CVEs published by redhat-cnalr

CVEs published by redhat-cnalr (CVE Numbering Authority). 8 tracked.

CVE-2026-75895 HIGH 7.5 In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack() function via
CVE-2026-97875 HIGH 8.1 Rojo's "rojo serve" HTTP API (default port 34872) has no Host/Origin header validation, making it vulnerable t
CVE-2026-75894 HIGH 7.5 In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranap_handle_co_dt() function via
CVE-2026-75893 HIGH 7.5 In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccess_proxy_read_
CVE-2026-75892 MEDIUM 6.5 In osmo-ggsn 1.14.0 an out of bounds write issue was found in the gtp_decode_pdp_ctx() function through the PD
CVE-2026-75031 CRITICAL 9.8 In the interchange/interchange project, a critical remote code execution (RCE) vulnerability was found in the
CVE-2026-71566 CRITICAL 9.3 FakeFish handles incoming credentials by passing them down to scripts
CVE-2026-71567 HIGH 7.7 In openshift-metal3/fakefish there is a repeated pattern in some of the scripts where shell variables are inj