Skip to contentRed Hat Openshift Container Platform vulnerabilities
- axios, red hat cryostat 4, gatekeeper 3 +65 more +67 moreAxios: shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)CVE-2026-44492Fix availableEPSS 12.3%8.6 High
- redhat openshift router, red hat openshift container platform 4.12, openshift container platform 4.13 +10 more +12 moreOpenshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontendCVE-2026-465797.4 High
- redhat openshift router, red hat openshift container platform 4, openshift container platform 4.17 +7 more +9 moreOpenshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validationCVE-2026-429657.7 High
- microsoft libsolv, red hat enterprise linux 10, enterprise linux 7 +6 more +8 moreLibsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of serviceCVE-2026-48863Fix available7.5 High
- pip maintainers pip, red hat exploit intelligence, lightspeed core +34 more +36 morepip can extract console_scripts and gui_scripts outside installation directoryCVE-2026-8643Fix available4.1 Medium
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moregfs2: Fix use-after-free in iomap inline data write pathCVE-2026-45984Fix available7.8 High
- opensuse libsolv, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +37 more +39 moreLibsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page dataCVE-2026-48864Fix available7.8 High
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreSamba: samba: remote code execution in printing subsystem via unescaped job descriptionCVE-2026-4480Public exploitFix availableEPSS 28.7%9.0 Critical
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +26 more +28 moreSamba: remote code execution in samrCVE-2026-4408Public exploitFix availableEPSS 46.9%9.0 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreSamba: denial of service against ad dc wins serverCVE-2026-3238Fix available7.5 High
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +22 more +24 moreSamba: group policy certificate enrollment uses http:// without validationCVE-2026-3012Fix available8.0 High
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +21 more +23 moreSamba: vfs_worm does not block directory modificationCVE-2026-2340Fix available6.5 Medium
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +26 more +28 moreSamba: missing access check on reparse point operationsCVE-2026-1933Fix available7.1 High
- shell-quote, red hat cluster observability operator 1.5.0, cryostat 4 +46 more +48 moreshell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`CVE-2026-9277Public exploitFix available9.2 Critical
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +54 more +56 moreInvoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/sshCVE-2026-46595Public exploitFix available10.0 Critical
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh/knownhosts, red hat assisted installer for red hat openshift container platform 2 +53 more +55 moreInvoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhostsCVE-2026-42508Fix available9.1 Critical
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +62 more +64 moreInvoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/sshCVE-2026-39835Fix available5.3 Medium
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh/agent, red hat assisted installer for red hat openshift container platform 2 +46 more +48 moreInvoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agentCVE-2026-39832Fix available9.1 Critical
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +68 more +70 moreInvoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/sshCVE-2026-39830Fix available9.1 Critical
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +74 more +76 moreInvoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/sshCVE-2026-39829Fix available7.5 High
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +64 more +66 moreInvoking bypass of certificate restrictions in golang.org/x/crypto/sshCVE-2026-39828Fix available6.3 Medium
- js-cookie javascript cookie, js-cookie, red hat cryostat 4 on rhel 9 +24 more +26 moreJavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injectionCVE-2026-46625Fix available7.5 High
- opensuse libsolv, red hat enterprise linux 10, enterprise linux 10.0 extended update support +12 more +14 moreLibsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv fileCVE-2026-9149Fix available6.5 Medium
- opensuse libsolv, red hat enterprise linux 10, enterprise linux 10.0 extended update support +12 more +14 moreLibsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksumsCVE-2026-9150Fix available6.5 Medium
