Skip to content
Red Hat Openshift vulnerabilities
-
red hat openshift ai (rhoai)
Trainer: trainer: trainjob env passthrough enables valuefrom.secretkeyref injection for namespace secret exfiltration
CVE-2026-83495
No score
-
red hat openshift pipelines, builds for red hat openshift, openshift serverless +2 more +4 more
Pipelines-as-code: openshift-pipelines-operator-rh: pipelines-as-code: repository users can trigger namespace edit-equivalent execution via auto-provisioned pipeline serviceaccount
CVE-2026-50240
8.8 High
-
red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 more
Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation
CVE-2026-123876
4.4 Medium
-
red hat openshift ai (rhoai)
Training-operator: pytorchjob validateupdate casts oldjob from newobj, bypassing managedby immutability (asvs v5.1.3; upstream bug)
CVE-2026-83494
No score
-
red hat openshift ai (rhoai)
Distributed-workloads: github actions pinned by mutable tag/branch, including third-party snyk/actions/setup@master
CVE-2026-83493
9.1 Critical
-
red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +12 more +14 more
Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)
CVE-2026-123037
6.7 Medium
-
red hat exploit intelligence, openshift serverless, build of apache camel 4 for quarkus 3 +7 more +9 more
Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw
CVE-2026-107912
7.7 High
-
red hat openshift gitops
Github.com/argoproj-labs/argocd-image-updater: argocd-image-updater: arbitrary command execution via crafted ssh repository proxy configuration
CVE-2026-121621
8.8 High
-
red hat openshift container platform 4, openshift container platform 5 +1 more
Image-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster pull secret
CVE-2026-82976
7.1 High
-
red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 more
Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service
CVE-2026-120831
6.5 Medium
-
red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 more
Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure
CVE-2026-120830
7.4 High
-
red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +4 more +6 more
Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step
CVE-2026-120194
7.5 High
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 more
Gcc: out-of-bounds read in std::from_chars
CVE-2026-115456
3.7 Low
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 more
Gcc: stack overflow in std::bitset on libstdc++
CVE-2026-115455
6.5 Medium
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 more
Gcc: integer wrap in `std
CVE-2026-114691
5.9 Medium
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 more
Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std
CVE-2026-114690
6.2 Medium
-
red hat enterprise linux 9, enterprise linux 10, enterprise linux 6 +4 more +6 more
Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)
CVE-2026-118593
5.9 Medium
-
red hat openshift container platform 4, openshift container platform 5 +1 more
Openshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verification
CVE-2026-92092
7.4 High
-
red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 more
Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder
CVE-2026-93009
4.3 Medium
-
red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 more
Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check
CVE-2026-93010
4.3 Medium
-
red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 more
Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content
CVE-2026-93006
6.8 Medium
-
red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 more
Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation
CVE-2026-93007
5.3 Medium
-
red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 more
Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms
CVE-2026-93011
5.3 Medium
-
red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 more
Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations
CVE-2026-93008
6.8 Medium
-
red hat openshift ai (rhoai)
Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-process authorization
CVE-2026-117574
9.1 Critical
-
red hat openshift ai (rhoai)
Kserve: kserve: server-side request forgery via malicious storageuri
CVE-2026-13451
7.7 High
-
samba, red hat enterprise linux 10, enterprise linux 6 +5 more +7 more
Samba: access control bypass via vfs_ceph_rgw case-insensitive open
CVE-2026-109411
Fix available
8.1 High
-
red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 more
Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon
CVE-2026-116497
5.5 Medium
-
red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +1 more +3 more
Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guest
CVE-2026-115449
Fix available
3.5 Low
-
red hat openshift container platform 4, openshift container platform 5 +1 more
Oc: oc: symlink/hardlink target validation bypass in oc image extract allows file write outside destination
CVE-2026-115424
5.5 Medium
-
red hat agentic cluster security suite 0.2, cost management 4, advanced cluster security for kubernetes 4.11 +49 more +51 more
Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
CVE-2026-114406
Fix available
6.8 Medium
-
red hat confidential compute attestation, dpu kit for nvidia, exploit intelligence +18 more +20 more
Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers
CVE-2026-114236
3.3 Low
-
red hat openshift ai (rhoai)
Lm-evaluation-harness: lm-evaluation-harness: ssrf via job-spec model.url with bearer credential forwarding
CVE-2026-17557
6.5 Medium
-
red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +4 more +6 more
Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts
CVE-2026-92824
6.2 Medium
-
red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +4 more +6 more
Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml
CVE-2026-92823
6.2 Medium
-
red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +4 more +6 more
Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml
CVE-2026-92822
6.2 Medium
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 more
Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string
CVE-2026-114038
Fix available
5.1 Medium
-
red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 more
Bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization
CVE-2026-16460
7.4 High
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 more
Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statd
CVE-2026-89096
Fix available
5.9 Medium
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 more
Libarchive: libarchive: use-after-free via aliased mac metadata copy
CVE-2026-17591
Fix available
3.6 Low
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 more
Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding
CVE-2026-85977
Fix available
5.3 Medium
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 more
Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decoding
CVE-2026-85231
6.5 Medium
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 more
Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd
CVE-2026-89098
Fix available
5.5 Medium
-
red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 more
Luksmeta: missing slot-range validation permits out-of-gap device i/o
CVE-2026-111555
6.0 Medium
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 more
Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass
CVE-2026-104715
Public exploitFix available
7.8 High
-
red hat connectivity link 1, connectivity link 1.4, connectivity link 1.5 +1 more +3 more
Github.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-management/rhcl-operator-product-build/kuadrant-operator: kuadrant-operator: crafted httproute match values can bypass gateway po…
CVE-2026-108334
7.4 High
-
red hat migration toolkit for applications 8, migration toolkit for containers, migration toolkit for virtualization +12 more +14 more
Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection
CVE-2026-92982
8.5 High
-
red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 more
Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto
CVE-2026-86849
Fix available
6.5 Medium
-
red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 more
Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver
CVE-2026-86856
Fix available
6.5 Medium
-
red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 more
Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup
CVE-2026-86847
Fix available
6.5 Medium
- Show olderLoading…