Redhat - vulnerabilities (CVEs)

8277 CVEs in 727 products, 219 in the last 30 days, newest from 2026-10-28.

Products

Enterprise Linux - 3400 CVEs
Enterprise Linux Desktop - 1928 CVEs
Enterprise Linux Server - 1891 CVEs
Enterprise Linux Workstation - 1845 CVEs
Enterprise Linux Eus - 1233 CVEs
Enterprise Linux Server Aus - 1061 CVEs
Openshift - 780 CVEs
Enterprise Linux Server Tus - 769 CVEs
Rhel Eus - 669 CVEs
Enterprise Linux Server Eus - 622 CVEs
Rhel E4s - 555 CVEs
Jboss Enterprise Application Platform - 442 CVEs
Rhel Tus - 416 CVEs
Satellite - 414 CVEs
Rhel Aus - 392 CVEs
Openshift Ai - 369 CVEs
Rhel Els - 363 CVEs
Hummingbird - 359 CVEs
Openstack - 341 CVEs
Openshift Container Platform - 340 CVEs
Rhel Eus Long Life - 329 CVEs
Build Keycloak - 275 CVEs
Red Hat Single Sign On - 263 CVEs
Jbosseapxp - 260 CVEs
Jboss Fuse - 258 CVEs
Ansible Automation Platform - 252 CVEs
Linux - 229 CVEs
Jboss Data Grid - 224 CVEs
Openshift Devspaces - 163 CVEs
Acm - 160 CVEs
Quay - 160 CVEs
Enterprise Linux Ai - 155 CVEs
Enterprise Linux Hpc Node - 146 CVEs
Software Collections - 137 CVEs
Rhdh - 128 CVEs
Discovery - 125 CVEs
Virtualization - 123 CVEs
Cryostat - 122 CVEs
Enterprise Linux For Ibm Z Systems - 117 CVEs
Ai Inference Server - 114 CVEs
Build Of Keycloak - 111 CVEs
Enterprise Linux For Power Little Endian - 111 CVEs
Single Sign-on - 111 CVEs
Jboss Enterprise Bpms Platform - 108 CVEs
Rhui - 104 CVEs
Multicluster Engine - 100 CVEs
Amq Broker - 98 CVEs
Ceph Storage - 98 CVEs
Enterprise Linux For Power Little Endian Eus - 98 CVEs
Keycloak - 98 CVEs
Apache Camel Hawtio - 96 CVEs
Openshift Pipelines - 95 CVEs
Trusted Artifact Signer - 95 CVEs
Container Native Virtualization - 94 CVEs
Advanced Cluster Security - 93 CVEs
Quarkus - 93 CVEs
Enterprise Linux For Ibm Z Systems Eus - 92 CVEs
Amq Streams - 91 CVEs
Logging - 91 CVEs
Service Mesh - 87 CVEs
Enterprise Linux Workstation Supplementary - 86 CVEs
Openshift Data Foundation - 85 CVEs
Enterprise Linux Desktop Supplementary - 84 CVEs
Enterprise Linux Server Supplementary - 84 CVEs
Virtualization Host - 84 CVEs
Camel Quarkus - 83 CVEs
Camel Spring Boot - 83 CVEs
Enterprise Linux Server Supplementary Eus - 83 CVEs
Enterprise Linux Hpc Node Eus - 81 CVEs
Ansible Portal - 78 CVEs
Apicurio Registry - 77 CVEs
Fedora Core - 77 CVEs
Serverless - 77 CVEs
Openshift Lightspeed - 76 CVEs
Libvirt - 73 CVEs
Cert Manager - 72 CVEs
Directory Server - 72 CVEs
Enterprise Mrg - 72 CVEs
Enterprise Linux For Scientific Computing - 71 CVEs
Migration Toolkit Applications - 70 CVEs
Openshift Gitops - 68 CVEs
Ansible Tower - 65 CVEs
Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions - 65 CVEs
Linux Advanced Workstation - 65 CVEs
Red Hat 3scale Amp - 65 CVEs
Satellite Capsule - 64 CVEs
Ansible Automation Platform Developer - 60 CVEs
Service Registry - 60 CVEs
Podman Desktop - 59 CVEs
Apache Camel Spring Boot - 57 CVEs
Jboss Core Services - 57 CVEs
Ansible Automation Platform Inside - 56 CVEs
Debezium - 56 CVEs
