_search, exposing no_log set_stats artifacts via orm-traversal count-oracle Affected: All versions, or not specified |
| CVE-2026-84470 | 6.4 | Sep 1 | Automation-controller: automation-controller-container: automation-controller/awx: bulk job launch checks instance_groups at read level instead of use level, allowing execution-placement authorization bypass Affected: All versions, or not specified |
| CVE-2025-57847 | 6.4 | Apr 8 | Ansible-automation-platform: privilege escalation via excessive group writable /etc/passwd permissions Affected: All versions, or not specified |
| CVE-2026-42338 | 6.1 | May 12 | ip-address: XSS in Address6 HTML-emitting methods Affected: All versions, or not specified |
| CVE-2026-8643 | 5.5 | Jun 1 | pip can extract console_scripts and gui_scripts outside installation directory Affected: All versions, or not specified |
| CVE-2026-84717 | 5.3 | Sep 23 | Automation-controller: automation-controller: unauthenticated 200-vs-403 oracle in bitbucket data center webhook receiver enumerates webhook-enabled job templates Affected: All versions, or not specified |
| CVE-2026-84712 | 5.3 | Sep 23 | Automation-controller: automation-controller: unauthenticated /api/v2/ping/ discloses automation-mesh instance topology and instance-group membership Affected: All versions, or not specified |
| CVE-2026-44188 | 5.3 | Jun 15 | Ansible-lightspeed: ansible lightspeed: session hijacking and unauthorized data access due to insufficient session expiration Affected: All versions, or not specified |
| CVE-2025-13465 | 5.3 | Jan 21 | Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions Affected: All versions, or not specified |
| CVE-2026-71459 | 5.0 | Sep 23 | Automation-controller: automation-controller-container: automation-controller: jobjobeventschildrensummary rbac bypass exposes cross-tenant job event tree structure Affected: All versions, or not specified |
| CVE-2026-71458 | 5.0 | Sep 23 | Automation-controller: automation-controller-container: automation-controller: named-url 404 body oracle enables cross-tenant resource name enumeration Affected: All versions, or not specified |
| CVE-2026-84718 | 4.3 | Sep 23 | Automation-controller: automation-controller: client ip spoofing in audit/access logs via unrestricted x-forwarded-for trust Affected: All versions, or not specified |
| CVE-2026-71460 | 4.3 | Sep 23 | Automation-controller: automation-controller-container: automation-controller: any authenticated user reads red hat subscription/license details via /config/ Affected: All versions, or not specified |
| CVE-2026-71462 | 4.1 | Sep 23 | Automation-controller: automation-controller-container: automation-controller: custom_venv_path setting provides filesystem path-existence oracle on control pod Affected: All versions, or not specified |
Showing 17