Skip to contentRed Hat Openshift vulnerabilities
- linux, linux kernel, red hat enterprise linux 10 +26 more +28 morenetfilter: flowtable: strictly check for maximum number of actionsCVE-2026-43329Fix available7.8 High
- linux, linux kernel, red hat nvidia for rhel 10 +30 more +32 morexfrm: esp: avoid in-place decrypt on shared skb fragsCVE-2026-43284Public exploitFix availableEPSS 94.2%8.8 High
- go standard library net/mail, golang go, red hat assisted installer for red hat openshift container platform 2 +108 more +110 moreQuadratic string concatenation in consumePhrase in net/mailCVE-2026-42499Fix available7.5 High
- go standard library net/mail, golang go, red hat assisted installer for red hat openshift container platform 2 +107 more +109 moreQuadratic string concatentation in consumeComment in net/mailCVE-2026-39820Fix available7.5 High
- go standard library net/http, golang go, http2 +106 more +108 moreInfinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCVE-2026-33814Fix available7.5 High
- go standard library net, golang go, red hat assisted installer for red hat openshift container platform 2 +145 more +147 moreCrash when handling long CNAME response in netCVE-2026-33811Fix available7.5 High
- huggingface diffusers, red hat ai inference server, enterprise linux ai (rhel ai) 3 +2 more +4 moreDiffusers: `trust_remote_code` bypass via `custom_pipeline` and local custom componentsCVE-2026-44513Fix available8.8 High
- lightningai pytorch lightning, lightning-ai pytorch-lightning, red hat ai inference server +2 more +4 moreCompromise of PyTorch Lightning PyPi Package VersionsCVE-2026-44484Fix available9.3 Critical
- kludex python-multipart, red hat exploit intelligence, openshift lightspeed +11 more +13 morePython-Multipart: Denial of Service via unbounded multipart part headersCVE-2026-42561Fix available7.5 High
- jupyter jupyterlab, notebook, red hat migration toolkit for applications 8.2 +2 more +4 morejupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted contentCVE-2026-42557Fix available8.6 High
- lepture mistune, red hat migration toolkit for applications 8.2, openshift ai (rhoai) +2 more +4 moreMistune ReDoS in LINK_TITLE_RE allows denial of service with crafted Markdown titlesCVE-2026-33079Fix available8.7 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 moreKVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulationCVE-2026-43133Fix available7.9 High
- linux, linux kernel, red hat enterprise linux 10 +12 more +14 morenetfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiryCVE-2026-43114Fix available9.4 Critical
- linux, linux kernel, red hat enterprise linux 10 +24 more +26 morefs/smb/client: fix out-of-bounds read in cifs_sanitize_prepathCVE-2026-43112Fix available8.8 High
- beaugunderson ip-address, red hat confidential compute attestation, cryostat 4 +38 more +40 moreip-address: XSS in Address6 HTML-emitting methodsCVE-2026-42338Fix available5.3 Medium
- jupyter jupyterlab, red hat migration toolkit for applications 8.2, openshift ai (rhoai) +1 more +3 moreJupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request.CVE-2026-42266Fix available8.8 High
- jupyter server, jupyter-server jupyter server, red hat migration toolkit for applications 8.2 +1 more +3 morejupyter-server CORS origin validation bypass via unanchored regex in allow_origin_patCVE-2026-40110Fix available7.6 High
- jupyter server, jupyter-server jupyter server, red hat migration toolkit for applications 8.2 +2 more +4 morejupyter-server path traversal allows access to sibling directories sharing root_dir name prefixCVE-2026-35397Public exploitFix available7.6 High
- apache thrift, red hat ai inference server, build of apache camel 3.33 for quarkus 3.33.2.sp1 +7 more +9 moreApache Thrift: Rust implementation vulnerable to CVE-2020-13949 patternCVE-2026-43868Fix available5.3 Medium
- apache thrift, red hat cryostat 4 on rhel 9, multicluster global hub +24 more +26 moreApache Thrift: TSSLTransportFactory.java hostname verificationCVE-2026-43869Fix available7.3 High
- axios, red hat cryostat 4, gatekeeper 3 +45 more +47 moreAxios: Prototype pollution read-side gadgets in HTTP adapter allow credential injection and request hijackingCVE-2026-42264Fix available7.4 High
- openstack ironic, red hat openshift container platform 4, openstack platform 16.2 +2 more +4 moreOpenStack Ironic has an Incorrect Resource Transfer Between SpheresCVE-2026-42997Fix available7.7 High
- ruby net-imap, red hat 3scale api management platform 2, enterprise linux 10 +19 more +21 morenet-imap: Command Injection via unvalidated Symbol inputsCVE-2026-42258Fix available5.8 Medium
- argoproj argo workflows, argo-workflows, red hat openshift ai (rhoai) +2 moreArgo Workflows has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/SecureCVE-2026-42296Fix available8.1 High
