RHSA-2026:36319 - Red Hat RHACS 4.9.9 Security Update: 17 CVEs Fixed

RHSA-2026:36319 - Security Advisory Vulnerability Overview Security and bug fix update for RHACS 4.9.9. Affected Product Red Hat Advanced Cluster Security for Kubernetes Remediation If you are using an earlier version of RHACS, it is recommended to upgrade to the version mentioned in RHACS, and review the release notes for information on enhancements, bug fixes, and/or security patches. Fixes Included BOX-35227 - The Artifactory test function always returns True, even when authentication fails CVEs CVE-2026-12143 CVE-2026-25079 CVE-2026-25681 CVE-2026-32280 CVE-2026-32281 CVE-2026-33811 CVE-2026-38920 CVE-2026-38928 CVE-2026-38929 CVE-2026-38930 CVE-2026-38931 CVE-2026-38932 CVE-2026-38933 CVE-2026-42499 CVE-2026-48597 CVE-2026-53488 CVE-2026-9165 References https://access.redhat.com/security/updates/collection/ https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.9/html-single/release_notes/index#about-this-release-499_release-notes-49 amd64 registry.redhat.io/advanced-cluster-security/rhacs-central-db-the18@sha256:42c69a730012343eece85c56f9eb163311580df4682dc47ca35043df92c2dda registry.redhat.io/advanced-cluster-security/rhacs-collector-the18@sha256:7d8344d149a12f7340ba43d7dd208eb607a0f579b25efd1360bba3aafb2e5 registry.redhat.io/advanced-cluster-security/rhacs-main-the18@sha256:c11d807b70b00570982616f5afdf82d9a25ce124edebbb17d6247fa3970625 registry.redhat.io/advanced-cluster-security/rhacs-the18-operator@sha256:596c38c386d4bedd57242678610083d7d72e451e9d3f6e9cbdd01ff3ddc registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8598ba7ee1456ddfe514182dbd350d131e2c9e79a51ef1a44002891b1b3a0 registry.redhat.io/advanced-cluster-security/rhacs-roxctl-the18@sha256:d588153e4ac853ec12c250a78dc34aa463f5cad072d019d6e4be4e4388 registry.redhat.io/advanced-cluster-security/rhacs-scanner-the18@sha256:4055d3b7d21c787d411c67e80ee1185962be6f222469d45cc6fc45d37346 registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-the18@sha256:9822d40703ae9073ce1aa8b50a2cac297fec7641977a8a7b8c3afc3b4c89e69 registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-the18@sha256:68aa39c7c288e4ad2813b2ce30026c98c3e925cc1d43b9d3e3b5d5a6c5a6356 registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-the18@sha256:0d1143072de2c1b498dc6793d3e41b67f4ca3b4ad674d69e0c1880b500ae registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-the18@sha256:6d0ef3d8702521fd6c458911fa0880c5d18644738ff558c8fc89cb1563ec arm64 registry.redhat.io/advanced-cluster-security/rhacs-central-db-the18@sha256:d88367f3f9c3e785b7c7bd1d03e7c9dbdf8ac8d46fd7ff2d0ac03413c63e5e1 registry.redhat.io/advanced-cluster-security/rhacs-collector-the18@sha256:7d8344d149a12f7340ba43d7dd208eb607a0f579b25efd1360bba3aafb2e5 registry.redhat.io/advanced-cluster-security/rhacs-main-the18@sha256:4811d601e969948983b79ca21e1700210256a2657892a4b0de146c8fa19 registry.redhat.io/advanced-cluster-security/rhacs-the18-operator@sha256:52a01dc772b34380be60df86143abbddac487d38f9dc491248879c1ac3c registry.redhat.io/advanced-cluster-security/rhacs-roxctl-the18@sha256:a0d60dba57d06ba8d1da7e5527fac907ecfuba6ed1df0fa3e6645f831709 registry.redhat.io/advanced-cluster-security/rhacs-scanner-the18@sha256:b4872587d160b2d277165b794d84bea0477ade659a4739616d8813980d799d5 registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-the18@sha256:08f1184a02867e1b2891e173a46d4819c8985f644e7759fc138016f6d653cb1 registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-the18@sha256:597c40e9d4b4b648b39b090d7e95116b330505c0119c8064e4bab32966db2b4c28f registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-the18@sha256:6e94d9e9a0e8204d4e11e495e327c2e2d17988b16f12a17832d8909f62ea880 registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-the18@sha256:86594d32b3898721e1d2b798ec3344184388bed5b6166517b76b731aac2e59 registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-the18@sha256:4e2f3cae5062518675348b325cd1d990b854446f73311004cb122113e3595 ppc64le registry.redhat.io/advanced-cluster-security/rhacs-central-db-the18@sha256:6204d3577ee741fb12133f28b9499e807aa3ad5d432f3304c1a35fc1121898d registry.redhat.io/advanced-cluster-security/rhacs-collector-the18@sha256:13d23d3626a7c2863ec04db231bfc826914c03c47a88be0031d973ac03a8c31 registry.redhat.io/advanced-cluster-security/rhacs-main-the18@sha256:a7577885d03f92b460777f63a2e36995428efca08d1d170af50f6f35112f6614e registry.redhat.io/advanced-cluster-security/rhacs-the18-operator@sha256:934b313b47a61e8f7be1a8b17081c45e8ad816658f1114909e36710ae5c25595 registry.redhat.io/advanced-cluster-security/rhacs-roxctl-the18@sha256:433f349152fd3ddfe05e4899c360be2cf609c38c551ca806201328b5438 registry.redhat.io/advanced-cluster-security/rhacs-scanner-the18@sha256:796031101661758104b5e29d900d88b2c57797b7e1a0a0a758832565a8796 registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-the18@sha256:3d1ad8888063f55a79ac17e37a000255d76899e96425e90a710539389524 registry.redhat.io/advanced-cluster-s

Goal Reached Thanks to every supporter — we hit 100%!

RHSA-2026:36319 - Red Hat RHACS 4.9.9 Security Update: 17 CVEs Fixed