Red Hat Lightspeed Core vulnerabilities

2 CVEs affecting Red Hat Lightspeed Core, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-6385, published 2026-04-15.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-28356, published 2026-03-12. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. multipart is a fast multipart/form-data parser for python. Prior to 1.2.2, 1.3.1 and 1.4.0-dev, the parse_options_header() function in multipart.py uses a regular expression with an ambiguous…
• CVE-2026-6385, published 2026-04-15. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A flaw was found in FFmpeg. A remote attacker could exploit this vulnerability by providing a specially crafted MPEG-PS/VOB media file containing a malicious DVD subtitle stream. This vulnerability…