Redhat Enterprise Linux Ai vulnerabilities

• encode starlette, red hat exploit intelligence, openshift lightspeed +18 more +20 more Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks CVE-2026-48710 In KEVPublic exploitFix available EPSS 70.3% 6.5 MediumMay 22, 2026
• redhat instructlab, red hat enterprise linux ai (rhel ai) 3, redhat enterprise linux ai +2 more Instructlab: instructlab: arbitrary code execution due to hardcoded `trust_remote_code=true` CVE-2026-6859 8.8 HighApril 22, 2026
• redhat instructlab, red hat enterprise linux ai (rhel ai) 3, redhat enterprise linux ai +2 more Instructlab: instructlab: path traversal allows arbitrary directory creation and file write CVE-2026-6855 7.1 HighApril 22, 2026