RH
Product
Red Hat Ansible Automation Platform Ansible Core 2
7
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 4Medium 1Low 0
Watch
Add Red Hat Ansible Automation Platform Ansible Core 2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-39892 | 9.8 | Apr 8 | cryptography has a buffer overflow if non-contiguous buffers were passed to APIs Affected: All versions, or not specified |
| CVE-2026-27459 | 9.8 | Mar 17 | pyOpenSSL DTLS cookie callback buffer overflow Affected: All versions, or not specified |
| CVE-2026-89091 | 8.8 | Oct 8 | Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution Affected: All versions, or not specified |
| CVE-2026-11332 | 7.8 | Jun 5 | Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution Affected: All versions, or not specified |
| CVE-2026-32274 | 7.5 | Mar 12 | Black: Arbitrary file writes from unsanitized user input in cache file name Affected: All versions, or not specified |
| CVE-2025-69223 | 7.5 | Jan 5 | AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb Affected: All versions, or not specified |
| CVE-2025-57847 | 6.4 | Apr 8 | Ansible-automation-platform: privilege escalation via excessive group writable /etc/passwd permissions Affected: All versions, or not specified |
Showing 7