Every CVE Search/ Get API key

CVE-2026-42784

Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion

7.4 HighFix available

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
None

Exploit likelihood

0.31%Up 0.2 points since Sep 17, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.4

Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.

Record
CVE-2026-42784
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Weakness
CWE-347
Updated
2026-11-04
EUVDEUVD-2026-80888 7.4

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.

Record
EUVD-2026-80888
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-04
GitHub AdvisoriesGHSA-g33h-rrj9-75qv 7.4

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older...

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.

Record
GHSA-g33h-rrj9-75qv
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Weakness
CWE-347
Updated
2026-11-04
NVD 7.4

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.

Record
CVE-2026-42784
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Weakness
CWE-347
Updated
2026-11-05
OSVDEBIAN-CVE-2026-42784 7.4

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.

Record
DEBIAN-CVE-2026-42784
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-05
OSVRHSA-2026:34160 8.1

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

Record
RHSA-2026:34160
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
Show 16 moreShow less
OSVRHSA-2026:42078 9.0

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Record
RHSA-2026:42078
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:42902 7.4

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:42902
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:76733 7.4

Red Hat Security Advisory: rust-rpm-sequoia security update

Record
RHSA-2026:76733
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:76734 7.4

Red Hat Security Advisory: rust-rpm-sequoia security, bug fix, and enhancement update

Record
RHSA-2026:76734
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:76735 7.4

Red Hat Security Advisory: rust-sequoia-sqv security update

Record
RHSA-2026:76735
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:76737 7.4

Red Hat Security Advisory: rust-sequoia-sq security, bug fix, and enhancement update

Record
RHSA-2026:76737
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:76733 7.4

Important: rust-rpm-sequoia security update

An implementation of the RPM PGP interface using Sequoia.

Security Fix(es):

  • sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion (CVE-2026-42784)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:76733
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:76734 7.4

Important: rust-rpm-sequoia security, bug fix, and enhancement update

An implementation of the RPM PGP interface using Sequoia.

Security Fix(es):

  • sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion (CVE-2026-42784)

Bug Fix(es) and Enhancement(s):

  • Uninformative error message on --import failure [rhel-10.2.z] (JIRA:Rocky Linux-176906)

  • Return NotTrusted importing non-allowed keys [rhel-10.2.z] (JIRA:Rocky Linux-176907)

  • [FTBFS] Update bindgen for LLVM 22 compatibility [rhel-10.2.z] (JIRA:Rocky Linux-176908)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:76734
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:76735 7.4

Important: rust-sequoia-sqv security update

A simple OpenPGP signature verification program.

Security Fix(es):

  • sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion (CVE-2026-42784)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:76735
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:76737 7.4

Important: rust-sequoia-sq security, bug fix, and enhancement update

Command-line frontends for Sequoia.

Security Fix(es):

  • sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion (CVE-2026-42784)

Bug Fix(es) and Enhancement(s):

  • Unbundle capnproto from sequoia-sq [rhel-10.2.z] (JIRA:Rocky Linux-177547)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:76737
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2026-42784 7.4

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.

Record
UBUNTU-CVE-2026-42784
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVALSA-2026:76733 No score

Important: rust-rpm-sequoia security update

An implementation of the RPM PGP interface using Sequoia.

Security Fix(es):

  • sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion (CVE-2026-42784)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:76733
Updated
2026-11-02
OSVALSA-2026:76734 No score

Important: rust-rpm-sequoia security, bug fix, and enhancement update

An implementation of the RPM PGP interface using Sequoia.

Security Fix(es):

  • sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion (CVE-2026-42784)

Bug Fix(es) and Enhancement(s):

  • Uninformative error message on --import failure [almalinux-10.2.z] (JIRA:AlmaLinux-176906)
  • Return NotTrusted importing non-allowed keys [almalinux-10.2.z] (JIRA:AlmaLinux-176907)
  • [FTBFS] Update bindgen for LLVM 22 compatibility [almalinux-10.2.z] (JIRA:AlmaLinux-176908)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:76734
Updated
2026-11-02
OSVALSA-2026:76735 No score

Important: rust-sequoia-sqv security update

A simple OpenPGP signature verification program.

