Skip to contentRed Hat Enterprise Linux 9.4 Update Services For Sap Solutions vulnerabilities
- red hat agentic cluster security suite 0.2, cost management 4, advanced cluster security for kubernetes 4.11 +55 more +57 moreCa-certificates: distrust emudhra intermediate ca certificates due to security concernsCVE-2026-114406Fix available6.8 Medium
- gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +8 more +10 moreLibsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growthCVE-2026-102560Fix available8.6 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreLibsoup: libsoup: heap buffer overflow during websocket client-frame maskingCVE-2026-102559Fix available8.6 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreLibsoup: libsoup: heap buffer overflow during websocket receive-buffer growthCVE-2026-102558Fix available8.6 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreLibsoup: libsoup: heap buffer overflow during websocket message reassemblyCVE-2026-102557Fix available8.6 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreLibsoup: libsoup: heap buffer overflow from websocket pong signal type confusionCVE-2026-102556Fix available8.6 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +5 more +7 moreFlatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etcCVE-2026-97024Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +5 more +7 moreFlatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/binCVE-2026-97023Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 extended lifecycle support +11 more +13 moreFlatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systemsCVE-2026-96280Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 extended lifecycle support +11 more +13 moreFlatpak: flatpak: arbitrary write access as root via extra-data extractionCVE-2026-96275Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 extended lifecycle support +15 more +17 moreSudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorizationCVE-2026-96512Public exploitFix available7.8 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +17 more +19 moreLibrsvg: use-after-free when xml includes have duplicated entitiesCVE-2026-96889Public exploitFix available7.8 High
- red hat build of apache camel 3.33.4.redhat, build of apache camel 4 for quarkus 3, build of apicurio registry 3 +19 more +21 moreResteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard configCVE-2026-89058Fix available7.4 High
- red hat build of apache camel 3.33.4.redhat, build of apache camel 4 for quarkus 3, build of apicurio registry 3 +19 more +21 moreResteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)CVE-2026-890597.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 8 +10 more +12 moreFlatpak-builder: host code execution via `git am` hook execution in patch source extraction (`use-git-am`)CVE-2026-86320Fix available7.8 High
- [unknown] gvfs, red hat enterprise linux 10, enterprise linux 10.0 extended update support +7 more +9 moreGvfs: gvfs-admin socket ownership race permits local rootCVE-2026-88924Fix available7.0 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +12 more +14 moreFreeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted urlCVE-2026-181478.1 High
- red hat cert manager support for red hat openshift release 1.20, cost management on-premise 1, enterprise linux 10 +22 more +24 moreLibxml2: double-free/uaf in libxml2 python bindingsCVE-2026-74860Fix available8.5 High
- red hat certificate system 9, enterprise linux 10, enterprise linux 10.0 extended update support +13 more +15 morePki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)CVE-2026-76561Fix available7.2 High
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8, directory server 11.9 for rhel 8 +19 more +21 more389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary propertyCVE-2026-18922Fix available9.8 Critical
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8, directory server 11.9 for rhel 8 +20 more +22 more389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_searchCVE-2026-184537.5 High
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8, directory server 11.9 for rhel 8 +20 more +22 more389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()CVE-2026-183557.5 High
- red hat directory server 11, directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8 +21 more +23 more389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dnCVE-2026-765607.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +12 more +14 moreFreeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of serviceCVE-2026-796788.1 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +12 more +14 moreIpa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aciCVE-2026-76578Public exploit9.8 Critical
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 extended lifecycle support +13 more +15 moreCorosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassemblyCVE-2026-81665Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 8 +11 more +13 moreBubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setupCVE-2026-87766Fix available8.8 High
- [unknown] gvfs, red hat enterprise linux 10, enterprise linux 10.0 extended update support +13 more +15 moreGvfs: sftp: heap-based buffer overflow in read_reply()CVE-2026-84268Fix available8.8 High
- the webkitgtk team webkitgtk, webkit, red hat enterprise linux 6 +13 more +15 moreWebkitgtk: validate the full featurelist array once in opentypeverticaldata findfeatureCVE-2026-83596Fix available8.8 High
- red hat cost management on-premise 1, enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 moreGdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elfCVE-2026-13732Fix available7.0 High
- red hat build of apache camel 3.33.3.sp1, build of apache camel 4 for quarkus 3, build of apicurio registry 3 +14 more +16 moreResteasy-core: resteasy sourceprovider remote unauthenticated file readCVE-2026-17615Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +13 more +15 moreRsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() functionCVE-2026-78002Fix available7.5 High
- the webkitgtk team webkitgtk, webkit, red hat enterprise linux 6 +13 more +15 moreWebkitgtk: use-after-free of jscvalue function parametersCVE-2026-78376Fix available8.8 High
- freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreFreeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationshipsCVE-2026-118619.6 Critical
- freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreIpa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body readCVE-2026-731987.5 High
- freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreIpa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastoreCVE-2026-130978.7 High
- freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreIpa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body readCVE-2026-731977.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +13 more +15 moreLibvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflowCVE-2026-18917Fix available7.8 High
- rsyslog, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 moreRsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogdCVE-2026-19654Fix available7.5 High
- gstreamer gst-plugins-good, gstreamer, red hat enterprise linux 10 +14 more +16 moreGstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/writeCVE-2026-73433Fix available6.6 Medium
- gstreamer gst-plugins-good, gstreamer, red hat enterprise linux 10 +14 more +16 moreGstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsingCVE-2026-73434Fix available6.1 Medium
- freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreFreeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writesCVE-2026-195508.2 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +12 more +14 moreMrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulationCVE-2026-72694Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +13 more +15 moreLibvirt: swtpm privilege escalation via symlink followingCVE-2026-63622Fix available7.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreGimp: gimp: arbitrary code execution in psd plugin due to unsigned underflowCVE-2026-59090Fix available8.4 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +5 more +7 moreGstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds readCVE-2026-19389Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 extended lifecycle support +11 more +13 moreGstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec ima/dvi adpcm decoderCVE-2026-19387Fix available7.6 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 extended lifecycle support - extension +25 more +27 moreDracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()CVE-2026-15816Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 extended lifecycle support +11 more +13 moreGstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloadersCVE-2026-18649Public exploitFix available7.5 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +6 more +8 moreGimp: gimp apng loader heap-buffer-overflow when fctl width exceeds ihdr width (file-png.c)CVE-2026-42169Fix available7.3 High
- Show moreLoading…