CVEvulnerability
CVE-2026-12353
5.3 MEDIUM
Official page ↗
- Status
- Awaiting Analysis
- Published
- 2026-07-23
- Last modified
- 2026-07-24
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- Weaknesses
- CWE-772
Description
An unauthenticated attacker could trigger an Out of Memory condition to crash the Java process for RHCS by repeatedly sending HTTP requests to the TLS endpoint. Depending on how the RHCS server is configured, a manual intervention to restart it may prove necessary.
Related
Weakness · CWE (1)
- CWE-772 Missing Release of Resource after Effective Lifetime weakness
References
- https://access.redhat.com/security/cve/CVE-2026-12353 access.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=2489056 bugzilla.redhat.com