جزئیات آسیبپذیری
CVE-2026-33186
gRPC-Go has an authorization bypass via missing leading slash in :path
شرح رسمی (انگلیسی)
gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g., `Service/Method` instead of `/Service/Method`). While the server successfully routed these requests to the correct handler, authorization interceptors (including the official `grpc/authz` package) evaluated the raw, non-canonical path string. Consequently, "deny" rules defined using canonical paths (starting with `/`) failed to match the incoming request, allowing it to bypass the policy if a fallback "allow" rule was present. This affects gRPC-Go servers that use path-based authorization interceptors, such as the official RBAC implementation in `google.golang.org/grpc/authz` or custom interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`; AND that have a security policy contains specific "deny" rules for canonical paths but allows other requests by default (a fallback "allow" rule). The vulnerability is exploitable by an attacker who can send raw HTTP/2 frames with malformed `:path` headers directly to the gRPC server. The fix in version 1.79.3 ensures that any request with a `:path` that does not start with a leading slash is immediately rejected with a `codes.Unimplemented` error, preventing it from reaching authorization interceptors or handlers with a non-canonical path string. While upgrading is the most secure and recommended path, users can mitigate the vulnerability using one of the following methods: Use a validating interceptor (recommended mitigation); infrastructure-level normalization; and/or policy hardening.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 9.1بحرانی | 3.1 | CVEProject cvelistV5 (CNA) (GitHub_M) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
| 9.1بحرانی | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
محصولات آسیبپذیر
۲۰۰ از ۳۷۱| فروشنده | محصول | نسخهها | منبع |
|---|---|---|---|
| Red Hat | Assisted Installer for Red Hat OpenShift Container Platform 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Cryostat 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Deployment Validation Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Dynamic Accelerator Slicer Operator for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Dynamic Accelerator Slicer Operator for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Dynamic Accelerator Slicer Operator for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Dynamic Accelerator Slicer Operator for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Dynamic Accelerator Slicer Operator for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | ExternalDNS Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | File Integrity Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | File Integrity Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | File Integrity Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | File Integrity Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | File Integrity Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | File Integrity Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Gatekeeper 3 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Job Set Tech Preview | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Job Set Tech Preview | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Job Set Tech Preview | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Kernel Module Management Operator for Red Hat Openshift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Kernel Module Management Operator for Red Hat Openshift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Kernel Module Management Operator for Red Hat Openshift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Kernel Module Management Operator for Red Hat Openshift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Kernel Module Management Operator for Red Hat Openshift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Kernel Module Management Operator for Red Hat Openshift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Kernel Module Management Operator for Red Hat Openshift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Kernel Module Management Operator for Red Hat Openshift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Kube Descheduler Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Kube Descheduler Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Leader Worker Set | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Leader Worker Set | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Leader Worker Set | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logging Subsystem for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logging Subsystem for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logging Subsystem for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logging Subsystem for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logging Subsystem for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logging Subsystem for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logging Subsystem for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logging Subsystem for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logging Subsystem for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logging Subsystem for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logging Subsystem for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logging Subsystem for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logical Volume Manager Storage | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logical Volume Manager Storage | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logical Volume Manager Storage | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Migration Toolkit for Containers | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Migration Toolkit for Containers | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Migration Toolkit for Containers | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Migration Toolkit for Virtualization | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Migration Toolkit for Virtualization | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Migration Toolkit for Virtualization | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Migration Toolkit for Virtualization | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Migration Toolkit for Virtualization | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Migration Toolkit for Virtualization | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Migration Toolkit for Virtualization | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Migration Toolkit for Virtualization | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Migration Toolkit for Virtualization | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Migration Toolkit for Virtualization | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Migration Toolkit for Virtualization | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Migration Toolkit for Virtualization | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Migration Toolkit for Virtualization | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Migration Toolkit for Virtualization | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Migration Toolkit for Virtualization | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Migration Toolkit for Virtualization | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Global Hub | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Developer Tools and Services | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Developer Tools and Services | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Developer Tools and Services | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Developer Tools and Services | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Developer Tools and Services | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Lightspeed | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Run Once Duration Override Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Run Once Duration Override Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Run Once Duration Override Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Secondary Scheduler Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Service Mesh 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat AI Inference Server | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat AI Inference Server | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat AI Inference Server | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat AI Inference Server | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | همه | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۲۳۳- https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3 x_refsource_CONFIRM
- https://access.redhat.com/security/cve/CVE-2026-33186 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2449833 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33186.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:41019 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54191 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54757 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:43225 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:29079 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34097 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26997 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27076 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17789 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36796 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:28047 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:20436 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:18068 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:20322 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26999 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42150 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42151 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42240 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19719 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27856 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22937 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19135 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22450 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:48790 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10107 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:61245 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56959 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19721 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19720 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27712 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10705 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10706 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:23228 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19353 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22714 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19207 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10155 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54531 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8433 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9872 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34364 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:47952 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:50843 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22423 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22347 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:23345 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6428 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:51033 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:29854 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26568 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:43692 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22645 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36882 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25127 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13548 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8151 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:11408 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:11803 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:7110 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:11070 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:7128 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13791 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13829 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:53804 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27893 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:53773 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27901 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27957 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:53763 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27892 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:53728 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60146 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6174 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6802 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36651 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40945 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40118 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22485 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41928 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24977 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10698 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42644 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37275 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19712 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10158 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:59833 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40030 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21696 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34049 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21697 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:12283 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40022 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21691 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21692 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56789 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:43253 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:28893 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36611 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25009 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:15092 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56912 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:43227 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:23234 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:28964 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:23235 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:14775 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:43331 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25045 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:50758 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:29082 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36621 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56854 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:20088 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:20089 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10105 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34099 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:47728 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17598 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34100 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17599 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21657 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:44233 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25182 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21658 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27001 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:48699 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17448 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25183 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:12119 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:12118 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8449 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37192 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:23246 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:44235 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:20041 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:20042 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27004 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37580 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:23247 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25201 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10093 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10094 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21703 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27063 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17468 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40795 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24535 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21704 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25195 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25194 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6564 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24759 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17474 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21709 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40792 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24506 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:20034 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:20035 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25187 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:7245 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:23241 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17475 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21710 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34769 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22800 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37585 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34794 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57365 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34795 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10175 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:20946 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:20943 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26519 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24484 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21932 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21931 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8483 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9440 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8484 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9448 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8490 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9453 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8491 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8493 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54286 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54274 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9388 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9385 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26416 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56431 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26420 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41941 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26413 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41944 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56366 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:12279 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26412 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:12277 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57013 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40984 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:11916 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:11856 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21017 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24853 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22465 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:11996 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10131 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10125 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10130 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10126 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10172 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10153 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8338 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22959 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42051 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22961 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42049 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21769 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:12337 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19108 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24536 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19099 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:12116 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17459 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17123 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22689 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:18585 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19109 vendor-advisoryx_refsource_REDHAT
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۱/۰۱
- آخرین بهروزرسانی
- ۱۴۰۵/۰۶/۲۷
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- GitHub_M
پیشبینی بهرهبرداری (EPSS)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهرهبرداری
- ندارد
- اثر فنی
- جزئی
ضعفها (CWE)
- CWE-285Improper Authorization
- CWE-551Incorrect Behavior Order: Authorization Before Parsing and Canonicalization