Skip to contentRed Hat Ai Inference Server vulnerabilities
- jqlang jq, red hat ai inference server 3.2, ai inference server 3.3 +38 more +40 morejq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted BuffersCVE-2026-39979Fix available6.9 Medium
- python software foundation cpython, red hat ai inference server 3.2, ai inference server 3.3 +21 more +23 moreIncomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()CVE-2026-4786Fix available7.0 High
- python pillow, red hat lightspeed core, openshift lightspeed +27 more +29 morePillow is vulnerable to a FITS GZIP decompression bombCVE-2026-40192Fix available8.7 High
- python software foundation cpython, red hat ai inference server 3.2, ai inference server 3.3 +22 more +24 moreUse-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressureCVE-2026-6100Fix available9.1 Critical
- libcap project libcap, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +34 more +36 moreLibcap: libcap: privilege escalation via toctou race condition in cap_set_file()CVE-2026-4878Fix available6.7 Medium
- cryptography.io cryptography, red hat lightspeed core, migration toolkit for applications 8 +28 more +30 morecryptography has a buffer overflow if non-contiguous buffers were passed to APIsCVE-2026-39892Fix available6.9 Medium
- go standard library crypto/x509, golang go, red hat assisted installer for red hat openshift container platform 2 +103 more +105 moreCase-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509CVE-2026-33810Fix available8.2 High
- go standard library crypto/tls, golang go, red hat assisted installer for red hat openshift container platform 2 +117 more +119 moreUnauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tlsCVE-2026-32283Fix available7.5 High
- go standard library crypto/x509, golang go, red hat assisted installer for red hat openshift container platform 2 +140 more +142 moreUnexpected work during chain building in crypto/x509CVE-2026-32280Fix available7.5 High
- academysoftwarefoundation openexr, red hat ai inference server 3.3, enterprise linux 10 +9 more +11 moreOpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/WriteCVE-2026-34588Fix available8.6 High
- vim, red hat ai inference server 3.2, ai inference server 3.3 +26 more +28 moreVim modeline bypass via various options affects Vim < 9.2.0276CVE-2026-34982Fix available8.2 High
- vllm, red hat ai inference server, ai inference server 3.2 +3 more +5 morevLLM Affected by Denial of Service via Unbounded Frame Count in video/jpeg Base64 ProcessingCVE-2026-34755Fix available6.5 Medium
- vllm, red hat ai inference server, ai inference server 3.2 +3 more +5 morevLLM Affected by Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API ServerCVE-2026-34756Fix available6.5 Medium
- sudo project sudo, red hat ai inference server 3.3, enterprise linux 10 +25 more +27 moreIn Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during...CVE-2026-35535Fix available7.4 High
- openbsd openssh, red hat multicluster engine for kubernetes, openshift pipelines +29 more +31 moreIn OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome...CVE-2026-35385Fix available7.5 High
- gnome gdk-pixbuf, red hat ai inference server 3.2, ai inference server 3.3 +35 more +37 moreGdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg imageCVE-2026-5201Public exploitFix available7.5 High
- libarchive, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +36 more +38 moreLibarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processingCVE-2026-5121Fix available7.5 High
- vllm, red hat ai inference server, ai inference server 3.2 +5 more +7 morevLLM's hardcoded trust_remote_code=True in NemotronVL and KimiK25 bypasses user security opt-outCVE-2026-27893Fix available8.8 High
- libtiff, debian linux, red hat ai inference server 3.2 +30 more +32 moreLibtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processingCVE-2026-4775Fix available7.8 High
- vim, red hat ai inference server 3.2, ai inference server 3.3 +28 more +30 moreVim affected by Command injection via newline in glob()CVE-2026-33412Fix available5.6 Medium
- python, python software foundation cpython, red hat ai inference server 3.2 +24 more +26 morewebbrowser.open() allows leading dashes in URLsCVE-2026-4519Fix available7.0 High
- libarchive, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +39 more +41 moreLibarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processingCVE-2026-4424Fix available7.5 High
- grpc, grpc grpc-go, red hat assisted installer for red hat openshift container platform 2 +166 more +168 moregRPC-Go has an authorization bypass via missing leading slash in :pathCVE-2026-33186Public exploitFix available9.1 Critical
- nghttp2, red hat jboss core services for rhel 8, jboss core services on rhel 7 +37 more +39 morenghttp2 Denial of service: Assertion failure due to the missing state validationCVE-2026-27135Fix available7.5 High
