false positiv on CVE-2026-14380 RedHat 9

[No Data]

CVE-2026-14380 on Red Hat Enterprise Linux 9 is a false positive. The CVE may be marked as both affected and fixed in the CTI, which can lead to an incorrect detection.

https://cti.wazuh.com/vulnerabilities/cves/CVE-2026-14380?affected%5Bvendor%5D=Red+Hat

https://access.redhat.com/errata/RHSA-2026:49612

rpm -q perl-DBI --qf '%{NAME}-%{EPOCHNUM}:%{VERSION}-%{RELEASE}.%{ARCH}\nModule: %{MODULARITYLABEL}\n'

perl-DBI-0:1.643-9.el9_8.5.x86_64

Module: (none)

There are also a few false positives among the CVEs that follow this one.

One question: wouldn’t it make sense to have a link somewhere on the CTI page for each CVE where we can report false positives? Having to do it here every time is a bit cumbersome, isn’t it? I have two or three more that I’ll collect and send over.

with Best regards

[antonio...@wazuh.com]

Hi,

Thank you for bringing this to our attention. The false positive has already been reported. Regarding adding a link to the CTI page, I'll check with the team to see if that's possible.