boxscore/security
CVE · referencelatest edition

Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2026-19582

Red Hat Migration Toolkit for Containers — Binutils: stack buffer overflow in gnu binutils in rsrc_print_name from an untrusted pe file
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  N    0.0   .0032   24.7     —
AFFECTED
  Product                           Versions     Fixed
  Migration Toolkit for Containers  unspecified  —
  Red Hat Enterprise Linux 10       unspecified  —
  Red Hat Enterprise Linux 10       unspecified  —
  Red Hat Enterprise Linux 10       unspecified  —
  Red Hat Enterprise Linux 10       unspecified  —
  Red Hat Enterprise Linux 10       unspecified  —
  Red Hat Enterprise Linux 6        unspecified  —
  Red Hat Enterprise Linux 7        unspecified  —
  Red Hat Enterprise Linux 7        unspecified  —
  Red Hat Enterprise Linux 8        unspecified  —
  + 16 more
TIMELINE
  Aug 11  Reserved by redhat
  Aug 20  Published (CNA: redhat)
  Aug 26  RESCORED — CVE-2026-19582 (Red Hat Migration Toolkit for Containers). CVSS 7.8 → 0 (NVD).
  Sep 3   REJECTED — CVE-2026-19582 (Red Hat Migration Toolkit for Containers). Record withdrawn by the CNA.
CWE-787 · CNA: redhat · CVSS v3.1 · 2 references · NVD status: Rejected

Description

Red Hat Product Security has come to the conclusion that this CVE is false due to upstream security policy.

Lifecycle

Complete event history — 4 events, chronological
DateEventDetail
August 11, 2026ReservedReserved by redhat
August 20, 2026PublishedPublished (CNA: redhat)
August 26, 2026RESCOREDRESCORED — CVE-2026-19582 (Red Hat Migration Toolkit for Containers). CVSS 7.8 → 0 (NVD).
September 3, 2026REJECTEDREJECTED — CVE-2026-19582 (Red Hat Migration Toolkit for Containers). Record withdrawn by the CNA.

Affected

Affected products and packages — 26 rows
VendorProduct / PackageEcosystemVersion introducedFixed
Red HatMigration Toolkit for Containers———
Red HatRed Hat Enterprise Linux 10———
Red HatRed Hat Enterprise Linux 10———
Red HatRed Hat Enterprise Linux 10———
Red HatRed Hat Enterprise Linux 10———
Red HatRed Hat Enterprise Linux 10———
Red HatRed Hat Enterprise Linux 6———
Red HatRed Hat Enterprise Linux 7———
Red HatRed Hat Enterprise Linux 7———
Red HatRed Hat Enterprise Linux 8———
Red HatRed Hat Enterprise Linux 8———
Red HatRed Hat Enterprise Linux 8———
Red HatRed Hat Enterprise Linux 8———
Red HatRed Hat Enterprise Linux 8———
Red HatRed Hat Enterprise Linux 8———
Red HatRed Hat Enterprise Linux 8———
Red HatRed Hat Enterprise Linux 8———
Red HatRed Hat Enterprise Linux 9———
Red HatRed Hat Enterprise Linux 9———
Red HatRed Hat Enterprise Linux 9———
Red HatRed Hat Enterprise Linux 9———
Red HatRed Hat Enterprise Linux 9———
Red HatRed Hat Enterprise Linux 9———
Red HatRed Hat Hardened Images———
Red HatRed Hat Hardened Images———
Red HatRed Hat OpenShift Container Platform 4———

Weaknesses

CWE-787

References (2)

Related

Authoritative record: CVE-2026-19582 at cve.org

Vendors: red hat

Weaknesses: CWE-787

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-19582 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Sunday, October 4, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.