Security Fix(es):

  • sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion (CVE-2026-42784)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:76735
Updated
2026-11-02
OSVALSA-2026:76737 No score

Important: rust-sequoia-sq security, bug fix, and enhancement update

Command-line frontends for Sequoia.

Security Fix(es):

  • sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion (CVE-2026-42784)

Bug Fix(es) and Enhancement(s):

  • Unbundle capnproto from sequoia-sq [almalinux-10.2.z] (JIRA:AlmaLinux-177547)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:76737
Updated
2026-11-02
OSVAZL-105170 No score

CVE-2026-42784 affecting package kata-containers-cc for versions less than 3.15.0.aks0-23

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an attacker can illegitimately bind an arbitrary subkey to their own certificate and forge signatures, completely compromising cryptographic integrity.

Record
AZL-105170
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
rpm-sequoia
AlmaLinux:9
 before 1.10.2.1-1.el9_8
1.10.2.1-1.el9_8
rpm-sequoia-devel
AlmaLinux:9
 before 1.10.2.1-1.el9_8
1.10.2.1-1.el9_8
rpm-sequoia
AlmaLinux:10
 before 1.10.2.1-1.el10_2
1.10.2.1-1.el10_2
rpm-sequoia-devel
AlmaLinux:10
 before 1.10.2.1-1.el10_2
1.10.2.1-1.el10_2
sequoia-sqv
AlmaLinux:10
 before 1.3.0.2-1.el10_2
1.3.0.2-1.el10_2
sequoia-sq
AlmaLinux:10
 before 1.4.0.1-2.el10_2
1.4.0.1-2.el10_2
kata-containers-cc
Azure Linux:3
 before 3.15.0.aks0-23
3.15.0.aks0-23
rust-sequoia-openpgp
Debian:12
 All versions, plus listed versions
1.12.0-21.13.0-11.16.0-11.16.0-21.16.0-3
Show 28 moreShow less
1.16.1-11.16.1-21.17.0-11.17.0-21.18.0-11.19.0-11.20.0-11.20.0-21.21.0-11.21.1-11.21.1-21.21.2-11.21.2-21.22.0-11.22.0-22.0.0-12.0.0-22.0.0-32.0.0-42.0.0-52.1.0-12.1.0-22.1.0-32.2.0-12.2.0-22.3.0-12.4.1-12.4.1-2
 None known
rust-sequoia-openpgp
Debian:13
 All versions, plus listed versions
2.0.0-22.0.0-2+deb13u12.0.0-32.0.0-42.0.0-5
Show 8 moreShow less
2.1.0-12.1.0-22.1.0-32.2.0-12.2.0-22.3.0-12.4.1-12.4.1-2
 None known
rust-sequoia-openpgp
Debian:14
 before 2.2.0-2, plus listed versions
2.0.0-22.0.0-32.0.0-42.0.0-52.1.0-12.1.0-22.1.0-32.2.0-1
2.2.0-2
Show 126 moreShow less
Affected packages
PackageAffectedFixed
automation-platform-ui
Red Hat:ansible_automation_platform:2.6::el9
 before 0:2.6.10-1.el9ap
0:2.6.10-1.el9ap
automation-controller
Red Hat:ansible_automation_platform_developer:2.6::el9
 before 0:4.7.13-2.el9ap
0:4.7.13-2.el9ap
automation-controller-cli
Red Hat:ansible_automation_platform_developer:2.6::el9
 before 0:4.7.13-2.el9ap
0:4.7.13-2.el9ap
automation-controller
Red Hat:ansible_automation_platform:2.6::el9
 before 0:4.7.13-2.el9ap
0:4.7.13-2.el9ap
automation-controller-cli
