RHUI records

7 published records for vendor rhui.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
36Monitor	CVE-2026-6100No exploit	Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressurepython software foundation · cpython · CWE-416 Pre-auth Memory safety	Critical9.1	—	0.8%	Apr 13, 2026
33Monitor	CVE-2026-54369No exploit	acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functionsacl project · acl · CWE-59 Local privilege escalation	High8.4	—	0.2%	Jun 29, 2026
33Monitor	CVE-2026-54371No exploit	attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattrattr project · attr · CWE-59 Local privilege escalation	High8.4	—	0.2%	Jun 29, 2026
30Monitor	CVE-2026-33846No exploit	Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassemblyred hat · red hat enterprise linux 10 · CWE-130 Pre-auth Denial of service	High7.5	—	1.1%	May 4, 2026
30Monitor	CVE-2026-4111No exploit	Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchivered hat · red hat enterprise linux 10 · CWE-835 Pre-auth Denial of service	High7.5	—	0.9%	Mar 13, 2026
30Monitor	CVE-2026-48863No exploit	Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of serviceopensuse · libsolv · CWE-121 Pre-auth Memory safety Denial of service	High7.5	—	0.8%	Jul 15, 2026
28Monitor	CVE-2026-4786No exploit	Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()python software foundation · cpython · CWE-77 RCE Command injection	High7.0	—	0.5%	Apr 13, 2026

CVE-2026-6100
36Monitor
Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure
CriticalCVSS 9.1No exploitEPSS 1%
- Pre-auth
- Memory safety
python software foundation · cpythonApr 13, 2026
CVE-2026-54369
33Monitor
acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
acl project · aclJun 29, 2026
CVE-2026-54371
33Monitor
attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
attr project · attrJun 29, 2026
CVE-2026-33846
30Monitor
Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
red hat · red hat enterprise linux 10May 4, 2026
CVE-2026-4111
30Monitor
Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
red hat · red hat enterprise linux 10Mar 13, 2026
CVE-2026-48863
30Monitor
Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service
HighCVSS 7.5No exploitEPSS 1%
opensuse · libsolvJul 15, 2026
CVE-2026-4786
28Monitor
Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()
HighCVSS 7.0No exploitEPSS 0%
- RCE
- Command injection
python software foundation · cpythonApr 13, 2026