high 8.8

CVE-2026-3085 json

GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability

published 2026-03-13 7mo ago modified 2026-07-21 3mo ago also EUVD-2026-12129

cvss: 8.8; version 3.0, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 1.6%; EPSS 1.6% chance of exploitation in 30 days, percentile 75%
public exploits: 0; none known

GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.

The specific flaw exists within the processing of X-QDM RTP payloads. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28851.

Patch / fix

fixed in 17 distros 5 links 1

Red Hat Red Hat Enterprise Linux 10 0:1.24.11-2.el10_1, 0:1.24.11-3.el10_1, 0:1.26.7-2.el10_2
Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support 0:1.24.11-1.el10_0.1, 0:1.24.11-1.el10_0.2, 0:1.24.11-3.el10_0
Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support 0:0.10.31-14.el7_9, 0:0.10.36-11.el7_9, 0:1.10.4-4.el7_9, 0:1.10.4-5.el7_9
Red Hat Red Hat Enterprise Linux 8 0:1.16.1-6.el8_10
Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support 0:1.16.1-3.el8_2, 0:1.16.1-4.el8_2
Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 0:1.16.1-4.el8_4
Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On 0:1.16.1-4.el8_4
Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 0:1.16.1-4.el8_6
Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service 0:1.16.1-4.el8_6
Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions 0:1.16.1-4.el8_6
Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service 0:1.16.1-4.el8_8, 0:1.16.1-5.el8_8
Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 0:1.16.1-4.el8_8, 0:1.16.1-5.el8_8
Red Hat Red Hat Enterprise Linux 9 0:1.22.12-4.el9_7, 0:1.22.12-5.el9_7, 0:1.22.12-6.el9_8, 0:1.22.12-7.el9_8, 0:1.22.12-8.el9_8
Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions 0:1.18.4-7.el9_0, 0:1.18.4-8.el9_0
Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 0:1.18.4-8.el9_2, 0:1.18.4-9.el9_2
Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support 0:1.22.1-4.el9_4, 0:1.22.1-6.el9_4
Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support 0:1.22.12-4.el9_6, 0:1.22.12-5.el9_6

debian ubuntu red hat almalinux rocky linux

gst-plugins-good1.0 Debian 12 1.22.0-5+deb12u4
gst-plugins-good1.0 Debian 13 1.26.2-1+deb13u2
gst-plugins-good1.0 Debian 14 1.28.1-1

debian advisories DEBIAN-CVE-2026-3085

gst-plugins-good1.0 Ubuntu 22.04 LTS 1.20.3-0ubuntu1.5
gst-plugins-good1.0 Ubuntu 24.04 LTS 1.24.2-1ubuntu1.3
gst-plugins-good1.0 Ubuntu 25.10 1.26.5-1ubuntu2.1

ubuntu advisories UBUNTU-CVE-2026-3085

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

gstreamer1-plugins-ugly-free RHEL 9 1.22.12-6.el9_8
gstreamer1-plugins-base RHEL 9 1.22.12-8.el9_8
gstreamer1-plugins-good RHEL 9 1.22.12-7.el9_8
gstreamer1-plugins-bad-free RHEL 9 1.22.12-7.el9_8
gstreamer1-plugins-good-gtk RHEL 9 1.22.12-7.el9_8
gstreamer1-plugins-base-tools RHEL 9 1.22.12-8.el9_8
gstreamer1-plugins-bad-free-libs RHEL 9 1.22.12-7.el9_8
gstreamer1-plugins-ugly-free RHEL 10.2 1.26.7-2.el10_2

red hat advisories RHSA-2026:19180 RHSA-2026:19024 RHSA-2026:9487 RHSA-2026:9488 RHSA-2026:9447 RHSA-2026:9446

