Is CVE-2026-12353 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-12353?

CVE-2026-12353 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-12353

Description

An unauthenticated attacker could trigger an Out of Memory condition to crash the Java process for RHCS by repeatedly sending HTTP requests to the TLS endpoint. Depending on how the RHCS server is configured, a manual intervention to restart it may prove necessary.