{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:31.523Z","products":["redhat"],"actNowTotal":2,"results":[{"query":"redhat","matched":2,"actNow":2,"events":[{"id":"kev-2026-08-26-red-hat-automatic-bug-reporting-tool","url":"https://securitythreatpulse.com/events/kev-2026-08-26-red-hat-automatic-bug-reporting-tool","title":"Red Hat Automatic Bug Reporting Tool: attackers can gain admin rights","verdict":"act_now","verdictReason":"Attacks are confirmed. Ready-made attack tools are public.","tier":null,"rankScore":null,"rankWhy":null,"rulesVersion":"v2","ladder":{"talk":"none","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2015-5287"],"vendor":"Red Hat","product":"Automatic Bug Reporting Tool","affectedProducts":[{"vendorKey":"redhat","productKey":"automaticbugreportingtool","vendor":"Red Hat","product":"Automatic Bug Reporting Tool","slug":"redhat/automaticbugreportingtool","kind":"direct","evidence":["kev"]}],"category":{"id":"endpoint","label":"Computers, phones and browsers","why":"It runs on staff computers, phones or browsers.","doThis":"Install the latest updates on every device, and turn on automatic updates."},"summary":"Red Hat Automatic Bug Reporting Tool (ABRT) contains a privilege escalation vulnerability that could allow local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.","cvss":7.8,"epss":0.05003,"exploitMaturity":"weaponized","kevListed":true,"kevDateAdded":"2026-08-26","kevDueDate":"2026-09-09","firstSeenAt":"2026-08-26T00:00:00.000Z","updatedAt":"2026-10-24T23:23:22.790Z","newestEvidenceAt":"2026-08-26T00:00:00.000Z"},{"id":"kev-2026-08-26-red-hat-libuser","url":"https://securitythreatpulse.com/events/kev-2026-08-26-red-hat-libuser","title":"Red Hat Libuser: attackers can gain admin rights","verdict":"act_now","verdictReason":"Attacks are confirmed. Ready-made attack tools are public.","tier":null,"rankScore":null,"rankWhy":null,"rulesVersion":"v2","ladder":{"talk":"none","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2015-3246"],"vendor":"Red Hat","product":"Libuser","affectedProducts":[{"vendorKey":"redhat","productKey":"libuser","vendor":"Red Hat","product":"Libuser","slug":"redhat/libuser","kind":"direct","evidence":["kev"]}],"category":{"id":"endpoint","label":"Computers, phones and browsers","why":"It runs on staff computers, phones or browsers.","doThis":"Install the latest updates on every device, and turn on automatic updates."},"summary":"Red Hat libuser contains a race condition vulnerability that allows authenticated local users to corrupt the /etc/passwd file to cause a denial of service or privilege escalation.","cvss":7.4,"epss":0.08503,"exploitMaturity":"weaponized","kevListed":true,"kevDateAdded":"2026-08-26","kevDueDate":"2026-09-09","firstSeenAt":"2026-08-26T00:00:00.000Z","updatedAt":"2026-10-24T23:37:40.396Z","newestEvidenceAt":"2026-08-26T00:00:00.000Z"}]}]}