Red Hat Edge Manager 1 vulnerabilities

3 CVEs affecting Red Hat Edge Manager 1, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-107935, published 2026-10-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-27145, published 2026-06-02. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the…
CVE-2026-107935, published 2026-10-09. Critical severity, CVSS 9.3. EPSS: 0.3% chance of exploitation in the next 30 days. A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the…
CVE-2026-92615, published 2026-09-16. Medium severity, CVSS 6.6. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in flightctl. The configureRepoHTTPSClient() function in the device-render worker builds a per-repository tls.Config (which may include InsecureSkipVerify, a custom CA bundle, or…