CVE-2026-19546

Last refreshed2026-11-05

Status: UPDATED | Advisory ID: CVE-2026-19546

Key Details

CVE	CVE-2026-19546
CVSS Score / Version	8.8 (High) / CVSS v3.1
Updated	2026-11-04
CVSS Vector	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is network; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Red Hat Enterprise Linux 10 and Red Hat Enterprise Linux 9
Classified as	CWE-94 (Improper Control of Generation of Code ('Code Injection'))

Vendor	Product	Affected Versions	Patch Status
Red Hat	Red Hat Enterprise Linux 10
Red Hat	Red Hat Enterprise Linux 9

Vendor

Product

Affected Versions

Patch Status

Red Hat

Red Hat Enterprise Linux 10

Red Hat

Red Hat Enterprise Linux 9

Subsystems	OT Supporting Infrastructure
Sectors	Multiple

A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z.

For a detailed Statement, Description and Mitigation please reffer to the original https://access.redhat.com/security/cve/cve-2026-19546. (NVD)

Monitor Red Hat's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-19546
CVE	https://www.cve.org/CVERecord?id=CVE-2026-19546

Source

Reference

NVD

CVE