Red Hat Ansible Automation Platform 2.7 — Vulnerabilities & Security Advisories 5

All 5 CVE vulnerabilities found in Red Hat Ansible Automation Platform 2.7, with AI-generated Chinese analysis, references, and POCs.

Vendor: Red Hat

CVE ID	Title	CVSS	Severity	Published
CVE-2026-84721	Automation-controller: automation-controller: email notification backend allows ssrf via user-controlled smtp host/port (internal port-scan oracle, smtp password exfil) CWE-918	6.4	Medium	2026-09-23
CVE-2026-84713	Automation-controller: automation-controller: notification.recipients/subject/error lack prevent_search, allowing zero-privilege cross-tenant recovery of notification recipient secrets via filter oracle CWE-639	6.5	Medium	2026-09-23
CVE-2026-85475	Automation-controller: automation-controller-container: automation-controller: rsyslog configuration injection via log_aggregator_* settings leads to remote code execution in the control-plane rsyslog component CWE-96	7.2	High	2026-09-23
CVE-2026-71461	Automation-controller: automation-controller-container: automation-controller: verbose internal exception disclosure via hostlist bare-exception handler CWE-209	4.3	Medium	2026-09-23
CVE-2026-76648	Automation-controller: automation-controller-container: aap controller: copyapiview.post() missing read authorization check enables job template secret recovery CWE-862	8.5	High	2026-09-23

All 5 known CVE vulnerabilities affecting Red Hat Ansible Automation Platform 2.7 with full Chinese analysis, references, and POCs where available.