Openshift Virtualization (Redhat) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2026-06-26. Vendor: Redhat.
CVEs of Openshift Virtualization
- CVE-2026-13434 - CVSS 4.9 (medium), 2026-06-26: A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied…
- CVE-2026-13322 - CVSS 3.8 (low), 2026-06-26: A flaw was found in KubeVirt's downward metrics virtio-serial server. The server reads guest requests using textproto.Reader.ReadLine(), which buffers input…
- CVE-2026-13318 - CVSS 6.4 (medium), 2026-06-25: A server-side request forgery (SSRF) flaw was found in KubeVirt's virt-api port-forward handler. When processing a port-forward request to a…
- CVE-2026-13218 - CVSS 4.2 (medium), 2026-06-25: A flaw was found in KubeVirt's virt-handler network cache handling. The WriteToCachedFile function writes data to a launcher-rooted path using os.WriteFile…
- CVE-2026-13208 - CVSS 6.5 (medium), 2026-06-24: A flaw was found in KubeVirt's virt-handler domain notify server. The gRPC handlers for HandleDomainEvent and HandleK8SEvent derive the VMI identity…
- CVE-2026-13201 - CVSS 7.3 (high), 2026-06-24: A flaw was found in KubeVirt's safepath package used by virt-handler. The OpenAtNoFollow function uses O_PATH|O_NOFOLLOW to obtain a file descriptor to a path…
- CVE-2026-44495 - CVSS 7.7 (high), 2026-06-11: Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in…
- CVE-2023-48795 - CVSS 5.9 (medium), 2023-12-18: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks…
- CVE-2023-44487 - CVSS 7.5 (high), 2023-10-10: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the…
- CVE-2020-1742 - CVSS 7 (high), 2021-06-07: An insecure modification vulnerability flaw was found in containers using nmstate/kubernetes-nmstate-handler. An attacker with access to the container could…
- CVE-2020-14316 - CVSS 9.9 (critical), 2020-07-29: A flaw was found in kubevirt 0.29 and earlier. Virtual Machine Instances (VMIs) can be used to gain access to the host's filesystem. Successful exploitation…
