Red Hat Cost Management On-Premise 1 vulnerabilities

5 CVEs affecting Red Hat Cost Management On-Premise 1, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-42784, published 2026-09-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-74860, published 2026-09-08. High severity, CVSS 8.5. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD)…
CVE-2026-42784, published 2026-09-16. High severity, CVSS 7.4. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are…
CVE-2026-16118, published 2026-07-17. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME…
CVE-2026-15028, published 2026-07-10. Low severity, CVSS 3.9. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in libarchive. This vulnerability allows a remote attacker to trigger a heap overflow by providing a specially crafted tar archive. The issue occurs during the parsing of a PAX…
CVE-2026-13732, published 2026-08-31. High severity, CVSS 7.0. EPSS: 0.1% chance of exploitation in the next 30 days. A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and…