Rhmt - 56 CVEs
Multicluster Globalhub - 54 CVEs
Jboss Enterprise Web Server - 52 CVEs
Network Observ Optr - 52 CVEs
Enterprise Linux Aus - 50 CVEs
Hardened Images - 50 CVEs
Openshift Distributed Tracing - 50 CVEs
Cloudforms - 48 CVEs
Rhosemc - 47 CVEs
Codeready Linux Builder - 46 CVEs
Enterprise Linux For Arm 64 - 46 CVEs
Ansible - 45 CVEs
Confidential Compute Attestation - 45 CVEs
Enterprise Linux For Power Big Endian - 45 CVEs
Enterprise Linux For Real Time - 44 CVEs
Insights Proxy - 44 CVEs
Linux Desktop - 44 CVEs
Linux Server - 44 CVEs
Linux Workstation - 44 CVEs
Cloudforms Management Engine - 42 CVEs
Satellite Utils - 42 CVEs
Apache Camel Quarkus - 41 CVEs
Cluster Observability Operator - 41 CVEs
Enterprise Linux Server Update Services For Sap Solutions - 41 CVEs
Gatekeeper - 41 CVEs
Storage - 41 CVEs
Edge Manager - 40 CVEs
Jboss Enterprise Application Platform Els - 40 CVEs
Ocp Tools - 40 CVEs
Openshift Application Runtimes - 40 CVEs
Openstack Platform - 39 CVEs
Undertow - 39 CVEs
Enterprise Linux For Real Time For Nfv - 38 CVEs
Enterprise Linux For Arm 64 Eus - 37 CVEs
Trusted Profile Analyzer - 37 CVEs
Connectivity Link - 36 CVEs
Amq Clients - 35 CVEs
Enterprise Virtualization - 35 CVEs
Jboss Enterprise Brms Platform - 35 CVEs
Rhev Hypervisor - 34 CVEs
Advanced Virtualization - 33 CVEs
Certificate System - 33 CVEs
Optaplanner - 33 CVEs
Enterprise Linux Update Services For Sap Solutions - 32 CVEs
Migration Toolkit Virtualization - 30 CVEs
Fuse - 29 CVEs
Workload Availability Nhc - 29 CVEs
Assisted Installer - 27 CVEs
Exploit Intelligence - 27 CVEs
Openshift Api Data Protection - 27 CVEs
Satellite Maintenance - 27 CVEs
Enterprise Linux Tus - 26 CVEs
External Secrets Operator - 26 CVEs
389 Directory Server - 25 CVEs
Ansible Engine - 25 CVEs
Data Grid - 25 CVEs
Gluster Storage - 25 CVEs
Integration - 25 CVEs
Jboss Operations Network - 25 CVEs
Openshift Builds - 25 CVEs
Windows Machine Config - 25 CVEs
Zero Trust Workload Identity Manager - 25 CVEs
Codeready Linux Builder Eus - 23 CVEs
Jboss Enterprise Application Platform Expansion Pack - 23 CVEs
Mirror Registry - 23 CVEs
Openshift Container Platform For Power - 23 CVEs
Openshift Service Mesh - 23 CVEs
Process Automation - 23 CVEs
Devworkspace - 22 CVEs
Enterprise Linux For Real Time For Nfv Tus - 22 CVEs
Enterprise Linux Nvidia - 22 CVEs
Ext Dns Optr - 22 CVEs
Jboss Enterprise Portal Platform - 22 CVEs
Build Of Quarkus - 21 CVEs
Enterprise Linux For Real Time Tus - 21 CVEs
Jboss Enterprise Web Platform - 21 CVEs
Service Interconnect - 21 CVEs
Certifications - 20 CVEs
Decision Manager - 20 CVEs
Enterprise Linux For Power Big Endian Eus - 20 CVEs
Integration Camel K - 20 CVEs
Openshift File Integrity Operator - 20 CVEs
Webterminal - 20 CVEs
Codeready Linux Builder For Ibm Z Systems Eus - 19 CVEs
Lightspeed Core - 19 CVEs
Openshift Security Profiles Operator - 19 CVEs
Openshift Service On Aws - 19 CVEs
Automatic Bug Reporting Tool - 18 CVEs
