Skip to content
Red Hat vulnerabilities
Products
Show 160 moreShow less
Newest
-
red hat build of keycloak, single sign-on 7 +1 more
Keycloak-services: keycloak-services: manage-clients to arbitrary code execution through inline javascript policy import
CVE-2026-120984
9.1 Critical
-
red hat openshift ai (rhoai)
Trainer: trainer: trainjob env passthrough enables valuefrom.secretkeyref injection for namespace secret exfiltration
CVE-2026-83495
No score
-
red hat openshift pipelines, builds for red hat openshift, openshift serverless +2 more +4 more
Pipelines-as-code: openshift-pipelines-operator-rh: pipelines-as-code: repository users can trigger namespace edit-equivalent execution via auto-provisioned pipeline serviceaccount
CVE-2026-50240
8.8 High
-
red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 more
Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation
CVE-2026-123876
4.4 Medium
-
red hat openshift ai (rhoai)
Training-operator: pytorchjob validateupdate casts oldjob from newobj, bypassing managedby immutability (asvs v5.1.3; upstream bug)
CVE-2026-83494
No score
-
red hat openshift ai (rhoai)
Distributed-workloads: github actions pinned by mutable tag/branch, including third-party snyk/actions/setup@master
CVE-2026-83493
9.1 Critical
-
red hat build of keycloak
Keycloak: keycloak: privilege escalation via client authentication manipulation by an authenticated administrator
CVE-2026-9797
6.5 Medium
-
red hat build of keycloak 26.4, build of keycloak 26.4.17, build of keycloak 26.6 +2 more +4 more
Keycloak-services: keycloak-services: protocol mapper with jsontype=json bypasses token sanitization
CVE-2026-97848
6.5 Medium
-
red hat build of keycloak 26.4, build of keycloak 26.4.17, build of keycloak 26.6 +2 more +4 more
Keycloak-services: keycloak-services: dcr azp and sid claim substitution allows account rest session takeover
CVE-2026-97367
6.4 Medium
-
red hat build of keycloak 26.4, build of keycloak 26.4.17, build of keycloak 26.6 +2 more +4 more
Keycloak-services: keycloak-services: dcr registration-time claim-path gap allows forging realm_access.roles
CVE-2026-96547
6.5 Medium
-
red hat build of keycloak 26.6, build of keycloak 26.6.8, single sign-on 7 +2 more
Keycloak-services: keycloak-services: indefinite access token renewal via standard token exchange v2
CVE-2026-96460
5.4 Medium
-
red hat build of keycloak 26.6, build of keycloak 26.6.8, single sign-on 7 +2 more
Keycloak-services: keycloak-services: saml broker ignores proxyrestriction delegation constraints
CVE-2026-92856
4.9 Medium
-
red hat build of keycloak 26.6, build of keycloak 26.6.8, single sign-on 7 +2 more
Keycloak-services: keycloak-services: admin api missing audience check
CVE-2026-19688
6.8 Medium
-
red hat build of keycloak 26.6, build of keycloak 26.6.8, single sign-on 7 +2 more
Keycloak-services: keycloak-services: stateless token preferred_username fallback enables identity rebinding
CVE-2026-96447
4.2 Medium
-
red hat build of keycloak 26.6, build of keycloak 26.6.8, single sign-on 7 +2 more
Keycloak-services: keycloak-services: injection of roles into realm default-roles via dcr endpoint
CVE-2026-109081
6.8 Medium
-
red hat build of keycloak 26.6, build of keycloak 26.6.8, single sign-on 7 +2 more
Keycloak-services: keycloak-services: oidc logout endpoint session fixation via id_token_hint leading to account takeover
CVE-2026-107124
6.4 Medium
-
red hat exploit intelligence, build of quarkus +1 more
Quarkus-rest-data-panache: quarkus-rest-data-panache: getter-level @securefield ignored for filter and sort
CVE-2026-121837
4.3 Medium
-
red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +12 more +14 more
Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)
CVE-2026-123037
6.7 Medium
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more
Dbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored bus
CVE-2026-120749
6.2 Medium
-
kubeflow pipelines
Kubeflow Pipelines: Cross-tenant execution-cache poisoning / output substitution via a namespace-blind cache key in the cache webhook (multi-user)
CVE-2026-88982
5.4 Medium
-
kubeflow pipelines
Kubeflow Pipelines API server lacks authorization for shared pipeline uploads
CVE-2026-77596
9.6 Critical
-
kubeflow pipelines
Kubeflow Pipelines: Unauthenticated SSRF through artifact provider endpoints
CVE-2026-88981
8.6 High
-
kubeflow pipelines
Kubeflow Pipelines: Unauthenticated server-side request forgery in the frontend http/https artifact source via decimal-IP bypass of the bucket validator
CVE-2026-88980
8.6 High
-
kubeflow pipelines
Kubeflow Pipelines: Unauthenticated SSRF vulnerability in Kubeflow Pipelines TensorBoard proxy
CVE-2026-88979
5.8 Medium
-
kubeflow pipelines
Kubeflow Pipelines: RBAC bypass on shared pipelines allows any authenticated user to delete or modify global pipelines
CVE-2026-88984
7.2 High
-
kubeflow pipelines
Kubeflow Pipelines: Reflected XSS in the frontend pod information and events error responses
CVE-2026-88986
6.1 Medium
-
kubeflow pipelines