gstreamer1-plugins-ugly-free AlmaLinux 10 1.26.7-2.el10_2
gstreamer1-plugins-base AlmaLinux 10 1.26.7-2.el10_2
gstreamer1-plugins-good AlmaLinux 10 1.26.7-2.el10_2
gstreamer1-plugins-bad-free AlmaLinux 10 1.26.7-2.el10_2
gstreamer1-plugins-good-gtk AlmaLinux 10 1.26.7-2.el10_2
gstreamer1-plugins-base-tools AlmaLinux 10 1.26.7-2.el10_2
gstreamer1-plugins-bad-free-libs AlmaLinux 10 1.26.7-2.el10_2
gstreamer1-plugins-ugly-free AlmaLinux 9 1.22.12-6.el9_8

almalinux advisories ALSA-2026:19024 ALSA-2026:19180 ALSA-2026:6750 ALSA-2026:6259 ALSA-2026:6300

gstreamer1-plugins-ugly-free Rocky Linux 10 1.26.7-2.el10_2
gstreamer1-plugins-base Rocky Linux 10 1.26.7-2.el10_2
gstreamer1-plugins-good Rocky Linux 10 1.26.7-2.el10_2
gstreamer1-plugins-bad-free Rocky Linux 10 1.26.7-2.el10_2
gstreamer1-plugins-ugly-free Rocky Linux 9 1.22.12-6.el9_8
gstreamer1-plugins-base Rocky Linux 9 1.22.12-8.el9_8
gstreamer1-plugins-good Rocky Linux 9 1.22.12-7.el9_8
gstreamer1-plugins-bad-free Rocky Linux 9 1.22.12-7.el9_8

rocky linux advisories RLSA-2026:19024 RLSA-2026:19180 RLSA-2026:6259 RLSA-2026:6750 RLSA-2026:6300

gitlab.freedesktop.org/gstreamer/gstreamer@d60a94d commit

Is CVE-2026-3085 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2026-3085 updated 2026-11-04 cvss 8.8

gstreamer-plugins-good: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay

Red Hat Enterprise Linux 6 gstreamer-plugins-good
affected: workaround, no fix planned “To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure.”
Red Hat CodeReady Linux Builder EUS (v.9.4) gstreamer1-plugins-bad-free-devel 1.22.1-6.el9_4, gstreamer1-plugins-bad-free-debuginfo 1.22.1-6.el9_4, gstreamer1-plugins-bad-free-debugsource 1.22.1-6.el9_4
fixed: vendor fix “To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure.” RHSA-2026:8857
Red Hat CodeReady Linux Builder EUS (v.9.6) gstreamer1-plugins-bad-free-devel 1.22.12-5.el9_6, gstreamer1-plugins-bad-free-debuginfo 1.22.12-5.el9_6, gstreamer1-plugins-bad-free-debugsource 1.22.12-5.el9_6, gstreamer1-plugins-bad-free-libs-debuginfo 1.22.12-5.el9_6
fixed: vendor fix “To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure.” RHSA-2026:8862
Red Hat Enterprise Linux AppStream (v. 8) gstreamer1-plugins-base 1.16.1-6.el8_10, gstreamer1-plugins-good 1.16.1-6.el8_10, gstreamer1-plugins-bad-free 1.16.1-6.el8_10, gstreamer1-plugins-good-gtk 1.16.1-6.el8_10
fixed: vendor fix “To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure.” RHSA-2026:6750
Red Hat Enterprise Linux AppStream (v. 9) gstreamer1-plugins-base 1.22.12-5.el9_7, gstreamer1-plugins-base 1.22.12-8.el9_8, gstreamer1-plugins-good 1.22.12-5.el9_7, gstreamer1-plugins-good 1.22.12-7.el9_8, gstreamer1-plugins-bad-free 1.22.12-5.el9_7, gstreamer1-plugins-bad-free 1.22.12-7.el9_8, +8 more
fixed: vendor fix “To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure.” RHSA-2026:6300
Red Hat Enterprise Linux AppStream (v. 10) gstreamer1-plugins-base 1.26.7-2.el10_2, gstreamer1-plugins-good 1.26.7-2.el10_2, gstreamer1-plugins-base 1.24.11-2.el10_1, gstreamer1-plugins-good 1.24.11-2.el10_1, gstreamer1-plugins-bad-free 1.26.7-2.el10_2, gstreamer1-plugins-good-gtk 1.26.7-2.el10_2, +8 more
fixed: vendor fix “To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure.” RHSA-2026:6259
Red Hat Enterprise Linux AppStream AUS (v. 8.2) gstreamer1-plugins-base 1.16.1-3.el8_2, gstreamer1-plugins-good 1.16.1-3.el8_2, gstreamer1-plugins-bad-free 1.16.1-4.el8_2, gstreamer1-plugins-good-gtk 1.16.1-3.el8_2
fixed: vendor fix “To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure.” RHSA-2026:9487
Red Hat Enterprise Linux AppStream AUS (v.8.4) gstreamer1-plugins-base 1.16.1-4.el8_4, gstreamer1-plugins-good 1.16.1-4.el8_4, gstreamer1-plugins-bad-free 1.16.1-4.el8_4, gstreamer1-plugins-good-gtk 1.16.1-4.el8_4
fixed: vendor fix “To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure.” RHSA-2026:9446