Red Hat:ansible_automation_platform:2.6::el9
 before 0:4.7.13-2.el9ap
0:4.7.13-2.el9ap
automation-controller-server
Red Hat:ansible_automation_platform:2.6::el9
 before 0:4.7.13-2.el9ap
0:4.7.13-2.el9ap
automation-controller-ui
Red Hat:ansible_automation_platform:2.6::el9
 before 0:4.7.13-2.el9ap
0:4.7.13-2.el9ap
automation-controller-venv-tower
Red Hat:ansible_automation_platform:2.6::el9
 before 0:4.7.13-2.el9ap
0:4.7.13-2.el9ap
python3.12-pysequoia
Red Hat:ansible_automation_platform:2.6::el9
 before 0:0.1.34-1.el9ap
0:0.1.34-1.el9ap
python3.12-pysequoia-debuginfo
Red Hat:ansible_automation_platform:2.6::el9
 before 0:0.1.34-1.el9ap
0:0.1.34-1.el9ap
python3.12-pysequoia-debugsource
Red Hat:ansible_automation_platform:2.6::el9
 before 0:0.1.34-1.el9ap
0:0.1.34-1.el9ap
python3.12-urllib3
Red Hat:ansible_automation_platform_developer:2.6::el9
 before 0:2.7.0-1.el9ap
0:2.7.0-1.el9ap
python3.12-urllib3
Red Hat:ansible_automation_platform:2.6::el9
 before 0:2.7.0-1.el9ap
0:2.7.0-1.el9ap
python3.12-pyjwt+crypto
Red Hat:ansible_automation_platform:2.6::el9
 before 0:2.13.0-1.el9ap
0:2.13.0-1.el9ap
python3.12-pyjwt
Red Hat:ansible_automation_platform:2.6::el9
 before 0:2.13.0-1.el9ap
0:2.13.0-1.el9ap
automation-gateway-server
Red Hat:ansible_automation_platform:2.5::el8
 before 0:2.5.20260715-1.el8ap
0:2.5.20260715-1.el8ap
automation-gateway-server
Red Hat:ansible_automation_platform:2.5::el9
 before 0:2.5.20260715-1.el9ap
0:2.5.20260715-1.el9ap
automation-controller-venv-tower
Red Hat:ansible_automation_platform:2.5::el8
 before 0:4.6.30-2.el8ap
0:4.6.30-2.el8ap
automation-controller-venv-tower
Red Hat:ansible_automation_platform:2.5::el9
 before 0:4.6.30-2.el9ap
0:4.6.30-2.el9ap
ansible-core
Red Hat:ansible_automation_platform_developer:2.5::el8
 before 1:2.16.19-1.el8ap
1:2.16.19-1.el8ap
ansible-core
Red Hat:ansible_automation_platform_inside:2.5::el8
 before 1:2.16.19-1.el8ap
1:2.16.19-1.el8ap
ansible-core
Red Hat:ansible_automation_platform:2.5::el8
 before 1:2.16.19-1.el8ap
1:2.16.19-1.el8ap
ansible-core
Red Hat:ansible_automation_platform_developer:2.5::el9
 before 1:2.16.19-1.el9ap
1:2.16.19-1.el9ap
ansible-core
Red Hat:ansible_automation_platform_inside:2.5::el9
 before 1:2.16.19-1.el9ap
1:2.16.19-1.el9ap
ansible-core
Red Hat:ansible_automation_platform:2.5::el9
 before 1:2.16.19-1.el9ap
1:2.16.19-1.el9ap
python3.12-pulpcore
Red Hat:ansible_automation_platform:2.5::el8
 before 0:3.49.63-2.el8ap
0:3.49.63-2.el8ap
python3.12-pulpcore
Red Hat:ansible_automation_platform:2.5::el9
 before 0:3.49.63-2.el9ap
0:3.49.63-2.el9ap
receptor
Red Hat:ansible_automation_platform_developer:2.5::el8
 before 0:1.6.6-1.el8ap
0:1.6.6-1.el8ap
receptor
Red Hat:ansible_automation_platform_inside:2.5::el8
