Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
Red Hat rrdtool may allow remote code execution
published 1 month ago
Summary
The rrdtool package provided by Red Hat can be manipulated to run unwanted code on the server. This could let an attacker take control of the system or disrupt its operation. Apply the latest Red Hat security update for rrdtool as soon as possible.
What to do
- Update redhat rrdtool to version 0:1.7.2-21.el9_2.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_e4s:9.2::appstream | redhat | rrdtool |
< 0:1.7.2-21.el9_2.1 Fix: upgrade to 0:1.7.2-21.el9_2.1
|
Original advisory text
Red Hat Security Advisory: rrdtool security update
References
- https://access.redhat.com/errata/RHSA-2026:72277 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2460932 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72277.... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-43958 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-43958 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-43958 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published28 Sep 2026
Updated28 Sep 2026
First seen28 Sep 2026
Sources
RHSA-2026:72277 · OSV
Track software like this
Free during beta