Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CGA-ffg3-5v5h-6gq7

published 4 months ago

Summary

No summary available.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Ecosystem	Vendor	Product	Affected versions
Chainguard	chainguard	logstash-9.3-iamguarded-compat	All versions
Wolfi	wolfi	logstash-9.3-iamguarded-compat	All versions

Original advisory text

CGA-ffg3-5v5h-6gq7

References

https://github.com/netty/netty/releases/tag/netty-4.1.135.Final URL
https://github.com/netty/netty/releases/tag/netty-4.2.15.Final URL
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44249.json URL
https://access.redhat.com/errata/RHSA-2026:26017 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:26018 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:26586 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:28573 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:34608 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-44249 Vendor Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44249... Vendor Advisory
https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-44249 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2488081 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:36820 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37390 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41951 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:48124 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:48151 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:49700 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:49701 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:53644 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:54435 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:50085 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:65126 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:66488 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:66545 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:53645 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:53646 Vendor Advisory

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

8.1 High

Timeline

Published9 Jun 2026

Updated5 Nov 2026

First seen5 Nov 2026

Sources

CGA-ffg3-5v5h-6gq7 · OSV

Track software like this

Free during beta