- isc bind, bind 9, red hat enterprise linux 10 +6 more +8 moreSIG(0) validation during query flood may lead to undefined behaviorCVE-2026-5947Fix available7.5 High
- isc bind, bind 9, red hat enterprise linux 10 +9 more +11 moreInvalid handling of CLASS != INCVE-2026-5946Fix available7.5 High
- nlnet labs unbound, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreUnbounded name compression in certain cases causes degradation of serviceCVE-2026-44390Fix available6.9 Medium
- rsyncproject rsync, red hat discovery 2, enterprise linux 10 +5 more +7 moreRsync < 3.4.3 Integer Overflow Information DisclosureCVE-2026-43618Fix available6.1 Medium
- linux, linux kernel, red hat nvidia for rhel 10 +28 more +30 morenet: skbuff: propagate shared-frag marker through frag-transfer helpersCVE-2026-43503Public exploitFix available8.8 High
- nlnet labs unbound, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreCrash during DNSSEC validation of malicious contentCVE-2026-42959Fix available8.7 High
- nlnet labs unbound, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreJostle logic bypass degrades resolution performanceCVE-2026-42534Fix available6.9 Medium
- nlnet labs unbound, red hat data grid 8, enterprise linux 10 +10 more +12 moreLong list of incoming EDNS options degrades performanceCVE-2026-41292Fix available6.6 Medium
- isc bind, bind 9, red hat enterprise linux 10 +6 more +8 moreHeap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementationCVE-2026-3593Fix available7.4 High
- nlnet labs unbound, red hat enterprise linux 10, enterprise linux 6 +5 more +7 morePossible arbitrary code execution during DNSSEC validationCVE-2026-33278Fix available9.1 Critical
- isc bind, bind 9, red hat enterprise linux 10 +9 more +11 moreBIND 9 server memory exhaustion during GSS-API TKEY negotiationCVE-2026-3039Fix available7.5 High
- rsyncproject rsync, red hat discovery 2, enterprise linux 10 +5 more +7 moreRsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File WriteCVE-2026-29518Fix available7.3 High
- docker engine, moby docker engine, docker docker/daemon +20 more +22 moreDocker: `PUT /containers/{id}/archive` executes container binary on the hostCVE-2026-41567Public exploitFix available7.2 High
- vim, red hat enterprise linux 10, enterprise linux 10.2 extended update support +9 more +11 moreVim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code executionCVE-2026-43961Fix available7.8 High
- debian linux, linux kernel, red hat nvidia for rhel 10 +25 more +27 moreptrace: slightly saner 'get_dumpable()' logicCVE-2026-46333Public exploitFix available7.1 High
- amd epyc™ 7002 series processors, epyc™ embedded 7002 series processors, ryzen embedded v2000a series processors +31 more +33 moreImproper isolation of shared resources within the CPU operation cache on Zen 2-based products...CVE-2025-54518Fix available7.3 High
- apostrophecms sanitize-html, red hat multicluster engine for kubernetes 2.1, multicluster engine for kubernetes 2.11 +27 more +29 moreApostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`CVE-2026-44990Fix available9.3 Critical
- linux kernel, linux, red hat nvidia for rhel 10 +38 more +40 morenet: skbuff: preserve shared-frag marker during coalescingCVE-2026-46300In KEVPublic exploitFix availableEPSS 16.1%7.8 High
- protobufjs project protobufjs, protobufjs protobuf.js, red hat openshift pipelines +20 more +22 moreprotobufjs: Code injection through bytes field defaults in generated toObject codeCVE-2026-44293Fix available7.7 High
- protobufjs project protobufjs, protobufjs protobuf.js, red hat openshift pipelines +13 more +15 moreprotobufjs: Denial of service through unbounded protobuf recursionCVE-2026-44289Fix available7.5 High
- python urllib3, red hat exploit intelligence, external secrets operator for red hat openshift +48 more +50 moreurllib3: Decompression-bomb safeguards bypassed in parts of the streaming APICVE-2026-44432Fix available8.9 High
- dnsmasq, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreCVE-2026-5172CVE-2026-5172Public exploitFix available7.3 High
- dnsmasq, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreCVE-2026-4892CVE-2026-4892Fix available8.4 High
- dnsmasq, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreCVE-2026-4891CVE-2026-4891Fix available5.3 Medium
- dnsmasq, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreCVE-2026-4890CVE-2026-4890Fix available7.5 High
- shlomif xml::libxml, red hat enterprise linux 10, enterprise linux 10.0 extended update support +8 more +10 moreXML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequencesCVE-2026-8177Fix available7.5 High
- Show moreLoading…