Skip to contentRed Hat Openshift vulnerabilities
- apache kafka, red hat openshift serverless, build of apache camel 4 for quarkus 3 +16 more +18 moreApache Kafka: Missing JWT token validation in OAUTHBEARER authenticationCVE-2026-33557Fix available9.1 Critical
- vibrantlabsai ragas, red hat openshift ai (rhoai) +1 morevibrantlabsai RAGAS Collections util.py _try_process_url server-side request forgeryCVE-2026-65875.3 Medium
- red hat fast datapath for red hat enterprise linux 10, fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9 +3 more +5 moreOvn: ovn: information disclosure via crafted dhcpv6 packetsCVE-2026-53678.6 High
- rclone, red hat openshift api for data protection, advanced cluster management for kubernetes 2 +2 moreRClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command executionCVE-2026-41179Public exploitFix available9.2 Critical
- rclone, red hat openshift api for data protection, advanced cluster management for kubernetes 2 +2 moreRclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command executionCVE-2026-41176Fix availableEPSS 32.7%9.2 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreDnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processingCVE-2026-6507Fix available7.5 High
- hashicorp vault, vault enterprise, red hat openshift container platform 4 +1 more +3 moreVault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey OperationsCVE-2026-5807Fix available7.5 High
- hashicorp vault, vault enterprise, red hat openshift container platform 4 +1 more +3 moreVault Token Leaked to Backends via Authorization: Bearer Passthrough HeaderCVE-2026-4525Fix available7.5 High
- hashicorp vault, vault enterprise, red hat openshift container platform 4 +1 more +3 moreVault KVv2 Metadata and Secret Deletion Policy Bypass Denial-of-ServiceCVE-2026-3605Fix available8.1 High
- langchain langchain-text-splitters, red hat migration toolkit for applications 8, openshift lightspeed +2 more +4 moreLangChain: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect BypassCVE-2026-41481Fix available6.5 Medium
- josdejong mathjs, red hat developer hub, enterprise linux 10 +5 more +7 moreMath.js: Unsafe object property setter in mathjsCVE-2026-40897Public exploitFix available8.8 High
- protobufjs project protobufjs, protobufjs protobuf.js, red hat cryostat 4 +20 more +22 moreprotobufjs has an arbitrary code execution issueCVE-2026-41242Public exploitFix available9.4 Critical
- go-acme lego, red hat openshift dev spaces 3.28 +1 moreLego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 ProviderCVE-2026-40611Fix available8.8 High
- moby spdystream, red hat cert-manager operator for red hat openshift, cluster observability operator 1.5.0 +44 more +46 moreSpdyStream: DOS on CRICVE-2026-35469Fix available8.7 High
- samba rsync, red hat discovery 2, enterprise linux 10 +24 more +26 moreIn rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort...CVE-2026-41035Fix available7.4 High
- red hat openshift gitopsArgocd-image-updater: argocd image updater: cross-namespace privilege escalation via insufficient namespace validationCVE-2026-63889.1 Critical
- thymeleaf, red hat build of apache camel for spring boot 4, fuse 7 +7 more +9 moreImproper neutralization of specific syntax patterns for unauthorized expressions in ThymeleafCVE-2026-40478Known exploitedFix available9.1 Critical
- thymeleaf, red hat build of apache camel for spring boot 4, fuse 7 +7 more +9 moreImproper restriction of the scope of accessible objects in Thymeleaf expressionsCVE-2026-40477Known exploitedPublic exploitFix available9.1 Critical
- red hat lightspeed core, ai inference server, enterprise linux ai (rhel ai) 3 +1 more +3 moreFfmpeg: ffmpeg: denial of service and potential arbitrary code execution via signed integer overflow in dvd subtitle parserCVE-2026-6385Fix available6.5 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreSssd: out-of-bounds read in the sssdCVE-2026-6245Fix available5.5 Medium
- red hat openshift virtualization 4Kubevirt: kubevirt: unauthorized subresource access due to improper rbac evaluationCVE-2026-6383Fix available5.4 Medium
- @fastify/reply-from @fastify/http-proxy, @fastify/reply-from, fastify reply-from +3 more +5 more@fastify/reply-from vulnerable to connection header abuse enabling stripping of proxy-added headersCVE-2026-33805Fix available9.0 Critical
- legion of the bouncy castle inc. bc-java, red hat openshift developer tools and services, openshift developer tools and services 4.12 +30 more +32 moreUnbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.CVE-2026-3505Fix available8.7 High
- legion of the bouncy castle inc. bc-java, bcpix-lts, bcpkix-fips +43 more +45 morePKIX draft CompositeVerifier accepts empty signature sequence as valid.CVE-2026-5588Fix available6.3 Medium
- legion of the bouncy castle inc. bc-java, red hat cryostat 4, openshift developer tools and services +29 more +31 moreNon-constant time comparisons risk private key leakage in FrodoKEM.CVE-2026-5598Fix available8.9 High
