Skip to contentRed Hat Cost Management 4 vulnerabilities
- red hat agentic cluster security suite 0.2, cost management 4, advanced cluster security for kubernetes 4.11 +55 more +57 moreCa-certificates: distrust emudhra intermediate ca certificates due to security concernsCVE-2026-114406Fix available6.8 Medium
- red hat cost management 4, redhat cost management metrics operator +1 moreProject-koku/koku-metrics-operator: koku-metrics-operator: service-account client credentials sent to user-controlled token_urlCVE-2026-183826.8 Medium
- red hat cost management 4, redhat cost management metrics operator +1 moreProject-koku/koku-metrics-operator: koku-metrics-operator: cluster pull-secret token exfiltration via user-controlled api_url (ssrf / confused deputy)CVE-2026-183787.6 High
- red hat cost management 4, redhat cost management metrics operator +1 moreProject-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled prometheus service_addressCVE-2026-183817.6 High
- p11-kit project p11-kit, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +16 more +18 moreP11-kit: stack exhaustion via unbounded recursion in rpc attribute parsingCVE-2026-13757Fix available6.2 Medium
- openssl, red hat cost management 4, multicluster engine for kubernetes +23 more +25 moreHeap Use-After-Free in the PKCS7_verify() FunctionCVE-2026-45447Public exploitFix available8.8 High
- libcap project libcap, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +34 more +36 moreLibcap: libcap: privilege escalation via toctou race condition in cap_set_file()CVE-2026-4878Fix available6.7 Medium
- microsoft p11-kit, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +16 more +18 moreP11-kit: null dereference via c_derivekey with specific null parametersCVE-2026-2100Fix available5.3 Medium
- openssl, red hat cost management 4, ai inference server 3.2 +316 more +318 moreStack buffer overflow in CMS (Auth)EnvelopedData parsingCVE-2025-15467Public exploitFix availableEPSS 74.8%8.8 High
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +12 more +14 moreCoreutils: heap buffer under-read in gnu coreutils sort via key specificationCVE-2025-5278Fix available4.4 Medium