show 16 more

Red Hat Enterprise Linux AppStream AUS (v.8.6) gstreamer1-plugins-base 1.16.1-4.el8_6, gstreamer1-plugins-good 1.16.1-4.el8_6, gstreamer1-plugins-bad-free 1.16.1-4.el8_6, gstreamer1-plugins-good-gtk 1.16.1-4.el8_6 Red Hat Enterprise Linux AppStream E4S (v.8.6) gstreamer1-plugins-base 1.16.1-4.el8_6, gstreamer1-plugins-good 1.16.1-4.el8_6, gstreamer1-plugins-bad-free 1.16.1-4.el8_6, gstreamer1-plugins-good-gtk 1.16.1-4.el8_6
fixed: vendor fix “To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure.” RHSA-2026:9447
Red Hat Enterprise Linux AppStream E4S (v.8.8) gstreamer1-plugins-base 1.16.1-4.el8_8, gstreamer1-plugins-good 1.16.1-5.el8_8, gstreamer1-plugins-bad-free 1.16.1-4.el8_8, gstreamer1-plugins-good-gtk 1.16.1-5.el8_8
fixed: vendor fix “To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure.” RHSA-2026:9488
Red Hat Enterprise Linux AppStream E4S (v.9.0) gstreamer1-plugins-base 1.18.4-8.el9_0, gstreamer1-plugins-good 1.18.4-7.el9_0, gstreamer1-plugins-bad-free 1.18.4-8.el9_0, gstreamer1-plugins-good-gtk 1.18.4-7.el9_0
fixed: vendor fix “To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure.” RHSA-2026:8876
Red Hat Enterprise Linux AppStream E4S (v.9.2) gstreamer1-plugins-base 1.18.4-8.el9_2, gstreamer1-plugins-good 1.18.4-8.el9_2, gstreamer1-plugins-bad-free 1.18.4-9.el9_2, gstreamer1-plugins-good-gtk 1.18.4-8.el9_2, gstreamer1-plugins-base-tools 1.18.4-8.el9_2
fixed: vendor fix “To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure.” RHSA-2026:8874
Red Hat Enterprise Linux AppStream EUS (v. 10.0) gstreamer1-plugins-base 1.24.11-1.el10_0.1, gstreamer1-plugins-good 1.24.11-1.el10_0.2, gstreamer1-plugins-bad-free 1.24.11-3.el10_0, gstreamer1-plugins-good-gtk 1.24.11-1.el10_0.2, gstreamer1-plugins-ugly-free 1.24.11-1.el10_0.1, gstreamer1-plugins-base-tools 1.24.11-1.el10_0.1, +1 more
fixed: vendor fix “To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure.” RHSA-2026:8854
Red Hat Enterprise Linux AppStream EUS (v.9.4) gstreamer1-plugins-base 1.22.1-4.el9_4, gstreamer1-plugins-good 1.22.1-4.el9_4, gstreamer1-plugins-bad-free 1.22.1-6.el9_4, gstreamer1-plugins-good-gtk 1.22.1-4.el9_4, gstreamer1-plugins-base-tools 1.22.1-4.el9_4
fixed: vendor fix “To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure.” RHSA-2026:8857
Red Hat Enterprise Linux AppStream EUS (v.9.6) gstreamer1-plugins-base 1.22.12-5.el9_6, gstreamer1-plugins-good 1.22.12-5.el9_6, gstreamer1-plugins-bad-free 1.22.12-5.el9_6, gstreamer1-plugins-good-gtk 1.22.12-5.el9_6, gstreamer1-plugins-ugly-free 1.22.12-4.el9_6, gstreamer1-plugins-base-tools 1.22.12-5.el9_6, +1 more
fixed: vendor fix “To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure.” RHSA-2026:8862
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) gstreamer1-plugins-base 1.16.1-4.el8_4, gstreamer1-plugins-good 1.16.1-4.el8_4, gstreamer1-plugins-bad-free 1.16.1-4.el8_4, gstreamer1-plugins-good-gtk 1.16.1-4.el8_4
fixed: vendor fix “To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure.” RHSA-2026:9446