- giflib project giflib, red hat ai inference server 3.2, build of openjdk 1.8 +24 more +26 moreBuffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of...CVE-2026-26740Fix available8.2 High
- anyscale ray, red hat ai inference server 3.2, enterprise linux ai (rhel ai) 3 +3 more +5 moreRay Dashboard <= 2.8.0 Path Traversal Leading to Local File DisclosureCVE-2026-32981Fix available8.7 High
- pyasn1, red hat migration toolkit for containers, migration toolkit for virtualization +40 more +42 morepyasn1 Vulnerable to Denial of Service via Unbounded RecursionCVE-2026-30922Fix available7.5 High
- red hat cert manager support for red hat openshift release 1.18, ai inference server 3.2, ai inference server 3.3 +22 more +24 moreLibarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchiveCVE-2026-4111Fix available7.5 High
- jpadilla pyjwt, red hat openshift lightspeed, ai inference server +27 more +29 morePyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)CVE-2026-32597Fix available7.5 High
- debian linux, openbsd openssh, canonical ubuntu linux +39 more +41 moreVulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This...CVE-2026-3497Fix available2.7 Low
- defnull multipart, red hat lightspeed core, openshift lightspeed +8 more +10 moreReDoS in multipart 1.3.0 - `parse_options_header()`CVE-2026-28356Fix available7.5 High
- giflib, red hat ai inference server 3.2, ai inference server 3.3 +18 more +20 moreGiflib contains a double-free vulnerability that is the result of a shallow copy in...CVE-2026-23868Fix available5.1 Medium
- vllm, red hat ai inference server, enterprise linux ai (rhel ai) 3 +2 more +4 moreSSRF Protection Bypass in vLLMCVE-2026-25960Fix available7.1 High
- mlc-ai xgrammar, red hat ai inference server, ai inference server 3.2 +3 more +5 morexgrammar: Multi-layer nesting causes DoSCVE-2026-25048Fix available8.7 High
- academysoftwarefoundation openexr, red hat ai inference server 3.3, enterprise linux 10 +17 more +19 moreOpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB writeCVE-2026-27622Fix available8.4 High
- mozilla firefox, thunderbird, red hat ai inference server 3.3 +18 more +20 moreHeap buffer overflow in libvpxCVE-2026-2447Fix available8.8 High
- python pillow, red hat openshift lightspeed, ai inference server +24 more +26 morePillow has an out-of-bounds write when loading PSD imagesCVE-2026-25990Fix available8.6 High
- red hat ai inference server, enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +2 more +4 moreDiskCache has unsafe pickle deserializationCVE-2025-698729.8 Critical
- libpng, red hat ai inference server 3.3, build of openjdk 1.8 +34 more +36 moreLIBPNG has a heap buffer overflow in png_set_quantizeCVE-2026-25646Fix available8.3 High
- dun munge, debian linux, red hat ai inference server 3.3 +16 more +18 moreMUNGE has a buffer overflow in message unpacking allows key leakage and credential forgeryCVE-2026-25506Fix available7.7 High
- red hat cert manager support for red hat openshift release 1.18, ai inference server 3.2, ai inference server 3.3 +23 more +25 moreGnutls: gnutls: denial of service via excessive resource consumption during certificate verificationCVE-2025-14831Fix available5.3 Medium
- vllm, red hat ai inference server, ai inference server 3.2 +5 more +7 morevLLM leaks a heap address when PIL throws an errorCVE-2026-22778Public exploitFix availableEPSS 18.3%9.8 Critical
- vllm, red hat ai inference server, ai inference server 3.2 +5 more +7 morevLLM vulnerable to Server-Side Request Forgery (SSRF) in `MediaConnector`CVE-2026-24779Fix available7.1 High
- openssl, red hat cost management 4, ai inference server 3.2 +316 more +318 moreStack buffer overflow in CMS (Auth)EnvelopedData parsingCVE-2025-15467Public exploitFix availableEPSS 74.8%8.8 High
- fastapiexpert python-multipart, red hat lightspeed core, openshift lightspeed +11 more +13 morePython-Multipart has Arbitrary File Write via Non-Default ConfigurationCVE-2026-24486Public exploitFix available8.6 High
- google protobuf, red hat ai inference server 3.2, ai inference server 3.3 +14 more +16 moreDenial of Service in Python ProtobufCVE-2026-0994Public exploitFix available8.2 High
- google sentencepiece, red hat ai inference server, enterprise linux ai (rhel ai) 3 +3 more +5 moreInvalid Memory Access in Sentencepiece,CVE-2026-1260Fix available8.5 High
- pypa wheel, red hat discovery 2 for rhel 10, discovery 2 for rhel 8 +57 more +59 morewheel Allows Arbitrary File Permission Modification via Path TraversalCVE-2026-24049Public exploitFix available7.1 High
- vllm, red hat ai inference server, ai inference server 3.2 +6 more +8 morevLLM affected by RCE via auto_map dynamic module loading during model initializationCVE-2026-22807Public exploitFix available8.8 High
- pyasn1, debian linux, red hat lightspeed core +48 more +50 morepyasn1 has a DoS vulnerability in decoderCVE-2026-23490Fix available7.5 High
- Show moreLoading…