- legion of the bouncy castle inc. bc-java, red hat cryostat 4, openshift developer tools and services +42 more +44 moreLDAP Injection Vulnerability in LDAPStoreHelper.javaCVE-2026-0636Fix available5.5 Medium
- legion of the bouncy castle inc. bc-java, red hat cryostat 4, openshift developer tools and services +44 more +46 moreGOSTCTR implementation unable to process more than 255 blocks correctlyCVE-2025-14813Fix available9.3 Critical
- containers podman, red hat enterprise linux 10, enterprise linux 8 +3 more +5 morePowerShell Command Injection in Podman HyperV MachineCVE-2026-33414Fix available4.0 Medium
- eclipse jetty, red hat hawtio hawtio 4.4.0, openshift developer tools and services +39 more +41 moreHTTP Request Smuggling via Chunked Extension Quoted-String ParsingCVE-2026-2332Public exploitFix available7.4 High
- follow-redirects, red hat cluster observability operator 1.5.0, cryostat 4 +79 more +81 morefollow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect TargetsCVE-2026-40895Fix available6.9 Medium
- jqlang jq, red hat ai inference server 3.2, ai inference server 3.3 +24 more +26 morejq: Algorithmic complexity DoS via hardcoded MurmurHash3 seedCVE-2026-40164Fix available7.5 High
- jqlang jq, red hat ai inference server 3.2, ai inference server 3.3 +38 more +40 morejq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted BuffersCVE-2026-39979Fix available6.9 Medium
- python pillow, red hat lightspeed core, openshift lightspeed +27 more +29 morePillow is vulnerable to a FITS GZIP decompression bombCVE-2026-40192Fix available8.7 High
- keras, keras-team keras-team/keras, red hat openshift ai (rhoai) +3 more +5 moreSafe Mode Bypass in keras-team/kerasCVE-2026-1462Fix available8.8 High
- red hat fast datapath for rhel 7, fast datapath for rhel 8, fast datapath for rhel 9 +6 more +8 moreOpenvswitch: open vswitch: denial of service via malformed ftp epasv commandCVE-2026-34956Fix available5.9 Medium
- josdejong mathjs, red hat cryostat 4, developer hub +6 more +8 moreUnsafe array index getter in mathjsCVE-2026-41139Fix available8.8 High
- axios, red hat cryostat 4, gatekeeper 3 +63 more +65 moreAxios has Unrestricted Cloud Metadata Exfiltration via Header Injection ChainCVE-2026-40175Public exploitFix available4.8 Medium
- red hat openshift ai (rhoai), redhat openshift ai, red hat openshift ai 2.16 +3 more +5 moreOdh-dashboard: odh dashboard kubernetes service account exposureCVE-2026-54838.5 High
- berriai litellm, red hat lightspeed core, ansible automation platform 2.6 +2 more +4 moreDuplicate Advisory: LiteLLM has a sandbox escape in custom-code guardrailCVE-2026-40217Public exploitFix availableEPSS 17.0%8.8 High
- libcap project libcap, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +34 more +36 moreLibcap: libcap: privilege escalation via toctou race condition in cap_set_file()CVE-2026-4878Fix available6.7 Medium
- axios, red hat cluster observability operator 1.5.0, cryostat 4 +60 more +62 moreAxios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRFCVE-2025-62718Fix available6.3 Medium
- hashicorp tooling, red hat openshift container platform 4, trusted artifact signer +1 more +3 moreGo-getter may allow to arbitrary filesystem reads through git operationsCVE-2026-4660Public exploitFix available7.5 High
- patrickjuchli basic-ftp, red hat developer hub 1.8, developer hub 1.9 +3 more +5 moreFTP Command Injection via CRLF in basic-ftpCVE-2026-39983Public exploitFix available8.6 High
- cryptography.io cryptography, red hat lightspeed core, migration toolkit for applications 8 +28 more +30 morecryptography has a buffer overflow if non-contiguous buffers were passed to APIsCVE-2026-39892Fix available6.9 Medium
- open-telemetry opentelemetry-go, opentelemetry, red hat cert manager support for red hat openshift release 1.19 +4 more +6 moreOpenTelemetry-Go has an incomplete fix for CVE-2026-24051: BSD kenv command not using absolute path enables PATH hijackingCVE-2026-39883Public exploitFix available7.3 High
- meta react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack +1 more +3 moreReact Server Components have a Denial of Service VulnerabilityCVE-2026-23869Public exploitFix available7.5 High
- redhat quay, red hat mirror registry for red hat openshift, mirror registry for red hat openshift 2 +8 more +10 moreMirror-registry: quay: server-side request forgery in proxy cache upstream registry configurationCVE-2026-325915.2 Medium
- redhat quay, red hat mirror registry for red hat openshift, mirror registry for red hat openshift 2.0 +8 more +10 moreMirror-registry: remote code execution using pickle deserializationCVE-2026-325907.1 High
- redhat quay, red hat mirror registry for red hat openshift, mirror registry for red hat openshift 2.0 +7 more +9 moreMirror-registry: quay: insecure direct object reference in blobuploadCVE-2026-325897.4 High
- red hat mirror registry for red hat openshift, mirror registry for red hat openshift 2 +1 moreMirror-registry: openshift mirror registry: user enumeration via authentication error messagesCVE-2025-142435.3 Medium
- Show moreLoading…