 before 0:1.6.6-1.el8ap
0:1.6.6-1.el8ap
receptor
Red Hat:ansible_automation_platform:2.5::el8
 before 0:1.6.6-1.el8ap
0:1.6.6-1.el8ap
receptor
Red Hat:ansible_automation_platform_developer:2.5::el9
 before 0:1.6.6-1.el9ap
0:1.6.6-1.el9ap
receptor
Red Hat:ansible_automation_platform_inside:2.5::el9
 before 0:1.6.6-1.el9ap
0:1.6.6-1.el9ap
receptor
Red Hat:ansible_automation_platform:2.5::el9
 before 0:1.6.6-1.el9ap
0:1.6.6-1.el9ap
receptorctl
Red Hat:ansible_automation_platform_developer:2.5::el8
 before 0:1.6.6-1.el8ap
0:1.6.6-1.el8ap
receptorctl
Red Hat:ansible_automation_platform_inside:2.5::el8
 before 0:1.6.6-1.el8ap
0:1.6.6-1.el8ap
receptor-debuginfo
Red Hat:ansible_automation_platform:2.5::el8
 before 0:1.6.6-1.el8ap
0:1.6.6-1.el8ap
receptor-debugsource
Red Hat:ansible_automation_platform:2.5::el8
 before 0:1.6.6-1.el8ap
0:1.6.6-1.el8ap
receptorctl
Red Hat:ansible_automation_platform:2.5::el8
 before 0:1.6.6-1.el8ap
0:1.6.6-1.el8ap
receptorctl
Red Hat:ansible_automation_platform_developer:2.5::el9
 before 0:1.6.6-1.el9ap
0:1.6.6-1.el9ap
receptorctl
Red Hat:ansible_automation_platform_inside:2.5::el9
 before 0:1.6.6-1.el9ap
0:1.6.6-1.el9ap
receptor-debuginfo
Red Hat:ansible_automation_platform:2.5::el9
 before 0:1.6.6-1.el9ap
0:1.6.6-1.el9ap
receptor-debugsource
Red Hat:ansible_automation_platform:2.5::el9
 before 0:1.6.6-1.el9ap
0:1.6.6-1.el9ap
receptorctl
Red Hat:ansible_automation_platform:2.5::el9
 before 0:1.6.6-1.el9ap
0:1.6.6-1.el9ap
python3.12-gitpython
Red Hat:ansible_automation_platform:2.5::el8
 before 0:3.1.50-1.el8ap
0:3.1.50-1.el8ap
python3.12-gitpython
Red Hat:ansible_automation_platform:2.5::el9
 before 0:3.1.50-1.el9ap
0:3.1.50-1.el9ap
automation-controller
Red Hat:ansible_automation_platform_developer:2.5::el8
 before 0:4.6.30-2.el8ap
0:4.6.30-2.el8ap
automation-controller-cli
Red Hat:ansible_automation_platform_developer:2.5::el8
 before 0:4.6.30-2.el8ap
0:4.6.30-2.el8ap
python3.12-urllib3
Red Hat:ansible_automation_platform_developer:2.5::el8
 before 0:2.7.0-1.el8ap
0:2.7.0-1.el8ap
ansible-test
Red Hat:ansible_automation_platform:2.5::el8
 before 1:2.16.19-1.el8ap
1:2.16.19-1.el8ap
automation-controller
Red Hat:ansible_automation_platform:2.5::el8
 before 0:4.6.30-2.el8ap
0:4.6.30-2.el8ap
automation-controller-cli
Red Hat:ansible_automation_platform:2.5::el8
 before 0:4.6.30-2.el8ap
0:4.6.30-2.el8ap
automation-controller-server
Red Hat:ansible_automation_platform:2.5::el8
 before 0:4.6.30-2.el8ap
0:4.6.30-2.el8ap
automation-controller-ui
Red Hat:ansible_automation_platform:2.5::el8
 before 0:4.6.30-2.el8ap
0:4.6.30-2.el8ap
automation-eda-controller
Red Hat:ansible_automation_platform:2.5::el8
 before 0:1.1.20-1.el8ap
0:1.1.20-1.el8ap
automation-eda-controller-base
