CVE-2026-66909
ovirt-engine-wildfly: ovirt-engine-wildfly [24.0.1-4] - Update all bundled CXF release artifacts to 3.6.13 ovirt-engine-wildfly-overlay [2...
CVE-2026-66909 is fixed in 2 products on 1 platform, first by ELSA-2026-500570, released November 7, 2026. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
8.1
IMPORTANT
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0115
66th percentile
ovirt-engine-wildfly [24.0.1-4] - Update all bundled CXF release artifacts to 3.6.13 ovirt-engine-wildfly-overlay [24.0.1-4] - Require WildFly 24.0.1-4 with the CXF 3.6.13 update
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| ovirt-engine-wildfly · ol 8 | 0:24.0.1-4.el8 | ELSA-2026-500570 | Nov 7, 2026 |
| ovirt-engine-wildfly · ol 9 | 0:24.0.1-4.el9 | ELSA-2026-500571 | Nov 7, 2026 |
| ovirt-engine-wildfly-overlay · ol 8 | 0:24.0.1-4.el8 | ELSA-2026-500570 | Nov 7, 2026 |
| ovirt-engine-wildfly-overlay · ol 9 | 0:24.0.1-4.el9 | ELSA-2026-500571 | Nov 7, 2026 |