Linux · Security advisory · August 26, 2026

RHSA-2026:59137: Security update for 2 packages

RHSA-2026:59137, released August 26, 2026, fixes 2 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0113
66th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 1 Routine 1

Fixed package versions

ProductReleaseFixed in
automation-controller-cliRHEL 104.8.6-1.el10ap
python-djangoRHEL 105.2.17-1.el10ap

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-15307 python-django: An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8 8.8 0.0113 None reported
Routine CVE-2026-52902 automation-controller-cli: A path traversal vulnerability was found in awxkit, the CLI tool for AWX 4.7 0.0013 None reported
Showing 1 to 2 of 2 1