Red Hat Enterprise Linux AppStream TUS (v.8.6) gstreamer1-plugins-base 1.16.1-4.el8_6, gstreamer1-plugins-good 1.16.1-4.el8_6, gstreamer1-plugins-bad-free 1.16.1-4.el8_6, gstreamer1-plugins-good-gtk 1.16.1-4.el8_6
fixed: vendor fix “To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure.” RHSA-2026:9447
Red Hat Enterprise Linux AppStream TUS (v.8.8) gstreamer1-plugins-base 1.16.1-4.el8_8, gstreamer1-plugins-good 1.16.1-5.el8_8, gstreamer1-plugins-bad-free 1.16.1-4.el8_8, gstreamer1-plugins-good-gtk 1.16.1-5.el8_8
fixed: vendor fix “To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure.” RHSA-2026:9488
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) gstreamer1-plugins-bad-free-devel 1.22.12-5.el9_7, gstreamer1-plugins-bad-free-devel 1.22.12-7.el9_8, gstreamer1-plugins-bad-free-debuginfo 1.22.12-5.el9_7, gstreamer1-plugins-bad-free-debuginfo 1.22.12-7.el9_8, gstreamer1-plugins-bad-free-debugsource 1.22.12-5.el9_7, gstreamer1-plugins-bad-free-debugsource 1.22.12-7.el9_8, +2 more
fixed: vendor fix “To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure.” RHSA-2026:6300
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) gstreamer1-plugins-bad-free-devel 1.26.7-2.el10_2, gstreamer1-plugins-bad-free-devel 1.24.11-3.el10_1, gstreamer1-plugins-bad-free-debuginfo 1.26.7-2.el10_2, gstreamer1-plugins-bad-free-debuginfo 1.24.11-3.el10_1, gstreamer1-plugins-bad-free-debugsource 1.26.7-2.el10_2, gstreamer1-plugins-bad-free-debugsource 1.24.11-3.el10_1, +2 more
fixed: vendor fix “To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure.” RHSA-2026:6259
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) gstreamer1-plugins-bad-free-devel 1.24.11-3.el10_0, gstreamer1-plugins-bad-free-debuginfo 1.24.11-3.el10_0, gstreamer1-plugins-bad-free-debugsource 1.24.11-3.el10_0, gstreamer1-plugins-bad-free-libs-debuginfo 1.24.11-3.el10_0
fixed: vendor fix “To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure.” RHSA-2026:8854
Red Hat Enterprise Linux CRB (v. 8) gstreamer1-plugins-bad-free-devel 1.16.1-6.el8_10, gstreamer1-plugins-bad-free-debuginfo 1.16.1-6.el8_10, gstreamer1-plugins-bad-free-debugsource 1.16.1-6.el8_10
fixed: vendor fix “To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure.” RHSA-2026:6750
Red Hat Enterprise Linux Server (v. 7 ELS) gstreamer1-plugins-base 1.10.4-4.el7_9, gstreamer1-plugins-good 1.10.4-4.el7_9, gstreamer-plugins-base 0.10.36-11.el7_9, gstreamer-plugins-good 0.10.31-14.el7_9, gstreamer1-plugins-bad-free 1.10.4-5.el7_9 Red Hat Enterprise Linux Server Optional (v. 7 ELS) gstreamer1-plugins-base-tools 1.10.4-4.el7_9, gstreamer-plugins-base-tools 0.10.36-11.el7_9, gstreamer1-plugins-bad-free-gtk 1.10.4-5.el7_9
fixed: vendor fix “To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure.” RHSA-2026:7850
Red Hat Enterprise Linux 8 mingw-gstreamer1-plugins-good, mingw32-gstreamer1-plugins-good, mingw64-gstreamer1-plugins-good
not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: total
Assessed: 7mo ago (2026-03-17)