Red Hat:ansible_automation_platform:2.5::el8
 before 0:1.1.20-1.el8ap
0:1.1.20-1.el8ap
automation-eda-controller-base-services
Red Hat:ansible_automation_platform:2.5::el8
 before 0:1.1.20-1.el8ap
0:1.1.20-1.el8ap
automation-eda-controller-event-stream-services
Red Hat:ansible_automation_platform:2.5::el8
 before 0:1.1.20-1.el8ap
0:1.1.20-1.el8ap
automation-eda-controller-worker-services
Red Hat:ansible_automation_platform:2.5::el8
 before 0:1.1.20-1.el8ap
0:1.1.20-1.el8ap
automation-gateway
Red Hat:ansible_automation_platform:2.5::el8
 before 0:2.5.20260715-1.el8ap
0:2.5.20260715-1.el8ap
automation-gateway-config
Red Hat:ansible_automation_platform:2.5::el8
 before 0:2.5.20260715-1.el8ap
0:2.5.20260715-1.el8ap
automation-hub
Red Hat:ansible_automation_platform:2.5::el8
 before 0:4.10.16-1.el8ap
0:4.10.16-1.el8ap
python3.12-galaxy-ng
Red Hat:ansible_automation_platform:2.5::el8
 before 0:4.10.16-1.el8ap
0:4.10.16-1.el8ap
python3.12-pulp-ansible
Red Hat:ansible_automation_platform:2.5::el8
 before 1:0.25.6-1.el8ap
1:0.25.6-1.el8ap
python3.12-pulp-container
Red Hat:ansible_automation_platform:2.5::el8
 before 0:2.19.12-1.el8ap
0:2.19.12-1.el8ap
python3.12-pyjwt+crypto
Red Hat:ansible_automation_platform:2.5::el8
 before 0:2.13.0-1.el8ap
0:2.13.0-1.el8ap
python3.12-pyjwt
Red Hat:ansible_automation_platform:2.5::el8
 before 0:2.13.0-1.el8ap
0:2.13.0-1.el8ap
python3.12-pysequoia
Red Hat:ansible_automation_platform:2.5::el8
 before 0:0.1.34-1.el8ap
0:0.1.34-1.el8ap
python3.12-pysequoia-debuginfo
Red Hat:ansible_automation_platform:2.5::el8
 before 0:0.1.34-1.el8ap
0:0.1.34-1.el8ap
python3.12-pysequoia-debugsource
Red Hat:ansible_automation_platform:2.5::el8
 before 0:0.1.34-1.el8ap
0:0.1.34-1.el8ap
python3.12-urllib3
Red Hat:ansible_automation_platform:2.5::el8
 before 0:2.7.0-1.el8ap
0:2.7.0-1.el8ap
automation-controller
Red Hat:ansible_automation_platform_developer:2.5::el9
 before 0:4.6.30-2.el9ap
0:4.6.30-2.el9ap
automation-controller-cli
Red Hat:ansible_automation_platform_developer:2.5::el9
 before 0:4.6.30-2.el9ap
0:4.6.30-2.el9ap
python3.12-urllib3
Red Hat:ansible_automation_platform_developer:2.5::el9
 before 0:2.7.0-1.el9ap
0:2.7.0-1.el9ap
ansible-test
Red Hat:ansible_automation_platform:2.5::el9
 before 1:2.16.19-1.el9ap
1:2.16.19-1.el9ap
automation-controller
Red Hat:ansible_automation_platform:2.5::el9
 before 0:4.6.30-2.el9ap
0:4.6.30-2.el9ap
automation-controller-cli
Red Hat:ansible_automation_platform:2.5::el9
 before 0:4.6.30-2.el9ap
0:4.6.30-2.el9ap
automation-controller-server
Red Hat:ansible_automation_platform:2.5::el9
 before 0:4.6.30-2.el9ap
0:4.6.30-2.el9ap
automation-controller-ui
Red Hat:ansible_automation_platform:2.5::el9
 before 0:4.6.30-2.el9ap