Kubeflow Pipelines: SQL injection through unvalidated pagination tokens in Kubeflow Pipelines API server
CVE-2026-88985
6.5 Medium
-
kubeflow pipelines
Kubeflow Pipelines — API server fetches a caller-supplied pipelineURL without host validation
CVE-2026-88983
5.0 Medium
-
red hat build of keycloak 26.4, build of keycloak 26.4.17, build of keycloak 26.6 +2 more +4 more
Keycloak-services: keycloak-services: client manager can substitute sessionless token principal via hardcoded-claim mappers to obtain realm administrator authority
CVE-2026-97847
7.1 High
-
red hat build of keycloak 26.4.17, build of keycloak 26.6.8, single sign-on 7 +2 more
Keycloak-services: keycloak-services: unverified idp email auto-linking enables account takeover
CVE-2026-97175
8.8 High
-
red hat build of keycloak 26.6, build of keycloak 26.6.8, single sign-on 7 +2 more
Keycloak-services: keycloak-services: ciba sub parameter injection causes attacker authentication to issue victim tokens
CVE-2026-97174
6.8 Medium
-
red hat amq broker 7, build of keycloak 26.4, build of keycloak 26.4.17 +8 more +10 more
Org.keycloak/keycloak-admin-cli: keycloak-admin-cli: kcadm custom truststore accepts arbitrary self-signed certificates
CVE-2026-96453
8.0 High
-
red hat amq broker 7, build of keycloak 26.4, build of keycloak 26.4.17 +8 more +10 more
Keycloak-core: keycloak-core: saml adapter does not bind signed assertions to the configured identity provider issuer
CVE-2026-93998
7.4 High
-
red hat build of keycloak 26.4, build of keycloak 26.4.17, build of keycloak 26.6 +2 more +4 more
Keycloak-services: keycloak-services: dcr protocol mapper config not validated, allowing iat holders to forge sub and aud claims in signed tokens
CVE-2026-92857
8.1 High
-
red hat build of keycloak 26.4, build of keycloak 26.4.17, build of keycloak 26.6 +2 more +4 more
Keycloak-services: keycloak-services: saml broker accepts holder-of-key assertions without proof of key possession
CVE-2026-92855
7.4 High
-
red hat build of keycloak 26.4, build of keycloak 26.4.17, build of keycloak 26.6 +2 more +4 more
Keycloak-services: keycloak-services: unauthenticated denial of service via saml soap endpoint unbounded xml parsing
CVE-2026-82965
7.5 High
-
red hat hardened images
Dnf5daemon-server: dnf5: dnf5daemon-server: missing session-owner check allows foreign d-bus callers to replace another client's resolved transaction
CVE-2026-111253
6.6 Medium
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more
Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail
CVE-2026-123151
7.5 High
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more
Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch
CVE-2026-121997
8.1 High
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more
Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length
CVE-2026-121996
8.2 High
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more
Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tail
CVE-2026-121995
7.5 High
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more
Gdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply length
CVE-2026-121994
8.8 High
-
red hat build of keycloak 26.4, build of keycloak 26.4.17, build of keycloak 26.6 +2 more +4 more
Keycloak-services: keycloak-services: uma protection api resourcetype field not validated — cross-owner resource access
CVE-2026-114232
8.1 High
-
red hat build of keycloak 26.6, build of keycloak 26.6.8, single sign-on 7 +2 more
Keycloak-services: keycloak-services: account takeover via stale sso_auth note in organization identity-first login
CVE-2026-112208
8.1 High
-
red hat build of keycloak 26.6, build of keycloak 26.6.8, single sign-on 7 +2 more
Keycloak-services: keycloak-services: unauthenticated persistent disk exhaustion via theme gzip cache
CVE-2026-110932
7.5 High
-
red hat build of keycloak 26.4, build of keycloak 26.4.17, build of keycloak 26.6 +2 more +4 more
Keycloak-services: keycloak-services: unauthenticated jvm termination via saml 1.1 authoritybinding parsing loop
CVE-2026-110931
7.5 High
-
red hat build of keycloak 26.4, build of keycloak 26.4.17, build of keycloak 26.6 +2 more +4 more
Keycloak-services: keycloak-services: unauthenticated cpu exhaustion via saml 1.1 keyinfo infinite loop
CVE-2026-107602
7.5 High
-
red hat build of keycloak 26.6, build of keycloak 26.6.8, single sign-on 7 +2 more
Keycloak-services: keycloak-services: unauthenticated cpu denial of service via saml xml datetime and duration parsing
CVE-2026-107123
7.5 High
-
red hat build of keycloak 26.4, build of keycloak 26.4.17, build of keycloak 26.6 +2 more +4 more
Keycloak-services: keycloak-services: account takeover via authentication race using reset-credentials path
CVE-2026-103112
7.5 High
-
red hat build of keycloak 26.6, build of keycloak 26.6.9, single sign-on 7 +2 more
Keycloak-services: keycloak-services: saml redirect binding signature bypass via percent-encoded parameter names
CVE-2026-117691
Public exploit
9.1 Critical
- Show olderLoading…