Known vulnerabilities in automation-controller (Red Hat package)
Vendor:
Red Hat Inc.
Software:
automation-controller (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:automation-controller_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
107
Public exploits:
9
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
4.7.15-2.el9ap
4.7.13-2.el9ap
4.6.29-2.el8ap
4.6.29-2.el9ap
4.6.28-3.el8ap
4.6.28-3.el9ap
4.7.11-2.el9ap
4.7.10-2.el9ap
4.5.31-1.el8ap
4.5.31-1.el9ap
4.6.26-1.el8ap
4.6.26-1.el9ap
4.6.25-1.el8ap
4.6.25-1.el9ap
4.5.30-1.el8ap
4.5.30-1.el9ap
4.7.8-1.el9ap
4.7.6-1.el9ap
4.6.23-1.el8ap
4.6.23-1.el9ap
4.7.5-1.el9ap
4.5.27-1.el8ap
4.5.27-1.el9ap
4.7.4-1.el9ap
4.6.21-1.el8ap
4.6.21-1.el9ap
4.6.20-1.el8ap
4.6.20-1.el9ap
4.6.19-1.el8ap
4.6.19-1.el9ap
4.6.18-1.el8ap
4.6.18-1.el9ap
4.6.16-1.el8ap
4.6.16-1.el9ap
4.5.24-1.el8ap
4.5.24-1.el9ap
4.6.12-1.el8ap
4.6.12-1.el9ap
4.6.11-2.el8ap
4.6.11-2.el9ap
4.5.21-1.el8ap
4.5.21-1.el9ap
4.6.10-1.el8ap
4.6.10-1.el9ap
4.5.20-1.el8ap
4.5.20-1.el9ap
4.6.9-1.el8ap
4.6.9-1.el9ap
4.6.7-1.el8ap
4.6.7-1.el9ap
4.5.17-1.el8ap
4.5.17-1.el9ap
4.6.6-1.el8ap
4.6.6-1.el9ap
4.6.3-1.el8ap
4.6.3-1.el9ap
4.5.13-1.el8ap
4.5.13-1.el9ap
4.6.2-1.el8ap
4.6.2-1.el9ap
4.5.12-1.el8ap
4.5.12-1.el9ap
4.5.11-1.el8ap
4.5.11-1.el9ap
4.5.10-1.el8ap
4.5.10-1.el9ap
4.5.8-1.el8ap
4.5.8-1.el9ap
4.5.7-1.el8ap
4.5.7-1.el9ap
4.5.5-2.el8ap
4.5.5-2.el9ap
4.5.2-1.el8ap
4.5.2-1.el9ap
4.5.1-1.el8ap
4.5.1-1.el9ap
4.4.7-1.el8ap
4.4.7-1.el9ap
4.4.6-1.el8ap
4.4.6-1.el9ap
4.3.16-1.el8ap
4.3.16-1.el9ap
4.4.4-1.el8ap
4.4.4-1.el9ap
4.3.13-1.el8ap
4.3.13-1.el9ap
4.4.3-1.el8ap
4.4.3-1.el9ap
4.4.2-1.el8ap
4.4.2-1.el9ap
4.3.11-1.el8ap
4.3.11-1.el9ap
4.4.1-1.el8ap
4.4.1-1.el9ap
4.0.0-1.el8ap
4.3.5-1.el8ap
4.3.5-1.el9ap
4.1.3-2.el8ap
4.1.2-2.el8ap
Vulnerabilities (107)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU124772 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-22029 |
CWE-79 | Low | 4.6.26-1.el8ap, 4.6.26-1.el9ap | 01.04.2026 |
SB2026040154 SB2026040164 SB2026041309 and 10 more |
||
| #VU124034 - Resource exhaustion CVE-2025-61726 |
CWE-400 | Medium | 4.5.31-1.el8ap, 4.5.31-1.el9ap, 4.6.26-1.el8ap, 4.6.26-1.el9ap | 16.03.2026 |
SB2026031636 SB2026031637 SB2026031638 and 143 more |
||
| #VU123116 - Uncontrolled Recursion CVE-2026-0994 |
CWE-674 | Medium | 4.6.26-1.el8ap, 4.6.26-1.el9ap | 20.02.2026 |
SB2026022039 SB2026022040 SB2026022041 and 25 more |
||
| #VU122270 - Resource exhaustion CVE-2026-23490 |
CWE-400 | Medium | 4.6.26-1.el8ap, 4.6.26-1.el9ap | 03.02.2026 |
SB2026020365 SB2026020366 SB2026020370 and 52 more |
||
| #VU122261 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-1312 |
CWE-89 | High | 4.6.26-1.el8ap, 4.6.26-1.el9ap | 03.02.2026 |
SB2026020349 SB2026020378 SB2026020686 and 15 more |
||
| #VU122260 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-1287 |
CWE-89 | High | 4.6.26-1.el8ap, 4.6.26-1.el9ap | 03.02.2026 |
