CVE-2026-54231

A content injection vulnerability was found in the ABRT post-create event handler scripts in libreport. The event script queries the systemd journal for log entries matching the crashed process and writes the results to files in the dump directory without sanitizing embedded control characters. A local user can inject arbitrary content into the journal output by embedding newline characters in syslog messages, controlling the content that root writes to dump directory files.

• CWE-74

• https://access.redhat.com/errata/RHSA-2026:54272
• https://access.redhat.com/security/cve/CVE-2026-54231Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2488571Issue Tracking, Vendor Advisory

Published

Jun 13, 2026

Last Modified

Aug 12, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-54225Apache CXF allows to control the maximum attachment size via…7.5
• CVE-2026-54226A vulnerability in Apache Kvrocks. This issue affects Apach…6.4
• CVE-2026-54228A time-of-check time-of-use (TOCTOU) race condition was foun…7.8
• CVE-2026-54229A race condition was found in the abrt-dbus D-Bus service's …7
• CVE-2026-5423@neo4j/graphql library versions prior to 7.5.6 fail to verif…8.2
• CVE-2026-54230A symlink following vulnerability was found in the ABRT post…7.8
• CVE-2026-54232vLLM is an inference and serving engine for large language m…8.8
• CVE-2026-54233vLLM is an inference and serving engine for large language m…6.5
• CVE-2026-54234vLLM is a high-throughput and memory-efficient inference and…7.5
• CVE-2026-54235vLLM is an inference and serving engine for large language m…6.5
• CVE-2026-54236vLLM is an inference and serving engine for large language m…5.3
• CVE-2026-54242Statamic is a Laravel and Git powered content management sys…4.9