CVE record · CVE-2026-16730

Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setup

CVSS 5.5 MediumEPSS 0.0015 · 4th percentile

Published by the CVE Program (CNA: redhat) at 24 Jul 2026, 11:26 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Red Hat	Red Hat Enterprise Linux 10 Package name: dbus-broker https://access.redhat.com/downloads/content/package-browser/	unaffected 0:36-5.el10_2 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 9 Package name: dbus-broker https://access.redhat.com/downloads/content/package-browser/	unaffected 0:28-9.el9_8 to before * rpm Other versions: affected
Red Hat	Red Hat Update Infrastructure 5 Package name: rhui5/cds-kubernetes-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1788880445 to before * rpm Other versions: affected
Red Hat	Red Hat Update Infrastructure 5 Package name: rhui5/cds-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1788880464 to before * rpm Other versions: affected
Red Hat	Red Hat Update Infrastructure 5 Package name: rhui5/haproxy-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1788880456 to before * rpm Other versions: affected
Red Hat	Red Hat Update Infrastructure 5 Package name: rhui5/installer-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1788765051 to before * rpm Other versions: affected
Red Hat	Red Hat Update Infrastructure 5 Package name: rhui5/rhua-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1788880581 to before * rpm Other versions: affected
Red Hat	Red Hat Hardened Images Package name: dbus-broker https://access.redhat.com/downloads/content/package-browser/	No versions given Other versions: affected
Red Hat	Red Hat OpenShift Container Platform 4 Package name: openshift/ose-rhel-coreos-9 https://access.redhat.com/downloads/content/package-browser/	No versions given Other versions: affected
Red Hat	Red Hat OpenShift Container Platform 5 Package name: openshift/ose-rhel-coreos-9 https://access.redhat.com/downloads/content/package-browser/	No versions given Other versions: affected

Identifiers: CVE-2026-16730
CNA: redhat
Weakness (CWE): CWE-755
Tags: Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 9
Red Hat Update Infrastructure 5
Red Hat Hardened Images
Red Hat OpenShift Container Platform 4
Red Hat OpenShift Container Platform 5
CWE-755
Published: 24 Jul 2026
Updated: 5 Nov 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
5.5	Medium	3.1	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CNA (redhat)

CISA KEV Not listed.
EPSS 0.0015, the 4th percentile, on 6 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

24 Jul 2026, 11:26 UTC Confirmed by the CVE List
24 Jul 2026, 12:16 UTC Confirmed by NVD

Sources

References from the CNA

access.redhat.com/errata/RHSA-2026:61340 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:61355 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:66018 vendor-advisoryredhat
access.redhat.com/security/cve/CVE-2026-16730 vdb-entryredhat
bugzilla.redhat.com/show_bug.cgi?id=2506348 issue-trackingredhat
github.com/bus1/dbus-broker/issues/435

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.