access.redhat.comvdb entry
https://access.redhat.com/security/cve/CVE-2026-19546 CVE-2026-19546
HIGH
Dbi: incomplete fix for cve-2026-14380 dbi: arbitrary code execution via caller-influenced profile attribute
Record summary
CVE-2026-19546 has a selected CVSS score of 8.8 (high).
Description
A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and Mitigation please reffer to the original https://access.redhat.com/security/cve/cve-2026-19546.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 12, 2026 · Source: CVE List
Affected products and versions
6| Product | Source | Version range | Status |
|---|---|---|---|
Default status: affected | CVE List | Version data not supplied | |
Default status: unaffected | CVE List | Version data not supplied | |
Default status: unaffected | CVE List | Version data not supplied | |
Default status: unaffected | CVE List | Version data not supplied | |
Default status: unaffected | CVE List | Version data not supplied | |
Default status: affected | CVE List | Version data not supplied | |
References
3RHBZ#2513963issue tracking
https://bugzilla.redhat.com/show_bug.cgi?id=2513963 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-19546