Skip to content
VulniPulse
Sign in
Highest advisory severityMedium 1 vendor · 2 advisories

CVE-2026-16456

CVE-2026-16456: 2 tracked advisory records across Red Hat. Compare vendor sources and published fix guidance.

Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.

NVD detail CVE.org

Vendor advisory comparison

Red Hat

2 advisories
  • Advisory severityMedium6.5

    Medium [CVE-2026-16456 +2] NIM credential Secret readable by any authenticated user

    CVE-2026-86332Source published Source updated

    This bulletin covers 3 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.

    NIM credential Secret readable by any authenticated user. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-862. Affected product named by the advisory: Red Hat OpenShift AI (RHOAI).

    Related products — impact not confirmed
    • Red Hat OpenShift AI (RHOAI)
    Source-reported affected versions
    Affected-version details not available in this record.
    Source-reported fixed versions
    No fixed-version detail extracted. This does not mean no fix exists.
    Mitigation guidance
    • Until a patched dashboard image is available, disable or remove the NVIDIA NIM integration so the NIM Account CR and associated Secrets are not present. Restrict OpenShift AI dashboard access to trusted administrators if NIM credentials must remain configured.
    Full advisory and evidenceOpen source bulletin
  • Advisory severityMedium6.5

    Medium [CVE-2026-16456] Cross-namespace secret read via NIM Account CRD confused deputy

    CVE-2026-16456Source published Source updated

    Cross-namespace secret read via NIM Account CRD confused deputy. Red Hat rates this important (CVSS 6.5). Weakness: CWE-441. Red Hat lists fixing advisory RHSA-2026:53262 with package rhoai/odh-model-controller-rhel9:1785187158, rhoai/odh-model-controller-rhel9:1784950479, rhoai/odh-model-controller-rhel9:1785189333. Affected products named by the advisory: Red Hat OpenShift AI 3.3; Red Hat OpenShift AI 2.25; Red Hat OpenShift AI 3.4.

    Related products — impact not confirmed
    • Red Hat OpenShift AI 3.3
    • Red Hat OpenShift AI 2.25
    • Red Hat OpenShift AI 3.4
    Source-reported affected versions
    Affected-version details not available in this record.
    Source-reported fixed versions
    • rhoai/odh-model-controller-rhel9:1785187158
    • rhoai/odh-model-controller-rhel9:1784950479
    • rhoai/odh-model-controller-rhel9:1785189333
    • RHSA-2026:53262
    Mitigation guidance
    No mitigation guidance extracted; consult the source.
    Full advisory and evidenceOpen source bulletin

Android app · Google Play

Monitor future Red Hat CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features