Codeready Linux Builder For Power Little Endian Eus - 18 CVEs
Jboss Bpm Suite - 18 CVEs
Jboss Enterprise Soa Platform - 18 CVEs
Resteasy - 18 CVEs
Wildfly - 18 CVEs
Workload Availability Far - 18 CVEs
Advanced Cluster Management For Kubernetes - 17 CVEs
Ceph - 17 CVEs
Codeready Linux Builder For Arm64 Eus - 17 CVEs
Codeready Linux Builder For Ibm Z Systems - 17 CVEs
Jboss A-mq - 17 CVEs
Lightspeed For Runtimes - 17 CVEs
Openshift Compliance Operator - 17 CVEs
Openshift Container Platform For Linuxone - 17 CVEs
Openshift Custom Metrics Autoscaler - 17 CVEs
Stf - 17 CVEs
Codeready Linux Builder For Power Little Endian - 16 CVEs
Directory Server E4s - 16 CVEs
Ansible Core - 15 CVEs
Developer Tools - 15 CVEs
Jboss Enterprise Application Platform Xp - 15 CVEs
Lvms - 15 CVEs
Openshift Cluster Manager Cli - 15 CVEs
Openshift Power Monitoring - 15 CVEs
Rhel Extras Rt Els - 15 CVEs
Openshift Update Service - 14 CVEs
Workload Availability Mdr - 14 CVEs
3scale Api Management - 13 CVEs
Cloudforms 3.0 Management Engine - 13 CVEs
Codeready Linux Builder For Arm64 - 13 CVEs
Enterprise Virtualization Manager - 13 CVEs
Jboss Enterprise Application Platform Eus - 13 CVEs
Virtualization Manager - 13 CVEs
Enterprise Linux Server From Rhui - 12 CVEs
Jboss Fuse Service Works - 12 CVEs
Offline Knowledge Portal - 12 CVEs
Openshift Serverless - 12 CVEs
Spacewalk - 12 CVEs
Deployment Validator Operator - 11 CVEs
Openshift Virtualization - 11 CVEs
Subscription Asset Manager - 11 CVEs
Cost Management - 10 CVEs
Icedtea-web - 10 CVEs
Network Satellite - 10 CVEs
Openshift Container Platform For Ibm Z - 10 CVEs
Openshift Ironic - 10 CVEs
Openshift Origin - 10 CVEs
Openssl - 10 CVEs
Ovirt-engine - 10 CVEs
Rhel Software Collections - 10 CVEs
Shim - 10 CVEs
Ansible Developer - 9 CVEs
Ansible Inside - 9 CVEs
Certification - 9 CVEs
Descision Manager - 9 CVEs
Enterprise Linux Hpc Node Supplementary - 9 CVEs
Fedora - 9 CVEs
Icedtea - 9 CVEs
Jboss Middleware Text-only Advisories - 9 CVEs
Jboss Wildfly Application Server - 9 CVEs
Kueue Operator - 9 CVEs
Mrg Realtime - 9 CVEs
Spacewalk-java - 9 CVEs
Update Infrastructure - 9 CVEs
3scale - 8 CVEs
Codeready Linux Builder Eus For Power Little Endian Eus - 8 CVEs
Integration Camel Quarkus - 8 CVEs
Jboss Brms - 8 CVEs
Multiarch Tuning Operator - 8 CVEs
Openjdk Els - 8 CVEs
Openshift Container Platform For Arm64 - 8 CVEs
Openshift Container Platform Ibm Z Systems - 8 CVEs
Dogtag Certificate System - 7 CVEs
Enterprise Linux Compute Node Eus - 7 CVEs
Enterprise Linux For Ibm Z Systems Eus S390x - 7 CVEs
Gluster Storage Server For On-premise - 7 CVEs
Integration Service Registry - 7 CVEs
Jboss Data Virtualization - 7 CVEs
Openjdk - 7 CVEs
Pagure - 7 CVEs
Pdrive Lightspeed - 7 CVEs
Source To Image - 7 CVEs
Workload Availability Sbr - 7 CVEs
Workload Availability Snr - 7 CVEs
A Mq Clients - 6 CVEs
Amq - 6 CVEs
Amq Online - 6 CVEs
Conga - 6 CVEs
Directory Server Eus - 6 CVEs
Enterprise Linux For Els - 6 CVEs
Enterprise Linux For Ibm Z Systems Els - 6 CVEs
