Critical Security Vulnerability in pcs, cockpit-ha-cluster, and pcs-snmp Packages
Summary
RHSA-2026:11470: Red Hat Security Advisory: pcs security update. Affects cockpit-ha-cluster versions < 0:0.12.0-3.el10_0.5. Fixed in 0:0.12.0-3.el10_0.5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The pcs (Pacemaker/Corosync Configuration System) package is a critical tool for managing high-availability clusters in Red Hat Enterprise Linux environments. It provides a command-line interface for configuring and managing cluster resources, ensuring that applications remain available even in the event of hardware or software failures. The cockpit-ha-cluster package enhances this functionality by integrating pcs with the Cockpit web interface, allowing for easier management of clusters. The pcs-snmp package adds SNMP support for monitoring cluster status. These packages are essential for maintaining uptime and reliability in enterprise systems.
Vulnerability Detail
A security vulnerability identified as CVE-2026-4800 affects the pcs, cockpit-ha-cluster, and pcs-snmp packages. This vulnerability arises from improper handling of certain inputs, which could allow an attacker to execute arbitrary code or cause a denial of service. The potential ramifications include unauthorized access to sensitive data, disruption of services, and compromise of system integrity. The CVSS score for this vulnerability is 8.1, indicating a high severity level that necessitates immediate attention.
How To Fix
Minimum fixed version
0:0.12.0-3.el10_0.5
This is the first release that contains the fix.
sudo dnf update cockpit-ha-clusterTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate patching is not possible, consider implementing network-level security measures such as firewalls to restrict access to the affected services until the update can be applied. Additionally, monitor system logs for any suspicious activity related to the affected packages.
Conclusion
The pcs, cockpit-ha-cluster, and pcs-snmp packages have a critical vulnerability (CVE-2026-4800) that could lead to severe security risks. It is crucial to update these packages to the fixed version 0:0.12.0-3.el10_0.5 as soon as possible to mitigate potential threats. Users should also consider using Vulert for real-time monitoring of open-source vulnerabilities.
See every vulnerability recorded for cockpit-ha-cluster →
FAQ
CVE-2026-4800 is a security vulnerability affecting the pcs, cockpit-ha-cluster, and pcs-snmp packages that could allow an attacker to execute arbitrary code.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring signup.
Implement network-level security measures to restrict access to the affected services and monitor system logs for any suspicious activity.
The CVSS score for this vulnerability is 8.1, indicating a high severity level that requires immediate attention.
More information can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2026:11470.json.
Related vulnerabilities
Recent vulnerabilities recorded for cockpit-ha-cluster.
