RHEL 9 : gimp (RHSA-2026:16484) | Tenable®

Back Tenable

RHEL 9 : gimp (RHSA-2026:16484) | Tenable®

Tenable • May 13, 2026

Share: View original

CPE : p-cpe:/a:redhat:enterprise_linux:gimp , p-cpe:/a:redhat:enterprise_linux:gimp-libs , cpe:/o:redhat:enterprise_linux:9

Required KB Items : Host/local_checks_enabled , Host/RedHat/release , Host/RedHat/rpm-list , Host/cpu

Exploit Available : true

Exploit Ease : Exploits are available

Patch Publication Date : 5/12/2026

Vulnerability Publication Date : 3/26/2026

CVE : CVE-2026-4150 , CVE-2026-4151 , CVE-2026-4152 , CVE-2026-4153 , CVE-2026-4154 , CVE-2026-4887

CWE : 120 , 131 , 190 , 193

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Discovered in GIMP for Rocky Linux and RHEL 9 A series of vulnerabilities affecting GIMP in Rocky Linux 9 and RHEL 9 have been identified, with multiple CVEs published on March 26, 2026. The vulnerabilities include CVE-2026-4150, CVE-2026-4151, CVE-2026-4152, CVE-2026-4153, CVE-2026-4154, and CVE-2026-4887, all of which have available exploits. The vulnerabilities are categorized under various Common Weakness Enumerations (CWEs), including buffer errors and improper validation. The patch for Rocky Linux was published on May 14, 2026, while RHEL's patch was released on May 12, 2026. Administrators are advised to apply these patches promptly to mitigate potential exploitation. The vulnerabilities affect both distributions' GIMP packages, posing a risk to users and organizations relying on these systems. The current status indicates that exploits are available, heightening the urgency for remediation. 2 sources 71

Extracted Entities

CVEs (6)

CVE-2026-4150 CVE-2026-4151 CVE-2026-4152 CVE-2026-4153 CVE-2026-4154 CVE-2026-4887

CWE Weaknesses (4)

CWE-120 - Classic Buffer Overflow Cwe-131 - Incorrect Calculation Of Buffer Size Cwe-190 - Integer Overflow Or Wraparound Cwe-193 - Off-by-one Error