Enterprise Linux For Power Little Endian Els - 6 CVEs
Enterprise Linux Resilient Storage - 6 CVEs
Enterprise Linux Server Supplementary Aus - 6 CVEs
Icedtea6 - 6 CVEs
Jboss Middleware - 6 CVEs
Jboss Portal - 6 CVEs
Richfaces - 6 CVEs
Tcpdump - 6 CVEs
Wildfly Core - 6 CVEs
Workload Availability Nmo - 6 CVEs
Automation Manager - 5 CVEs
Build Of Apache Camel For Spring Boot - 5 CVEs
Ceph Storage Mon - 5 CVEs
Ceph Storage Osd - 5 CVEs
Codeready Linux Builder Eus For Power Little Endian - 5 CVEs
Codeready Studio - 5 CVEs
Cost Management On Premise - 5 CVEs
Edeploy - 5 CVEs
Enterprise Linux Atomic Host - 5 CVEs
Enterprise Linux Els - 5 CVEs
Enterprise Linux Eus Compute Node - 5 CVEs
Enterprise Linux Fast Datapath - 5 CVEs
Enterprise Linux For Eus - 5 CVEs
Enterprise Virtualization Hypervisor - 5 CVEs
Etcd - 5 CVEs
Freeipa - 5 CVEs
Hibernate Validator - 5 CVEs
Insights-client - 5 CVEs
Jboss Application Server - 5 CVEs
Libnbd - 5 CVEs
Migration Toolkit For Applications - 5 CVEs
Mirror Registry For Red Hat Openshift - 5 CVEs
Mobile Application Platform - 5 CVEs
Openshift Container Platform For Ibm Linuxone - 5 CVEs
Openshift Container Storage - 5 CVEs
Openstack For Ibm Power - 5 CVEs
Process Automation Manager - 5 CVEs
Satellite With Embedded Oracle - 5 CVEs
Build Of Apache Camel - Hawtio - 4 CVEs
Enterprise Linux High Availability - 4 CVEs
Enterprise Linux Openstack Platform - 4 CVEs
Enterprise Linux Virtualization - 4 CVEs
Evince - 4 CVEs
Jboss Seam 2 Framework - 4 CVEs
Jboss Web Framework Kit - 4 CVEs
Jboss Web Server - 4 CVEs
Jbpm - 4 CVEs
Kdebase - 4 CVEs
Kexec-tools - 4 CVEs
Kvm - 4 CVEs
Messaging Realtime Grid - 4 CVEs
Migration Toolkit Runtimes - 4 CVEs
Network Satellite Server - 4 CVEs
Openshift Data Science - 4 CVEs
Openshift Dev Spaces - 4 CVEs
Openshift Developer Tools And Services - 4 CVEs
Quickstart Cloud Installer - 4 CVEs
Single Sign On - 4 CVEs
Spice-xpi - 4 CVEs
Storage For Public Cloud - 4 CVEs
Wildfly Elytron - 4 CVEs
3scale Api Management Platform - 3 CVEs
Ansible Runner - 3 CVEs
Build Of Apicurio Registry - 3 CVEs
Camel K - 3 CVEs
Cman - 3 CVEs
Codeready Linux Builder For Eus - 3 CVEs
Cost Management Metrics Operator - 3 CVEs
Developer Hub - 3 CVEs
Drools - 3 CVEs
Dynamic Accelerator Slicer - 3 CVEs
Enterprise Linux For Ibm Z Systems S390x - 3 CVEs
Enterprise Linux Long Life - 3 CVEs
Enterprise Linux Server Workstation - 3 CVEs
Fast Datapath - 3 CVEs
Hornetq - 3 CVEs
Integration Camel For Spring Boot - 3 CVEs
Interchange - 3 CVEs
Jboss Aerogear - 3 CVEs
Jboss Business Rules Management System - 3 CVEs
Jboss Community Application Server - 3 CVEs
Jboss Enterprise Application Platform Continuous Delivery - 3 CVEs
Jboss Enterprise Application Platform Text-only Advisories - 3 CVEs
Kdelibs - 3 CVEs
Kernel - 3 CVEs
Kernel Module Management - 3 CVEs
Linux Powertools - 3 CVEs
Manageiq Enterprise Virtualization Manager - 3 CVEs
Migration Toolkit For Runtimes - 3 CVEs
Mod Cluster - 3 CVEs
Openshift Api For Data Protection - 3 CVEs
