CVE-2026-35091

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 8.2EPSS 1%

Published 2026-04-01Updated 2026-04-01

Vulnerability details

A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

CNAredhat

EPSS score history

Sources

3 links

PoC links are not available for guest users. Login to view them.

CVE Organization RedHat Vuln DB NVD Analysis

Profile

CVSS

8.2

EPSS

Published

2026-04-01

Updated

2026-04-01

CNA

redhat

Vendors

Red Hat

5 products

CPEs

cpe:/o:redhat:enterprise_linux:10

cpe:/o:redhat:enterprise_linux:7

cpe:/o:redhat:enterprise_linux:8

cpe:/o:redhat:enterprise_linux:9

cpe:/a:redhat:openshift:4

cpe:/o:redhat:enterprise_linux:10.1

cpe:/a:redhat:enterprise_linux:8::appstream

cpe:/a:redhat:enterprise_linux:8::crb

cpe:/a:redhat:enterprise_linux:8::highavailability

cpe:/a:redhat:enterprise_linux:8::resilientstorage

cpe:/a:redhat:enterprise_linux:9::appstream

cpe:/a:redhat:enterprise_linux:9::crb

cpe:/a:redhat:enterprise_linux:9::highavailability

cpe:/a:redhat:enterprise_linux:9::resilientstorage

cpe:/o:redhat:enterprise_linux_eus:10.0

cpe:/a:redhat:rhel_aus:8.4::appstream

cpe:/a:redhat:rhel_aus:8.4::highavailability

cpe:/a:redhat:rhel_eus_long_life:8.4::appstream

cpe:/a:redhat:rhel_eus_long_life:8.4::highavailability

cpe:/a:redhat:rhel_aus:8.6::appstream

cpe:/a:redhat:rhel_e4s:8.6::appstream

cpe:/a:redhat:rhel_e4s:8.6::highavailability

cpe:/a:redhat:rhel_tus:8.6::appstream

cpe:/a:redhat:rhel_tus:8.6::highavailability

cpe:/a:redhat:rhel_e4s:8.8::appstream

cpe:/a:redhat:rhel_e4s:8.8::highavailability

cpe:/a:redhat:rhel_tus:8.8::appstream

cpe:/a:redhat:rhel_tus:8.8::highavailability

cpe:/a:redhat:rhel_eus:9.4::appstream

cpe:/a:redhat:rhel_eus:9.4::crb

cpe:/a:redhat:rhel_eus:9.4::highavailability

cpe:/a:redhat:rhel_eus:9.4::resilientstorage

cpe:/a:redhat:rhel_eus:9.6::appstream

cpe:/a:redhat:rhel_eus:9.6::crb

cpe:/a:redhat:rhel_eus:9.6::highavailability

cpe:/a:redhat:rhel_eus:9.6::resilientstorage

cpe:/a:redhat:rhel_e4s:9.0::appstream

cpe:/a:redhat:rhel_e4s:9.0::highavailability

cpe:/a:redhat:rhel_e4s:9.0::resilientstorage

cpe:/a:redhat:rhel_e4s:9.2::appstream

cpe:/a:redhat:rhel_e4s:9.2::highavailability

cpe:/a:redhat:rhel_e4s:9.2::resilientstorage

cpe:/o:redhat:enterprise_linux:10.2

cpe:/o:redhat:enterprise_linux:7::server

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated