Out of Memory Vulnerability in Red Hat Cloud Storage (RHCS)
CVE-2026-12353

5.3MEDIUM

Key Information:

Vendor: Red Hat
Status: Red Hat Certificate System 9; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9
Vendor: CVE Published:; 23 July 2026

What is CVE-2026-12353?

An unauthenticated attacker could exploit a vulnerability in Red Hat Cloud Storage (RHCS) by sending a series of HTTP requests to the TLS endpoint, effectively triggering an Out of Memory condition that causes the Java process to crash. Depending on the server's configuration, this may necessitate manual intervention to restore service availability.

References

https://access.redhat.com/security/cve/CVE-2026-12353

vdb-entryx_refsource_REDHAT

https://bugzilla.redhat.com/show_bug.cgi?id=2489056

issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 23, 2026
Vulnerability Reserved
Jun 15, 2026

Credit

This issue was discovered by Thibault Guittet (Red Hat).

CVE-2026-12353 Data

JSON