Openshift Sandboxed Containers - 3 CVEs
Openstack-mistral - 3 CVEs
Openstack Essex - 3 CVEs
Rhevm-reports - 3 CVEs
Rkt - 3 CVEs
Sos - 3 CVEs
Storage Console - 3 CVEs
Subscription-manager - 3 CVEs
Thermostat - 3 CVEs
Virtio-win - 3 CVEs
A-mq Streams - 2 CVEs
Ansible Automation Platform Early Access - 2 CVEs
Ansible Collection - 2 CVEs
Apicast - 2 CVEs
Atomic-openshift - 2 CVEs
Bodhi - 2 CVEs
Build Of Optaplanner - 2 CVEs
Cert-manager Operator For Red Hat Openshift - 2 CVEs
Certificate System Eus - 2 CVEs
Cloudforms 3.0.1 Management Engine - 2 CVEs
Cloudforms 3.0.2 Management Engine - 2 CVEs
Cloudforms 3.0.3 Management Engine - 2 CVEs
Cloudforms 3.0.4 Management Engine - 2 CVEs
Cloudforms 3.0.5 Management Engine - 2 CVEs
Cloudforms 3.1 Management Engine - 2 CVEs
Cloudforms Cloud Engine - 2 CVEs
Cluster Suite - 2 CVEs
Coreos-installer - 2 CVEs
Cygwin - 2 CVEs
Enterprise Linux Advanced Virtualization Eus - 2 CVEs
Enterprise Linux For Ibm Z Systems (structure A) - 2 CVEs
Enterprise Linux For Update Services For Sap Solutions - 2 CVEs
Enterprise Linux High Availability Eus - 2 CVEs
Enterprise Linux Server Eus From Rhui - 2 CVEs
Enterprise Linux Server From Rhui 6 - 2 CVEs
Enterprise Virtualization Host - 2 CVEs
Gluster Storage Management Console - 2 CVEs
Helm Cli - 2 CVEs
Hivex - 2 CVEs
Icedtea7 - 2 CVEs
Instructlab - 2 CVEs
Jboss-ejb-client - 2 CVEs
Jboss-remoting - 2 CVEs
Jboss Amq Clients - 2 CVEs
Jboss Communications Platform - 2 CVEs
Jboss Core Services Httpd - 2 CVEs
Jboss Drools - 2 CVEs
Jboss Enterprise Web Server Text-only Advisories - 2 CVEs
Jboss Remoting - 2 CVEs
Jboss Soa Platform - 2 CVEs
Kernel-rt - 2 CVEs
Kubernetes-client - 2 CVEs
Lha - 2 CVEs
Libpng - 2 CVEs
Logging Subsystem For Red Hat Openshift - 2 CVEs
Luci - 2 CVEs
Migration Toolkit - 2 CVEs
Network Bound Disk Encryption Tang - 2 CVEs
Network Proxy - 2 CVEs
Noobaa-operator - 2 CVEs
Openshift Logging - 2 CVEs
Openshift Router - 2 CVEs
Openstack-optools - 2 CVEs
Openstack Folsom - 2 CVEs
Ovirt-node - 2 CVEs
Packstack - 2 CVEs
Qspice - 2 CVEs
Redhat Package Manager - 2 CVEs
Rhboac Hawtio - 2 CVEs
Rhel Extras Sap Els - 2 CVEs
Rhel Satellite Client - 2 CVEs
Run Once Duration Override Operator - 2 CVEs
Satellite 5 Managed Db - 2 CVEs
Storage Native Client - 2 CVEs
Storage Server - 2 CVEs
Stronghold - 2 CVEs
Sysreport - 2 CVEs
Sysstat - 2 CVEs
Tectonic - 2 CVEs
Trusted Application Pipeline - 2 CVEs
Tuned - 2 CVEs
Virtual Desktop Server Manager - 2 CVEs
Virtualization For Ibm Power Little Endian - 2 CVEs
Web Terminal - 2 CVEs
Windows Machine Config Operator - 2 CVEs
Xnio - 2 CVEs
389-ds-base - 1 CVEs
Dogtag Certificate System - 1 CVEs
A-mq Online - 1 CVEs
Adminutil - 1 CVEs
Aeolus Conductor - 1 CVEs
Analog Real-time Synthesizer - 1 CVEs
Ansible Automation Controller - 1 CVEs
Ansible Automation Platform Cloud Billing - 1 CVEs
Ansible Automation Platform Text-only Advisories - 1 CVEs
Ansible Galaxy - 1 CVEs
Apache-camel-spring-boot - 1 CVEs
