CVE-2026-12353

5.3 mediumEPSS 0.4%

Medium (5.3). EPSS 0.4% chance of exploitation in the next 30 days.

An unauthenticated attacker could trigger an Out of Memory condition to crash the Java process for RHCS by repeatedly sending HTTP requests to the TLS endpoint. Depending on how the RHCS server is configured, a manual intervention to restart it may prove necessary.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
CWE: CWE-772
Published: 2026-07-23
Modified: 2026-07-24
Record from: the NVD, synced 2026-10-19

References

https://access.redhat.com/security/cve/CVE-2026-12353
https://bugzilla.redhat.com/show_bug.cgi?id=2489056

Check your stack JSON