SB2026020349 SB2026020378 SB2026020686 and 14 more |
||
| #VU122259 - Resource exhaustion CVE-2026-1285 |
CWE-400 | Medium | 4.6.26-1.el8ap, 4.6.26-1.el9ap | 03.02.2026 |
SB2026020349 SB2026020378 SB2026020686 and 15 more |
||
| #VU122258 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-1207 |
CWE-89 | High | 4.6.26-1.el8ap, 4.6.26-1.el9ap | 03.02.2026 |
SB2026020349 SB2026020378 SB2026020686 and 15 more |
||
| #VU122257 - Resource exhaustion CVE-2025-14550 |
CWE-400 | Medium | 4.6.26-1.el8ap, 4.6.26-1.el9ap | 03.02.2026 |
SB2026020349 SB2026020378 SB2026020686 and 14 more |
||
| #VU121929 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-24049 |
CWE-22 | Medium | 4.6.26-1.el8ap, 4.6.26-1.el9ap | 22.01.2026 |
SB2026012210 SB2026012503 SB2026012761 and 20 more |
||
| #VU120990 - Improper Handling of Highly Compressed Data (Data Amplification) CVE-2025-69223 |
CWE-409 | Medium | 4.5.30-1.el8ap, 4.5.30-1.el9ap, 4.6.25-1.el8ap, 4.6.25-1.el9ap, 4.6.26-1.el8ap, 4.6.26-1.el9ap, 4.7.8-1.el9ap | 06.01.2026 |
SB2026010643 SB2026012661 SB2026012855 and 15 more |
||
| #VU119235 - Resource exhaustion CVE-2025-61729 |
CWE-400 | Medium | 4.5.30-1.el8ap, 4.5.30-1.el9ap, 4.6.25-1.el8ap, 4.6.25-1.el9ap, 4.7.8-1.el9ap | 06.12.2025 |
SB2025120604 SB20251210172 SB20251210173 and 146 more |
||
| #VU119231 - Resource exhaustion CVE-2025-66471 |
CWE-400 | Medium | 4.5.30-1.el8ap, 4.5.30-1.el9ap, 4.6.25-1.el8ap, 4.6.25-1.el9ap, 4.7.8-1.el9ap | 05.12.2025 |
SB2025120581 SB2025121208 SB2026011313 and 88 more |
||
| #VU119043 - Resource Management Errors CVE-2025-64460 |
CWE-399 | Medium | 4.5.30-1.el8ap, 4.5.30-1.el9ap, 4.6.25-1.el8ap, 4.6.25-1.el9ap, 4.7.8-1.el9ap | 02.12.2025 |
SB2025120234 SB2025120237 SB2025120561 and 13 more |
||
| #VU118710 - Improper input validation CVE-2025-9909 |
CWE-20 | Low | 4.6.23-1.el8ap, 4.6.23-1.el9ap | 24.11.2025 |
SB2025112442 SB20251210209 |
||
| #VU118131 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2025-64459 |
CWE-89 | Medium | 4.6.23-1.el8ap, 4.6.23-1.el9ap, 4.7.6-1.el9ap | 05.11.2025 |
SB2025110551 SB2025110552 SB2025111466 and 14 more |
||
| #VU116913 - Reachable Assertion CVE-2025-59530 |
CWE-617 | Medium | 4.5.27-1.el8ap, 4.5.27-1.el9ap, 4.6.23-1.el8ap, 4.6.23-1.el9ap, 4.7.5-1.el9ap | 13.10.2025 |
SB2025101341 SB2025111857 SB2025111935 and 3 more |
||
| #VU115167 - Allocation of Resources Without Limits or Throttling CVE-2025-58754 |
CWE-770 | Medium | 4.6.23-1.el8ap, 4.6.23-1.el9ap | 12.09.2025 |
SB2025091204 SB2025100104 SB2025100912 and 51 more |
||
| #VU113069 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-53643 |
CWE-444 | Medium | 4.6.25-1.el8ap, 4.6.25-1.el9ap, 4.7.8-1.el9ap | 18.07.2025 |
SB2025071857 SB2025090377 SB2025091303 and 15 more |
||
| #VU112882 - Uncontrolled Recursion CVE-2025-4565 |
CWE-674 | Medium | 4.7.8-1.el9ap | 14.07.2025 |
SB2025071429 SB2025071430 SB2025071431 and 21 more |
Showing elements 1 - 20 out of 107