Skip to contentRed Hat Openshift vulnerabilities
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 moreKronosnet: kronosnet: memory corruption and out-of-bounds access via malformed network packet defragmentationCVE-2026-15813Fix available6.5 Medium
- red hat logging subsystem for red hat openshift, multicluster engine for kubernetes, multicluster engine for kubernetes 2.1 +17 more +19 moreHypershift: konnectivity proxy-server accepts agent connections without validating client certificatesCVE-2026-162429.4 Critical
- xdg xdgmime, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +22 more +24 moreXdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.cCVE-2026-16118Fix available7.1 High
- feast feature server, red hat openshift ai (rhoai) +1 moreFeast: resource exhaustion via websocket endpointCVE-2026-235387.5 High
- red hat confidential compute attestation, openshift container platform 4, openshift container platform 4.12 +11 more +13 moreGithub.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home envCVE-2026-158097.8 High
- red hat openshift gitopsGitops-operator: gitops-operator: missing allowednamespace check in reconcilerhook for clusterrole/role cases enables potential privilege escalation and dosCVE-2026-142517.7 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreQemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keysCVE-2026-12080Public exploitFix available7.3 High
- red hat openshift gitops, argoproj argo-helm, red hat openshift data foundation 4 +1 more +3 moreArgo-cd: argo cd unauthenticated remote code execution in repo-server via generatemanifest grpc endpointCVE-2026-154168.9 High
- red hat openshift distributed tracing 3.10.1Tempo-operator: tempo operator: query rbac bypassCVE-2026-621476.5 Medium
- red hat openshift ai 2.25, openshift ai 3.4 +1 moreVllm-orchestrator-gateway: vllm-orchestrator-gateway: authorization header and full chat payloads logged at hard-coded debug defaultCVE-2026-155747.5 High
- red hat openshift ai 2.25, openshift ai 3.4 +1 moreGuardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)CVE-2026-151439.3 Critical
- red hat cost management on-premise 1, enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: heap overflow oob read while parsing a tar archive contains a pax extended headerCVE-2026-15028Fix available3.9 Low
- red hat openshift ai 2.25, openshift ai 3.3, openshift ai 3.4 +2 moreGuardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)CVE-2026-153789.3 Critical
- redhat openshift ai, red hat openshift ai 2.25, openshift ai 3.3 +1 more +3 moreGuardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regexCVE-2026-151546.5 Medium
- trustyai-explainability trustyai-service-operator, red hat openshift ai (rhoai) +1 moreTrustyai-service-operator: trustyai service operator: gorch port bypass when auth is enabledCVE-2026-150636.3 Medium
- trustyai trustyai-service-operator, red hat openshift ai (rhoai) +1 moreTrustyai-service-operator: trustyai service operator: unauthenticated access to ai guardrails and orchestrator apisCVE-2026-150446.3 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +24 more +26 moreSssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypassCVE-2026-14476Fix available8.0 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +24 more +26 moreSssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalationCVE-2026-14474Fix available8.8 High
- red hat confidential compute attestation, ansible automation platform 2, ansible automation platform 2.6 for rhel 9 +12 more +14 moreSequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusionCVE-2026-42784Fix available7.4 High
- feast feature server, red hat openshift ai (rhoai) +1 moreFeast: unauthenticated arbitrary file writeCVE-2026-235379.1 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreRpm: heap buffer overflow in ndb slot table parsingCVE-2026-44605Fix available5.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +37 more +39 moreGlib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"CVE-2026-58016Fix available7.5 High
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +35 more +37 moreGlib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receiveCVE-2026-58015Fix available5.9 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +38 more +40 moreGlib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"CVE-2026-58014Fix available7.3 High
