CVE-2026-12353

Published: Jul 23, 2026Modified: Jul 24, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 3.9 / Impact: 1.4

Source: secalert@redhat.com (Secondary)

Description

An unauthenticated attacker could trigger an Out of Memory condition to crash the Java process for RHCS by repeatedly sending HTTP requests to the TLS endpoint. Depending on how the RHCS server is configured, a manual intervention to restart it may prove necessary.

Related CWEs

CWE-772

Missing Release of Resource after Effective Lifetime

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

References (2)

https://access.redhat.com/security/cve/CVE-2026-12353

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2489056

Source: secalert@redhat.com

Timeline

No history available yet.