Skip to contentRed Hat Container Native Virtualization 4.15 vulnerabilities
- red hat container native virtualization 4.12, container native virtualization 4.13, container native virtualization 4.14 +8 more +10 moreKubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to hostCVE-2026-13622Fix available8.8 High
- kubevirt, red hat container native virtualization 4.12, container native virtualization 4.13 +10 more +12 moreKubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruptionCVE-2026-13201Fix available7.3 High
- axios, red hat cryostat 4, gatekeeper 3 +79 more +81 moreAxios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config MergeCVE-2026-44495Fix available7.0 High
- red hat container native virtualization 4.12, container native virtualization 4.13, container native virtualization 4.14 +7 more +9 moreKubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerabilityCVE-2026-7374Fix available9.9 Critical
- axios, red hat cryostat 4, gatekeeper 3 +59 more +61 moreAxios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`CVE-2026-42044Fix available6.5 Medium
- moby spdystream, red hat cert-manager operator for red hat openshift, cluster observability operator 1.5.0 +44 more +46 moreSpdyStream: DOS on CRICVE-2026-35469Fix available8.7 High
- axios, red hat cryostat 4, gatekeeper 3 +63 more +65 moreAxios has Unrestricted Cloud Metadata Exfiltration via Header Injection ChainCVE-2026-40175Public exploitFix available4.8 Medium