Skip to content
OpenAdvisories

Product · Red Hat

Red Hat CloudForms

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-52903

    YAML safe_load production fallback to unsafe_load enables RCE via deserialization

    A deserialization of untrusted data vulnerability was found in ManageIQ. The YamlLoadAliases module overrides YAML.safe_load to silently fall back to YAML.unsafe_load in production when a Psych::DisallowedClass error occurs. An authenticated attacker with dia…

    Red Hat ManageIQ manageiq Red Hat CloudForms