CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

[NEW] [medium] Red Hat Ansible Automation Platform (quic-go): Vulnerability Enables Denial of Service

mediumCVE-2026-40898
A remote, anonymous attacker can exploit a vulnerability in Red Hat Ansible Automation Platform to perform a denial of service attack.

CSIRTS triage

vendor: Red Hatproduct: Ansible Automation PlatformDenial of service
What
A vulnerability in the quic-go library used by Ansible Automation Platform enables remote denial of service.
Who is affected
Deployments of Red Hat Ansible Automation Platform exposed to remote, untrusted network traffic are affected.
Urgency
Medium severity with remote, unauthenticated exploitation potential warrants expedited patching.
Action
Upgrade to a patched version of Red Hat Ansible Automation Platform that includes a fixed quic-go library.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Ansible Automation Platform

Get an email when a new Ansible Automation Platform advisory drops — max one per day, one-click unsubscribe.

Details

Source
CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity
medium
Published
2026-08-05
Exploitation
Not in CISA KEV at last sync
Language
Machine-translated to English — verify against the original

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2650

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Referenced CVEs

CVECSIRTS overviewExternal
CVE-2026-40898coverage & exploitation statusNVD · CVE.org

Recent advisories for Red Hat Ansible

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

More from CERT-Bund (BSI) Security Advisories