Red Hat Ansible Automation Platform 2.6 for RHEL 9 — Vulnerabilities & Security Advisories 5

All 5 CVE vulnerabilities found in Red Hat Ansible Automation Platform 2.6 for RHEL 9, with AI-generated Chinese analysis, references, and POCs.

Vendor: Red Hat

CVE ID	Title	CVSS	Severity	Published
CVE-2026-90959	Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theft CWE-22	8.1	High	2026-09-24
CVE-2026-94416	Aap-gateway: aap-gateway: authorization bypass via workload identity token forgery CWE-290	6.8	Medium	2026-09-24
CVE-2026-84486	Automation-controller: automation-controller-container: automation-controller: unauthenticated debug scheduler-trigger endpoints (allowany, routed without debug guard) allow advisory-lock starvation of job dispatch (dos) CWE-489	8.2	High	2026-09-23
CVE-2026-42784	Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion CWE-347	7.4	High	2026-09-16
CVE-2026-18141	Aap-gateway: aap-gateway: authentication bypass in event-driven ansible via forged http header CWE-295	8.2	High	2026-07-31

All 5 known CVE vulnerabilities affecting Red Hat Ansible Automation Platform 2.6 for RHEL 9 with full Chinese analysis, references, and POCs where available.