Update Infrastructure (Redhat) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2026-06-17. Vendor: Redhat.
CVEs of Update Infrastructure
- CVE-2026-42055 - CVSS 9.2 (critical), 2026-06-17: NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the…
- CVE-2026-48864 - CVSS 7.8 (high), 2026-05-26: A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to…
- CVE-2026-9256 - CVSS 9.2 (critical), 2026-05-22: NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex…
- CVE-2026-9149 - CVSS 6.5 (medium), 2026-05-21: A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted `.solv` file containing negative size…
- CVE-2026-9150 - CVSS 6.5 (medium), 2026-05-20: A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted…
- CVE-2023-50782 - CVSS 7.5 (high), 2024-02-05: A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key…
- CVE-2023-50781 - CVSS 7.5 (high), 2024-02-05: A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to…
- CVE-2022-3644 - CVSS 5.5 (medium), 2022-10-25: The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API ()…
- CVE-2013-4518 - CVSS 5.5 (medium), 2019-11-04: RHUI (Red Hat Update Infrastructure) 2.1.3 has world readable PKI entitlement certificates