Exploit prediction

1.56% chance of exploitation in the next 30 days, higher than 75% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by	version	score	vector
CNA	3.0	8.8	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA ADP	3.1	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CNA	3.1	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

GStreamer GStreamer
Red Hat Red Hat Enterprise Linux 10
Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support
Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support
Red Hat Red Hat Enterprise Linux 8
Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support
Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service
Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service
Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux 9
Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support
Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support
Red Hat Red Hat Enterprise Linux 6

Classification

Weakness

CWE-122 Heap-based Buffer Overflow
CWE-1284 Improper Validation of Specified Quantity in Input

References

gitlab.freedesktop.org /gstreamer/gstreamer/-/commit/d60a94dee3c0a0942c9981491bf83e0de1900fbf
vendor-advisory
access.redhat.com /errata/RHSA-2026:7850
vendor-advisory
access.redhat.com /errata/RHSA-2026:7673
vendor-advisory
access.redhat.com /errata/RHSA-2026:8854
vendor-advisory
access.redhat.com /errata/RHSA-2026:6259
vendor-advisory
access.redhat.com /errata/RHSA-2026:19024
vendor-advisory
access.redhat.com /errata/RHSA-2026:6750
vendor-advisory
access.redhat.com /errata/RHSA-2026:9487
vendor-advisory
access.redhat.com /errata/RHSA-2026:9446
vendor-advisory
access.redhat.com /errata/RHSA-2026:9447
vendor-advisory
access.redhat.com /errata/RHSA-2026:9488
vendor-advisory
access.redhat.com /errata/RHSA-2026:8876
vendor-advisory
access.redhat.com /errata/RHSA-2026:8874
vendor-advisory
access.redhat.com /errata/RHSA-2026:8857
vendor-advisory
access.redhat.com /errata/RHSA-2026:8862
vendor-advisory
access.redhat.com /errata/RHSA-2026:6300
vendor-advisory
access.redhat.com /errata/RHSA-2026:19180
vendor-advisory
zerodayinitiative.com /advisories/ZDI-26-167/
third-party-advisory
access.redhat.com /security/cve/CVE-2026-3085
vdb-entry
bugzilla.redhat.com /show_bug.cgi?id=2447495
issue-tracking
security.access.redhat.com /data/csaf/v2/vex/2026/cve-2026-3085.json

Sources

CVE List CVE-2026-3085
NVD CVE-2026-3085

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

json all entries feed