Application Stack - 1 CVEs
Beaker - 1 CVEs
Bigmem Kernel - 1 CVEs
Bind9 - 1 CVEs
Build Of Apache Camel - 1 CVEs
Business-central - 1 CVEs
Cairo - 1 CVEs
Ceph-iscsi-cli - 1 CVEs
Ceph Storage For Ibm Z Systems - 1 CVEs
Ceph Storage For Power - 1 CVEs
Certificate Server - 1 CVEs
Certification For Red Hat Enterprise Linux - 1 CVEs
Cfme-gemset - 1 CVEs
Cisco Nx-os Collection - 1 CVEs
Clair - 1 CVEs
Cluster Logging Operator - 1 CVEs
Cluster Project - 1 CVEs
Codehaus - 1 CVEs
Codeready Linux Builder For Power Little Endian Els - 1 CVEs
Codeready Linux Builder For X86 64 - 1 CVEs
Codeready Linux Builder For X86 64 Eus - 1 CVEs
Community.general - 1 CVEs
Community General Collection - 1 CVEs
Community Network Collection - 1 CVEs
Container Development Kit - 1 CVEs
Curl - 1 CVEs
Daredevil Skk - 1 CVEs
Dashbuilder - 1 CVEs
Ddskk-xemacs - 1 CVEs
Desktop - 1 CVEs
Desktop Workstation - 1 CVEs
Device-mapper-multipath - 1 CVEs
Devtools - 1 CVEs
Directory Server E2s - 1 CVEs
Docbook Stylesheets - 1 CVEs
Docbook Utils - 1 CVEs
Docker - 1 CVEs
Docker Community Collection - 1 CVEs
Dpu Kit - 1 CVEs
Dtach - 1 CVEs

Newest CVEs of Redhat

CVE-2026-117574 - CVSS 9.1 (critical), 2026-10-28: A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this vulnerability by submitting a request specifying another…
CVE-2026-13451 - CVSS 7.7 (high), 2026-10-28: A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by…
CVE-2026-109411 - CVSS 8.1 (high), 2026-10-28: An access control bypass flaw was found in Samba's vfs_ceph_rgw module in it's openat() function. An authenticated user can bypass access controls to read or…
CVE-2026-84725 - CVSS 8.1 (high), 2026-10-28: when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an…
CVE-2026-92171 - CVSS 6.5 (medium), 2026-10-26: A flaw was found in the Infinispan Operator for Red Hat Data Grid. When cross-site (xsite) TLS is enabled, the operator launches the Gossip Router container…
CVE-2026-116497 - CVSS 5.5 (medium), 2026-10-26: A NULL pointer dereference vulnerability was found in gssproxy. When a GSSX_INIT_SEC_CONTEXT request is received with the target_name field absent, the daemon…
CVE-2026-115486 - CVSS 7.1 (high), 2026-10-23: A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler accesses link-layer address options at a fixed offset without…
CVE-2026-115485 - CVSS 6.3 (medium), 2026-10-23: A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen() on raw network data without ensuring a NUL terminator is…
CVE-2026-115484 - CVSS 7.6 (high), 2026-10-23: A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read…
CVE-2026-115449 - CVSS 3.5 (low), 2026-10-22: A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data received from the host. Under…
CVE-2026-115221 - CVSS 5.4 (medium), 2026-10-22: A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users…
CVE-2026-115424 - CVSS 5.5 (medium), 2026-10-22: A flaw was found in the OpenShift client oc. When extracting container image layers with oc image extract, the application fails to properly sanitize symbolic…
