CVE-2026-12353CWE-772
Rhcs: memory leak during https connection leads to denial of service
Medium · published July 23, 2026
What it is
An unauthenticated attacker could trigger an Out of Memory condition to crash the Java process for RHCS by repeatedly sending HTTP requests to the TLS endpoint. Depending on how the RHCS server is configured, a manual intervention to restart it may prove necessary.
The record
Technical detail
- CVSS v3.1
- 5.3 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00437 · 36.9th percentile
- Weakness
- CWE-772 · Missing Release of Resource after Effective Lifetime
- Published
- 2026-07-23T19:10Z
EPSS history
Timeline