RH
Product
Red Hat Ansible Automation Platform 2.6
On CISA KEVExploited in the wild
104
CVEs
1
On KEV
9.9
Max CVSS
1
New 30D
Severity mix
Critical 18High 54Medium 28Low 4
Watch
Add Red Hat Ansible Automation Platform 2.6 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-34993 | 7.3 | Jun 2 | AIOHTTP Vulnerable to Deserialization of Untrusted Data Affected: All versions, or not specified |
| CVE-2026-71364 | 7.2 | Aug 24 | Awx: project archive extraction allows path traversal file writes Affected: All versions, or not specified |
| CVE-2026-84714 | 7.1 | Sep 23 | Automation-controller: automation-controller: incomplete sanitize_jinja() regex allows jinja template injection into ad-hoc module_args, machine-credential fields, and host names, reaching ansible-core templating in the execution environment Affected: All versions, or not specified |
| CVE-2026-25536 | 7.1 | Feb 4 | @modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse Affected: All versions, or not specified |