Detections
Analytics
RHEL 10 / 9 : Red Hat Edge Manager Version 1.2.1 Security Update (Important) (RHSA-2026:68335)
high Nessus Plugin ID 346435
Synopsis
The remote Red Hat host is missing one or more security updates.Description
The remote Redhat Enterprise Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:68335 advisory.Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused management of edge devices and applications. It supports image-mode RHEL and container workloads that run on Podman/Docker or Kubernetes.
RHEM is now available as a standalone feature, providing greater flexibility for edge deployments. In addition to the standalone version, RHEM continues to be offered as a plugin for the following platforms:
Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge devices.
Red Hat Ansible Automation Platform (AAP): Integrates edge management with Ansible automation.
This integration enables organizations to optimize the management and orchestration of their fleets of edge devices; whether its thousands of dispersed retail point-of-sale systems or industrial machinery on remote factory floors.
Value for customers and partners:
* This solution not only helps customers manage thousands of devices but helps scale operations.
* To manage large-scale deployments, customers need to be able to integrate with their existing management systems, support remote configuration and over-the-air updates, and collect telemetry data for advanced analytics.
* Red Hat Edge Manager offers a simple and security-focused lifecycle management, from onboarding to decommissioning of edge devices.
This complete end-to-end solution empowers organizations to gain the most value from the fleets of devices that generate data, all from a centralized location.
Security Fixes:
* flightctl: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)
* flightctl: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)
* flightctl: OpenTelemetry-Go: Denial of Service via oversized baggage headers (CVE-2026-41178)
* flightctl: Billy: Denial of Service via crafted input due to insufficient validation (CVE-2026-44740)
* flightctl: Arc: Information disclosure and Denial of Service via unauthenticated debug endpoints (CVE-2026-48050)
* flightctl: golang.org/x/text: Denial of Service via invalid UTF-8 input (CVE-2026-56852)
* flightctl: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853)
* flightctl: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)
* flightctl: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859)
* flightctl: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860)
* flightctl: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)
* flightctl: go-git: Arbitrary file read/write via symbolic link resolution (CVE-2026-71556)
Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Update the affected flightctl-agent and / or flightctl-cli packages.See Also
https://access.redhat.com/errata/RHSA-2026:68335
https://access.redhat.com/security/updates/classification/#important
https://bugzilla.redhat.com/show_bug.cgi?id=2483894
https://bugzilla.redhat.com/show_bug.cgi?id=2484207
https://bugzilla.redhat.com/show_bug.cgi?id=2484830
https://bugzilla.redhat.com/show_bug.cgi?id=2504233
https://bugzilla.redhat.com/show_bug.cgi?id=2512562
https://bugzilla.redhat.com/show_bug.cgi?id=2515815
https://bugzilla.redhat.com/show_bug.cgi?id=2515820
https://bugzilla.redhat.com/show_bug.cgi?id=2515827
https://bugzilla.redhat.com/show_bug.cgi?id=2515838
https://bugzilla.redhat.com/show_bug.cgi?id=2515839
Plugin Details
Severity: High
ID: 346435
File Name: redhat-RHSA-2026-68335.nasl
Version: 1.1
Type: Local
Agent: unix
Family: Red Hat Local Security Checks
Published: 9/16/2026
Updated: 9/16/2026
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Continuous Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5
Percentile: 93.89
Vendor
Vendor Severity: Important
CVSS v2
Risk Factor: High
Base Score: 9.4
Temporal Score: 7
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:N
CVSS Score Source: CVE-2026-56858
CVSS v3
Risk Factor: High
Base Score: 7.1
Temporal Score: 6.2
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS Score Source: CVE-2026-71556
CVSS v4
Risk Factor: High
Base Score: 8.8
Threat Score: 6.7
Threat Vector: CVSS:4.0/E:U
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS Score Source: CVE-2026-48050
Vulnerability Information
CPE: cpe:/o:redhat:enterprise_linux:10, cpe:/o:redhat:enterprise_linux:9, p-cpe:/a:redhat:enterprise_linux:flightctl-agent, p-cpe:/a:redhat:enterprise_linux:flightctl-cli, p-cpe:/a:redhat:enterprise_linux:flightctl
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu
Exploit Ease: No known exploits are available
Patch Publication Date: 9/16/2026
Vulnerability Publication Date: 5/13/2026
Reference Information
CVE: CVE-2026-27145, CVE-2026-33818, CVE-2026-41178, CVE-2026-44740, CVE-2026-48050, CVE-2026-56852, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862, CVE-2026-71556