Red Hat Ceph vulnerabilities

• red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 more Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder CVE-2026-93009 4.3 MediumOctober 29, 2026
• red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 more Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check CVE-2026-93010 4.3 MediumOctober 29, 2026
• red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 more Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content CVE-2026-93006 6.8 MediumOctober 29, 2026
• red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 more Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation CVE-2026-93007 5.3 MediumOctober 29, 2026
• red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 more Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms CVE-2026-93011 5.3 MediumOctober 29, 2026
• red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 more Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations CVE-2026-93008 6.8 MediumOctober 29, 2026
• red hat ceph storage 5, ceph storage 9, openstack platform 17.1 +1 more +3 more Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure CVE-2026-87872 6.8 MediumSeptember 9, 2026
• red hat ceph storage 5, ceph storage 9, openstack platform 17.1 +1 more +3 more Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution on the ansible controller CVE-2026-87874 8.1 HighSeptember 9, 2026
• red hat ceph storage 4, ceph storage 6, ceph storage 7 +8 more +10 more Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough CVE-2026-18495 Fix available 6.1 MediumAugust 27, 2026
• red hat ceph storage 5, ceph storage 9, openstack platform 17.1 +1 more +3 more Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings CVE-2026-80158 5.5 MediumAugust 26, 2026
• samba, red hat ceph storage 9.2, enterprise linux 10 +7 more +9 more Samba: ctdb fails to do integrity checking of received packets CVE-2026-58224 Fix available 6.5 MediumJuly 28, 2026
• go standard library crypto/x509, red hat assisted installer for red hat openshift container platform 2, cert manager support for red hat openshift release 1.19 +128 more +130 more Inefficient candidate hostname parsing in crypto/x509 CVE-2026-27145 Public exploitFix available 6.5 MediumJune 2, 2026
• golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +54 more +56 more Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh CVE-2026-46595 Public exploitFix available 10.0 CriticalMay 22, 2026
• golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh/agent, red hat assisted installer for red hat openshift container platform 2 +46 more +48 more Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent CVE-2026-39832 Fix available 9.1 CriticalMay 22, 2026
• golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +68 more +70 more Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh CVE-2026-39830 Fix available 9.1 CriticalMay 22, 2026
• golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +64 more +66 more Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh CVE-2026-39828 Fix available 6.3 MediumMay 22, 2026
• docker engine, moby docker engine, docker docker/daemon +20 more +22 more Docker: `PUT /containers/{id}/archive` executes container binary on the host CVE-2026-41567 Public exploitFix available 7.2 HighMay 18, 2026
• protobufjs project protobufjs, protobufjs protobuf.js, red hat openshift pipelines +13 more +15 more protobufjs: Denial of service through unbounded protobuf recursion CVE-2026-44289 Fix available 7.5 HighMay 12, 2026
• go standard library net/mail, golang go, red hat assisted installer for red hat openshift container platform 2 +108 more +110 more Quadratic string concatenation in consumePhrase in net/mail CVE-2026-42499 Fix available 7.5 HighMay 7, 2026
• go standard library net/mail, golang go, red hat assisted installer for red hat openshift container platform 2 +107 more +109 more Quadratic string concatentation in consumeComment in net/mail CVE-2026-39820 Fix available 7.5 HighMay 7, 2026
• go standard library net/http, golang go, http2 +106 more +108 more Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net CVE-2026-33814 Fix available 7.5 HighMay 7, 2026
• go standard library net, golang go, red hat assisted installer for red hat openshift container platform 2 +145 more +147 more Crash when handling long CNAME response in net CVE-2026-33811 Fix available 7.5 HighMay 7, 2026
• prometheus, red hat file integrity operator, logging for red hat openshift 6 +53 more +55 more Prometheus: remote read endpoint allows denial of service via crafted snappy payload CVE-2026-42154 Public exploitFix available 7.5 HighMay 4, 2026
• prometheus, red hat custom metric autoscaler operator for red hat openshift, file integrity operator +52 more +54 more Prometheus Azure AD remote write OAuth client secret exposed via config API CVE-2026-42151 Fix available 7.5 HighMay 4, 2026
• apache thrift, red hat multicluster global hub, multicluster global hub 1.3.4 +17 more +19 more Apache Thrift: Go TFramedTransport uint32 overflow CVE-2026-41602 Fix available 7.5 HighApril 28, 2026
• apache thrift, red hat cryostat 4 on rhel 9, multicluster global hub +16 more +18 more Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error. CVE-2025-48431 Fix available 7.5 HighApril 28, 2026
