Critical Security Vulnerability in pcs, cockpit-ha-cluster, and pcs-snmp Packages
Summary
RHSA-2026:10713: Red Hat Security Advisory: pcs security update. Affects cockpit-ha-cluster versions < 0:0.12.1-1.el10_1.3. Fixed in 0:0.12.1-1.el10_1.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The pcs (Pacemaker/Corosync Configuration System) package is essential for managing high-availability clusters in Red Hat Enterprise Linux. It provides a command-line interface and graphical tools for configuring and managing cluster resources. The cockpit-ha-cluster package enhances the management of high-availability clusters through the Cockpit web interface, while pcs-snmp extends monitoring capabilities via SNMP. These packages are integral for ensuring uptime and reliability in enterprise environments.
Vulnerability Detail
The vulnerability identified as CVE-2026-4800 affects the pcs, cockpit-ha-cluster, and pcs-snmp packages. This issue arises from insufficient validation of user inputs, which could allow an attacker to execute arbitrary code or escalate privileges within the system. The ramifications of this vulnerability are severe, as it could lead to unauthorized access to sensitive data or disruption of services. The CVSS score of this vulnerability is 8.1, indicating a high level of risk.
How To Fix
Minimum fixed version
0:0.12.1-1.el10_1.3
This is the first release that contains the fix.
sudo dnf update cockpit-ha-clusterTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you can restrict access to the affected services until the packages are updated. This can be done by modifying firewall rules or disabling the services until the patch is applied.
Conclusion
In summary, the CVE-2026-4800 vulnerability poses a significant risk to users of the pcs, cockpit-ha-cluster, and pcs-snmp packages. It is crucial to update to the latest patched versions to mitigate potential threats. Users should also consider using tools like Vulert to monitor for vulnerabilities in their applications.
See every vulnerability recorded for cockpit-ha-cluster →
FAQ
CVE-2026-4800 is a security vulnerability affecting the pcs, cockpit-ha-cluster, and pcs-snmp packages, allowing potential unauthorized access and privilege escalation.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score of this vulnerability is 8.1, indicating a high severity level.
If immediate updates are not possible, consider restricting access to the affected services as a temporary workaround.
More information can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2026:10713.json.
Related vulnerabilities
Recent vulnerabilities recorded for cockpit-ha-cluster.
