CVE-2026-76235: Red Hat Enterprise Linux 10

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated request that carries a CockpitLang cookie, allowing a remote unauthenticated attacker to exhaust memory on the host and cause a denial of service.

Affected products

• Red Hat Red Hat Enterprise Linux 10
• Red Hat Red Hat Enterprise Linux 7
• Red Hat Red Hat Enterprise Linux 8
• Red Hat Red Hat Enterprise Linux 9
• Red Hat Red Hat Openshift Dev Spaces

Published 2026-08-19. Last modified 2026-08-25.