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"CVE-2026-58013Fix available6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()CVE-2026-58012Fix available6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimeCVE-2026-58011Fix available6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()CVE-2026-58010Fix available6.5 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +8 more +10 moreSssd: use-after-free crash in sssd' 'sssd_pam' processCVE-2026-12610Fix available6.4 Medium
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +29 more +31 moreLibarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()CVE-2026-14164Fix available7.5 High
- p11-kit project p11-kit, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +16 more +18 moreP11-kit: stack exhaustion via unbounded recursion in rpc attribute parsingCVE-2026-13757Fix available6.2 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +17 more +19 moreLibtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff imageCVE-2026-12912Fix available7.3 High
- fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +49 more +51 morefast-uri vulnerable to host confusion via failed IDN canonicalizationCVE-2026-13676Fix available7.5 High
- attr project attr, red hat cert manager support for red hat openshift release 1.19, discovery 2 +8 more +10 moreattr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattrCVE-2026-54371Fix available8.4 High
- acl project acl, red hat discovery 2, enterprise linux 10 +11 more +13 moreacl < 2.4.0 Symlink Traversal Privilege Escalation via libacl FunctionsCVE-2026-54369Fix available8.4 High
- red hat openshift dev spaces 3.29, redhat openshift dev spaces +1 moreVscode-java: vscode: command injection vulnerability in the javadoc hover provider of the vscode-java extensionCVE-2026-128568.8 High
- kernel util-linux, red hat cost management on-premise 1, enterprise linux 10 +10 more +12 moreUtil-linux: util-linux: heap use-after-free in libblkid nested partition probingCVE-2026-13595Fix available6.8 Medium
- ffmpeg, red hat ai inference server, enterprise linux ai (rhel ai) 3 +6 more +8 moreFFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()CVE-2026-58049Fix available8.8 High
- envoyproxy envoy, red hat openshift service mesh 2, openshift service mesh 3 +2 moreEnvoy: Segmentation fault when using %REQUESTED_SERVER_NAME% in log formatCVE-2026-47220Fix available7.5 High
- kubevirt, red hat openshift virtualization 4, redhat openshift virtualization +2 moreVirt-controller-rhel9: kubevirt: kubevirt: multus default-network annotation injection via unvalidated tenant networkname when externalnetresourceinjection is enabledCVE-2026-134344.9 Medium
- kubevirt, red hat openshift virtualization 4, redhat openshift virtualization +2 moreKubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of serviceCVE-2026-133223.8 Low
- kubevirt, red hat openshift virtualization 4, redhat openshift virtualization +2 moreVirt-api-rhel9: kubevirt: kubevirt: ssrf in virt-api port-forward via unvalidated guest-agent-reported ipCVE-2026-13318Fix available6.4 Medium
- kubevirt, red hat openshift virtualization 4, redhat openshift virtualization +2 moreKubevirt: kubevirt: symlink following in writetocachedfile allows host file overwrite from virt-launcherCVE-2026-132184.2 Medium
- kubevirt, red hat openshift virtualization 4, redhat openshift virtualization +2 moreKubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request bodyCVE-2026-132086.5 Medium
- lepture mistune, red hat migration toolkit for applications 8, openshift ai (rhoai) +3 more +5 moreMistune: Potential DoS via quadratic-time parsing in parse_link_textCVE-2026-49851Fix available8.7 High
- feast-dev feast, red hat openshift ai (rhoai), openshift ai 3.4 +2 moreFeast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC DeserializationCVE-2026-56121Public exploitFix available9.3 Critical
- jenkins script security, jenkins project script security plugin, red hat openshift developer tools and services +11 more +13 moreJenkins Script Security Plugin has a script security bypass vulnerabilityCVE-2026-57281Fix available7.5 High
- fasterxml jackson-databind, red hat cryostat 4 on rhel 9, openshift developer tools and services +44 more +46 morejackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)CVE-2026-54513Fix available8.1 High
- thekelleys dnsmasq, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreDnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validationCVE-2026-12969Fix available5.3 Medium
- redhat cluster logging operator, red hat logging subsystem for red hat openshift 6.5, redhat logging subsystem for red hat openshift +2 moreOpenshift/cluster-logging-operator: cluster logging operator creates and forwards serviceaccount tokens without verifying clf creator authorizationCVE-2026-10609Fix available6.8 Medium
- Show moreLoading…