• grafana tempo, enterprise traces (get), red hat logging subsystem for red hat openshift +13 more +15 more Tempo query limit results in unbounded memory allocation CVE-2026-21728 Fix available 7.5 HighApril 24, 2026
• protobufjs project protobufjs, protobufjs protobuf.js, red hat cryostat 4 +20 more +22 more protobufjs has an arbitrary code execution issue CVE-2026-41242 Public exploitFix available 9.4 CriticalApril 16, 2026
• oauth2-proxy, oauth2 proxy project proxy, red hat ceph storage 9 +2 more OAuth2 Proxy has an Authentication Bypass via X-Forwarded-Uri Header Spoofing CVE-2026-40575 Fix available 9.1 CriticalApril 15, 2026
• grafana pyroscope, red hat multicluster global hub, multicluster global hub 1.7.0 +5 more +7 more Sensitive COS `SecretKey` exposed in plaintext via configuration API due to missing type protection CVE-2025-41118 Fix available 9.1 CriticalApril 15, 2026
• follow-redirects, red hat cluster observability operator 1.5.0, cryostat 4 +79 more +81 more follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets CVE-2026-40895 Fix available 6.9 MediumApril 14, 2026
• jqlang jq, red hat ai inference server 3.2, ai inference server 3.3 +38 more +40 more jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers CVE-2026-39979 Fix available 6.9 MediumApril 13, 2026
• openfga, red hat multicluster global hub 1.7.0, advanced cluster management for kubernetes 2.14 +3 more +5 more OpenFGA Playground Preshared Key Exposure CVE-2026-40293 Fix available 6.5 MediumApril 8, 2026
• pyca pyopenssl, red hat confidential compute attestation, exploit intelligence +37 more +39 more pyOpenSSL DTLS cookie callback buffer overflow CVE-2026-27459 Fix available 7.2 HighMarch 16, 2026
• linux-nfs nfs-utils, red hat ceph storage 8, enterprise linux 10 +13 more +15 more Nfs-utils: rpc.mountd in the nfs-utils privilege escalation CVE-2025-12801 Fix available 6.5 MediumMarch 4, 2026
• libpng, red hat ai inference server 3.3, build of openjdk 1.8 +34 more +36 more LIBPNG has a heap buffer overflow in png_set_quantize CVE-2026-25646 Fix available 8.3 HighFebruary 10, 2026
• red hat cert manager support for red hat openshift release 1.18, ai inference server 3.2, ai inference server 3.3 +23 more +25 more Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification CVE-2025-14831 Fix available 5.3 MediumFebruary 9, 2026
• grafana, grafana grafana/grafana, grafana/grafana-enterprise +12 more +14 more Dashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation CVE-2026-21721 Public exploitFix available 8.1 HighJanuary 27, 2026
• grafana, grafana grafana/grafana, grafana/grafana-enterprise +5 more +7 more Unauthenticated DoS: avatar cache leaks goroutines when /avatar/:hash requests time out CVE-2026-21720 Fix available 7.5 HighJanuary 27, 2026
• pypa wheel, red hat discovery 2 for rhel 10, discovery 2 for rhel 8 +57 more +59 more wheel Allows Arbitrary File Permission Modification via Path Traversal CVE-2026-24049 Public exploitFix available 7.1 HighJanuary 22, 2026
• lodash, lodash lodash-amd, lodash-es +119 more +121 more Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions CVE-2025-13465 Public exploitFix available 6.9 MediumJanuary 21, 2026
• dabeaz ply, red hat fence agents remediation operator, migration toolkit for containers +25 more +27 more An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code... CVE-2025-56005 Public exploitFix availableDisputed EPSS 18.8% 9.8 CriticalJanuary 20, 2026
• pyasn1, debian linux, red hat lightspeed core +48 more +50 more pyasn1 has a DoS vulnerability in decoder CVE-2026-23490 Fix available 7.5 HighJanuary 16, 2026
• go standard library net/url, golang go, red hat assisted installer for red hat openshift container platform 2 +160 more +162 more Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 Fix available 7.5 HighJanuary 16, 2026
• python urllib3, red hat assisted installer for red hat openshift container platform 2, cert-manager operator for red hat openshift 1.18 +105 more +107 more urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) CVE-2026-21441 Fix available 8.9 HighJanuary 7, 2026
• util-linux, red hat cert manager support for red hat openshift release 1.18, ceph storage 7 +11 more +13 more Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames CVE-2025-14104 Fix available 6.1 MediumDecember 5, 2025
• ansible-collections ansible community general collection, red hat ceph storage 5, ceph storage 6 +5 more +7 more Ansible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose output CVE-2025-14010 Fix available 5.5 MediumDecember 4, 2025
• nodemailer, red hat advanced cluster management for kubernetes 2, ceph storage 8 +4 more +6 more Nodemailer: nodemailer: denial of service via crafted email address header CVE-2025-14874 Fix available 7.5 HighDecember 1, 2025
• gnome glib, red hat ceph storage 8, discovery 2 +58 more +60 more Glib: integer overflow in in g_escape_uri_string() CVE-2025-13601 Fix available 7.7 HighNovember 26, 2025
• red hat cert manager support for red hat openshift release 1.18, ceph storage 8, discovery 2 +11 more +13 more Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function CVE-2025-9820 Fix available 4.0 MediumNovember 25, 2025
• Show olderLoading…