Critical Actively exploited

CVE-2015-5287

Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

What this means

Likelihood: Exploitation is not hypothetical: CISA has observed it in the wild.

What to doTop priority: CISA sets the remediation deadline at 9 September 2026.

Read automatically from the CVSS vector, the weakness type (CWE) and the EPSS score. The technical description above remains the one published by NIST.

Published: 26 August 2026
CVSS: —
EPSS: 4.96% probability of exploitation within 30 days · above 92% of all CVEs
CISA due date: 9 September 2026
Sources: cisa-kev

References

https://nvd.nist.gov/vuln/detail/CVE-2015-5287