Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CGA-p6r5-v2q7-g5x2

published 7 months ago

Summary

No summary available.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Ecosystem	Vendor	Product	Affected versions
Chainguard	chainguard	elasticsearch-fips-8.18-bitnami	All versions

Original advisory text

CGA-p6r5-v2q7-g5x2

References

https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33870... Vendor Advisory
https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-33870 Vendor Advisory
https://w4ke.info/2025/06/18/funky-chunks.html URL
https://w4ke.info/2025/10/29/funky-chunks-2.html URL
https://www.rfc-editor.org/rfc/rfc9110 URL
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33870.json URL
https://access.redhat.com/errata/RHSA-2026:10175 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:10184 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:13571 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:14272 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:14276 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:17668 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:17789 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:18054 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:18055 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:18059 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:22619 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:34608 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:7109 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:7380 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:8159 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:8509 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-33870 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2452453 Third Party Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

7.5 High

Timeline

Published27 Mar 2026

Updated27 Oct 2026

First seen27 Oct 2026

Sources

CGA-p6r5-v2q7-g5x2 · OSV

Track software like this

Free during beta