0:4.6.30-2.el9ap
automation-eda-controller
Red Hat:ansible_automation_platform:2.5::el9
 before 0:1.1.20-1.el9ap
0:1.1.20-1.el9ap
automation-eda-controller-base
Red Hat:ansible_automation_platform:2.5::el9
 before 0:1.1.20-1.el9ap
0:1.1.20-1.el9ap
automation-eda-controller-base-services
Red Hat:ansible_automation_platform:2.5::el9
 before 0:1.1.20-1.el9ap
0:1.1.20-1.el9ap
automation-eda-controller-event-stream-services
Red Hat:ansible_automation_platform:2.5::el9
 before 0:1.1.20-1.el9ap
0:1.1.20-1.el9ap
automation-eda-controller-worker-services
Red Hat:ansible_automation_platform:2.5::el9
 before 0:1.1.20-1.el9ap
0:1.1.20-1.el9ap
automation-gateway
Red Hat:ansible_automation_platform:2.5::el9
 before 0:2.5.20260715-1.el9ap
0:2.5.20260715-1.el9ap
automation-gateway-config
Red Hat:ansible_automation_platform:2.5::el9
 before 0:2.5.20260715-1.el9ap
0:2.5.20260715-1.el9ap
automation-hub
Red Hat:ansible_automation_platform:2.5::el9
 before 0:4.10.16-1.el9ap
0:4.10.16-1.el9ap
python3.12-galaxy-ng
Red Hat:ansible_automation_platform:2.5::el9
 before 0:4.10.16-1.el9ap
0:4.10.16-1.el9ap
python3.12-pulp-ansible
Red Hat:ansible_automation_platform:2.5::el9
 before 1:0.25.6-1.el9ap
1:0.25.6-1.el9ap
python3.12-pulp-container
Red Hat:ansible_automation_platform:2.5::el9
 before 0:2.19.12-1.el9ap
0:2.19.12-1.el9ap
python3.12-pyjwt+crypto
Red Hat:ansible_automation_platform:2.5::el9
 before 0:2.13.0-1.el9ap
0:2.13.0-1.el9ap
python3.12-pyjwt
Red Hat:ansible_automation_platform:2.5::el9
 before 0:2.13.0-1.el9ap
0:2.13.0-1.el9ap
python3.12-pysequoia
Red Hat:ansible_automation_platform:2.5::el9
 before 0:0.1.34-1.el9ap
0:0.1.34-1.el9ap
python3.12-pysequoia-debuginfo
Red Hat:ansible_automation_platform:2.5::el9
 before 0:0.1.34-1.el9ap
0:0.1.34-1.el9ap
python3.12-pysequoia-debugsource
Red Hat:ansible_automation_platform:2.5::el9
 before 0:0.1.34-1.el9ap
0:0.1.34-1.el9ap
python3.12-urllib3
Red Hat:ansible_automation_platform:2.5::el9
 before 0:2.7.0-1.el9ap
0:2.7.0-1.el9ap
podman-sequoia
Red Hat:hummingbird:1
 before 0:0.3.2-4.hum1
0:0.3.2-4.hum1
rust-podman-sequoia
Red Hat:hummingbird:1
 before 0:0.3.2-4.hum1
0:0.3.2-4.hum1
rpm-sequoia
Red Hat:enterprise_linux:9::baseos
 before 0:1.10.2.1-1.el9_8
0:1.10.2.1-1.el9_8
rpm-sequoia-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:1.10.2.1-1.el9_8
0:1.10.2.1-1.el9_8
rust-rpm-sequoia
Red Hat:enterprise_linux:9::baseos
 before 0:1.10.2.1-1.el9_8
0:1.10.2.1-1.el9_8
rust-rpm-sequoia-debugsource
Red Hat:enterprise_linux:9::baseos
 before 0:1.10.2.1-1.el9_8
0:1.10.2.1-1.el9_8
rpm-sequoia-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:1.10.2.1-1.el9_8
0:1.10.2.1-1.el9_8
rpm-sequoia-devel
Red Hat:enterprise_linux:9::crb
 before 0:1.10.2.1-1.el9_8