CVE-2026-111079 - CVSS 7.4 (high), 2026-10-22: A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without…
CVE-2026-115207 - CVSS 5.5 (medium), 2026-10-22: A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by enticing a user or automated workflow…
CVE-2026-114406 - CVSS 6.8 (medium), 2026-10-21: The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of…
CVE-2026-85518 - CVSS 6.1 (medium), 2026-10-21: A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not properly validate relative file path attributes,…
CVE-2026-114438 - CVSS 4.2 (medium), 2026-10-21: A flaw was found in the Update User Locale required action of the Keycloak identity and access management solution. When this action is ordered before the…
CVE-2026-110744 - CVSS 7.2 (high), 2026-10-21: A flaw was found in multicluster-global-hub-operator-bundle. The operator is configured with overly broad role-based access control (RBAC) permissions that…
CVE-2026-114370 - CVSS 3.7 (low), 2026-10-21: A flaw was found in the PathResourceManager component of the Undertow web server. This component is responsible for serving static files from the file system.…
CVE-2026-114236 - CVSS 3.3 (low), 2026-10-21: storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls…
CVE-2026-17557 - CVSS 6.5 (medium), 2026-10-21: A flaw was found in the `lm-evaluation-harness` component of Red Hat OpenShift AI. An authenticated user, able to submit an evaluation job, could exploit this…
CVE-2026-92824 - CVSS 6.2 (medium), 2026-10-21: A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop incorrectly uses the count of digest algorithms as its bound…
CVE-2026-92823 - CVSS 6.2 (medium), 2026-10-21: A flaw was found in libmodulemd. In builds with rpmio support enabled, compressed modulemd YAML is decompressed through a custom read handler that does not…
CVE-2026-92822 - CVSS 6.2 (medium), 2026-10-21: A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into nested GVariant values through recursive YAML mapping and…
CVE-2026-114038 - CVSS 5.1 (medium), 2026-10-21: A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing…
CVE-2026-105941 - CVSS 8.1 (high), 2026-10-20: The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserialized EDEK bytes without format validation, enabling SSRF…
CVE-2026-105949 - CVSS 8.8 (high), 2026-10-20: Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a catch-all wildcard constraint and without…
CVE-2026-105312 - CVSS 9.9 (critical), 2026-10-20: A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbitrary container image. The operator…
CVE-2026-105311 - CVSS 7.7 (high), 2026-10-20: The StreamsHub Console operator acts as a confused deputy: a Kubernetes tenant with permission to create a Console custom resource can set…
CVE-2026-113496 - CVSS 5 (medium), 2026-10-20: A flaw was found in cockpit-machines. When saving Virtual Network Computing (VNC) console settings, the configured password is passed directly as a…