CVE-2026-19519: Red Hat Advanced Cluster Security 4

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

A flaw was found in claircore's RPM package scanner. Crafted RPM header data in a container layer can cause an unchecked type assertion to panic the scanner. The panic is not recovered, causing the Clair indexer process to crash, leading to a denial of service.

Affected products

• Red Hat Red Hat Advanced Cluster Security 4
• Red Hat Red Hat Quay 3

Published 2026-08-11. Last modified 2026-08-14.