- argoproj argo workflows, argo-workflows, red hat openshift ai (rhoai) +2 moreArgo Workflows: Unauthenticated Memory Exhaustion (DoS) in Webhook InterceptorCVE-2026-42294Fix available8.2 High
- argoproj argo workflows, argo-workflows, red hat openshift ai (rhoai) +2 moreArgo Workflows Is Missing Authorization in Sync ConfigMap ProviderCVE-2026-42297Fix available8.5 High
- quarkus, red hat cryostat 4 on rhel 9, hawtio hawtio 4.4.0 +16 more +18 moreQuarkus authorization bypass via semicolon path normalization inconsistencyCVE-2026-39852Fix available8.8 High
- apache opennlp, red hat build of apache camel for spring boot 4, data grid 8 +4 more +6 moreApache OpenNLP: XXE via Dictionary Parsing in DictionaryEntryPersistorCVE-2026-40682Fix available9.1 Critical
- apache opennlp, red hat build of apache camel for spring boot 4, data grid 8 +5 more +7 moreApache OpenNLP: Arbitrary Class Instantiation via Model Manifest in ExtensionLoaderCVE-2026-42027Fix available9.8 Critical
- apache opennlp, red hat data grid 8, fuse 7 +2 more +4 moreApache OpenNLP: OOM DoS via Unbounded Array Allocation in AbstractModelReaderCVE-2026-42440Fix available7.5 High
- websockets ws, red hat cryostat 4, cryostat 4 on rhel 9 +47 more +49 morews: Uninitialized memory disclosureCVE-2026-45736Fix available4.4 Medium
- prometheus, red hat file integrity operator, logging for red hat openshift 6 +53 more +55 morePrometheus: remote read endpoint allows denial of service via crafted snappy payloadCVE-2026-42154Public exploitFix available7.5 High
- prometheus, red hat custom metric autoscaler operator for red hat openshift, file integrity operator +52 more +54 morePrometheus Azure AD remote write OAuth client secret exposed via config APICVE-2026-42151Fix available7.5 High
- containers bubblewrap, red hat enterprise linux 10, enterprise linux 8 +2 more +4 morebubblewrap vulnerable to privilege escalation in setuid mode via ptraceCVE-2026-41163Fix available8.7 High
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +32 more +34 moreGnutls: gnutls: security bypass due to incorrect name constraint handlingCVE-2026-42011Fix available7.4 High
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +36 more +38 moreGnutls: gnutls: authentication bypass via nul character in usernameCVE-2026-42010Fix available7.1 High
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +29 more +31 moreGnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassemblyCVE-2026-33846Fix available7.5 High
- argoproj argo cd, argo-cd, red hat openshift data foundation 4 +3 more +5 moreArgoCD ServerSideDiff is vulnerable to Kubernetes Secret ExtractionCVE-2026-42880Public exploitFix available9.6 Critical
- argoproj argo cd, red hat openshift data foundation 4, openshift gitops +2 moreIn Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext...CVE-2026-438247.7 High
- libssh2, red hat enterprise linux 6, enterprise linux 7 +9 more +11 morelibssh2 userauth.c userauth_password integer overflowCVE-2026-7598Fix available6.9 Medium
- linux, linux kernel, red hat nvidia for rhel 10 +26 more +28 moreip6_tunnel: clear skb2->cb[] in ip4ip6_err()CVE-2026-43037Fix available9.8 Critical
- openstack ironic-python-agent, ironic python agent, red hat openshift container platform 4 +4 more +6 moreOpenStack Ironic Python Agent Includes Functionality from Untrusted Control SphereCVE-2026-43003Fix available8.0 High
- openstack keystone, red hat openstack platform 13 (queens), openstack platform 16.2 +3 more +5 moreOpenStack Keystone has an Incorrect Authorization IssueCVE-2026-43001Fix available7.9 High
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +32 more +34 moreGnutls: gnutls: denial of service via dtls zero-length fragmentCVE-2026-33845Fix available7.5 High
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +13 more +15 moreGnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp responseCVE-2026-3832Fix available3.7 Low
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +31 more +33 moreGnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparisonCVE-2026-3833Fix available6.5 Medium
- qt, qt qtdeclarative, red hat multicluster global hub +10 more +12 morePossible QML code injection in VectorImage componentCVE-2025-14576Fix available7.4 High
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +14 more +16 moreGnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removalCVE-2026-5419Fix available3.7 Low
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +32 more +34 moreGnutls: gnutls: information disclosure via heap overread in rsa key exchangeCVE-2026-5260Fix available8.2 High
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +21 more +23 moreGnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handlingCVE-2026-42015Fix available5.3 Medium
- Show moreLoading…