0:1.10.2.1-1.el9_8
rust-rpm-sequoia-debugsource
Red Hat:enterprise_linux:9::crb
 before 0:1.10.2.1-1.el9_8
0:1.10.2.1-1.el9_8
rpm-sequoia
Red Hat:enterprise_linux:10.2
 before 0:1.10.2.1-1.el10_2
0:1.10.2.1-1.el10_2
rpm-sequoia-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:1.10.2.1-1.el10_2
0:1.10.2.1-1.el10_2
rust-rpm-sequoia
Red Hat:enterprise_linux:10.2
 before 0:1.10.2.1-1.el10_2
0:1.10.2.1-1.el10_2
rust-rpm-sequoia-debugsource
Red Hat:enterprise_linux:10.2
 before 0:1.10.2.1-1.el10_2
0:1.10.2.1-1.el10_2
rpm-sequoia-devel
Red Hat:enterprise_linux:10.2
 before 0:1.10.2.1-1.el10_2
0:1.10.2.1-1.el10_2
rust-sequoia-sqv
Red Hat:enterprise_linux:10.2
 before 0:1.3.0.2-1.el10_2
0:1.3.0.2-1.el10_2
rust-sequoia-sqv-debugsource
Red Hat:enterprise_linux:10.2
 before 0:1.3.0.2-1.el10_2
0:1.3.0.2-1.el10_2
sequoia-sqv
Red Hat:enterprise_linux:10.2
 before 0:1.3.0.2-1.el10_2
0:1.3.0.2-1.el10_2
sequoia-sqv-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:1.3.0.2-1.el10_2
0:1.3.0.2-1.el10_2
rust-sequoia-sq
Red Hat:enterprise_linux:10.2
 before 0:1.4.0.1-2.el10_2
0:1.4.0.1-2.el10_2
rust-sequoia-sq-debugsource
Red Hat:enterprise_linux:10.2
 before 0:1.4.0.1-2.el10_2
0:1.4.0.1-2.el10_2
sequoia-sq
Red Hat:enterprise_linux:10.2
 before 0:1.4.0.1-2.el10_2
0:1.4.0.1-2.el10_2
sequoia-sq-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:1.4.0.1-2.el10_2
0:1.4.0.1-2.el10_2
rust-rpm-sequoia
Rocky Linux:9
 before 0:1.10.2.1-1.el9_8
0:1.10.2.1-1.el9_8
rust-rpm-sequoia
Rocky Linux:10
 before 0:1.10.2.1-1.el10_2
0:1.10.2.1-1.el10_2
rust-sequoia-sqv
Rocky Linux:10
 before 0:1.3.0.2-1.el10_2
0:1.3.0.2-1.el10_2
rust-sequoia-sq
Rocky Linux:10
 before 0:1.4.0.1-2.el10_2
0:1.4.0.1-2.el10_2
rust-sequoia-openpgp
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.1.0-31.3.0-41.7.0-6
 None known
rust-sequoia-openpgp
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.16.0-11.17.0-11.17.0-21.18.0-11.19.0-11.19.0-1build1
 None known
rust-sequoia-openpgp
Ubuntu:25.10
 All versions, plus listed versions
1.22.0-12.0.0-2
 None known
rust-sequoia-openpgp
Ubuntu:26.10
 All versions, plus listed versions
2.2.0-12.3.0-1
 None known
rust-sequoia-openpgp
Ubuntu:26.04:LTS
 All versions, plus listed versions
2.0.0-22.0.0-52.1.0-12.1.0-22.1.0-32.2.0-1
 None known

History

History
RecordedChangedSources
referencesCVE List
factsCVE List, EUVD, NVD
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-42784 is a high vulnerability (CVSS 7.4) in Red Hat Confidential Compute Attestation, published July 2, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 24th percentile. Fixed in rpm-sequoia 1.10.2.1-1.el9_8.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 6 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open