Skip to contentRed Hat Enterprise Linux 9 vulnerabilities
- red hat certificate system 10, certificate system 11, certificate system 9 +5 more +7 morePki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment pathCVE-2026-170393.1 Low
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreAccountsservice: accountsservice: arbitrary file read via seticonfile for systemd-homed usersCVE-2026-167435.5 Medium
- red hat enterprise linux 10, enterprise linux 9, hardened images +3 more +5 moreDbus-broker: dbus-broker: session bus denial of service via emfile during peer setupCVE-2026-16730Fix available5.5 Medium
- red hat certificate system 9, enterprise linux 10, enterprise linux 8 +1 more +3 moreRhcs: memory leak during https connection leads to denial of serviceCVE-2026-123535.3 Medium
- gnome gdk-pixbuf, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreGdk-pixbuf: out-of-bounds read in ico parserCVE-2026-167685.3 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreLibcupsfilters: cups-filters: libcupsfilters: cpu exhaustion via infinite loop in cfieee1284normalizemakemodel()CVE-2026-646117.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreNano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling.CVE-2026-6390Fix available6.8 Medium
- red hat directory server 11, directory server 12, directory server 13 +5 more +7 more389-ds-base: 389-ds-base: heap-buffer-overflow in rdn_av_swap on quoted multivalued rdnCVE-2026-165605.3 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreSbc: sbc: heap out-of-bounds read via crafted sbc audio frameCVE-2026-16473Fix available4.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreLibarchive: libarchive: signed integer overflow in archive_write_zip_headerCVE-2026-16517Fix available2.9 Low
- red hat ansible automation platform 2, enterprise linux 10, enterprise linux 8 +4 more +6 moreAnsible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)CVE-2026-16493Fix available7.8 High
- libssh, red hat enterprise linux 10, enterprise linux 8 +11 more +13 moreLibssh: libssh: authentication bypass via missing gssapi principal checkCVE-2026-59851Fix available8.8 High
- libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 moreLibssh: libssh: use-after-free via data callbacks on closed channelsCVE-2026-59850Fix available4.3 Medium
- libssh, red hat enterprise linux 10, enterprise linux 8 +11 more +13 moreLibssh: libssh: denial of service via automatic certificate authentication loopCVE-2026-59849Fix available3.1 Low
- libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 moreLibssh: libssh: denial of service via sftp responses with unknown request idsCVE-2026-59848Fix available5.3 Medium
- libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 moreLibssh: libssh: integrity downgrade via openssl aes-gcm tag verificationCVE-2026-59847Fix available5.9 Medium
- libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 moreLibssh: libssh: information disclosure via proxycommand %r username expansionCVE-2026-59846Fix available3.9 Low
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 moreRpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formattingCVE-2026-16461Fix available6.5 Medium
- libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 moreLibssh: libssh: denial of service via oversized sftp read lengthCVE-2026-59844Fix available6.5 Medium
- libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 moreLibssh: libssh: denial of service via unchecked proxycommand fork() failureCVE-2026-59845Fix available5.3 Medium
- libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 moreLibssh: libssh: denial of service via zero advertised channel packet sizeCVE-2026-59843Fix available6.5 Medium
- libssh, red hat enterprise linux 10, enterprise linux 8 +11 more +13 moreLibssh: libssh: information disclosure via short gssapi curve25519 public keyCVE-2026-59842Fix available3.7 Low
- libssh, red hat enterprise linux 10, enterprise linux 8 +11 more +13 moreLibssh: libssh: stack buffer overflow in sftp server longname constructionCVE-2026-15370Fix available6.7 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 moreKronosnet: kronosnet: access control list bypass via link id spoofing on unencrypted dynamic linksCVE-2026-15812Fix available4.8 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 moreKronosnet: kronosnet: encryption key exposure in memory after cryptographic configuration changesCVE-2026-15811Fix available5.8 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreLibcupsfilters: cups-filters: libcupsfilters: cups image filter process abort via malformed pngCVE-2026-64612Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 moreRpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist()CVE-2026-16277Fix available6.5 Medium
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.19 +29 more +31 moreGdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line bufferingCVE-2026-15588Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 moreKronosnet: kronosnet: memory corruption and out-of-bounds access via malformed network packet defragmentationCVE-2026-15813Fix available6.5 Medium
- xdg xdgmime, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +22 more +24 moreXdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.cCVE-2026-16118Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +5 more +7 morePipewire: pipewire: sandbox escape and arbitrary code execution via malicious library loadingCVE-2026-5674Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreSamba-winbind: samba: pam_winbind mkhomedir chowns critical system paths without validationCVE-2026-15779Fix available6.1 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary stringCVE-2026-157146.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leakCVE-2026-157135.9 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +12 more +14 moreLibsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violationCVE-2026-15711Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +12 more +14 moreSoupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of serviceCVE-2026-15709Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: incomplete fix for cve-2026-0716: out-of-bounds read in libsoup websocket frame processing (unmasked path)CVE-2026-12478Public exploitFix available4.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreQemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keysCVE-2026-12080Public exploitFix available7.3 High
- red hat cost management on-premise 1, enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: heap overflow oob read while parsing a tar archive contains a pax extended headerCVE-2026-15028Fix available3.9 Low
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +13 more +15 moreGstreamer1-plugins-bad-free: gstreamer: dtls certificate subject dn stack buffer overflow in openssl_verify_callbackCVE-2026-59692Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +12 more +14 moreGstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb hextile heap out-of-bounds write with 16bpp framebufferCVE-2026-59691Fix available7.1 High
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: non-constant-time comparison in pbkdf2-sha256 password verificationCVE-2026-150413.7 Low
- red hat directory server 11, directory server 12, directory server 13 +8 more +10 more389-ds-base: 389-ds-base: static initialization vector in aes-cbc/3des-cbc attribute encryptionCVE-2026-149694.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGstreamer1-plugins-bad-free: gstreamer: webrtcbin accepts remote sdp without a=fingerprint due to inverted presence checkCVE-2026-14935Fix available3.7 Low
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: heap-buffer-overflow in dn normalization via quoted multivalued rdnCVE-2026-149405.3 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +24 more +26 moreSssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypassCVE-2026-14476Fix available8.0 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +24 more +26 moreSssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalationCVE-2026-14474Fix available8.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreGimp: gimp: integer overflow in read_rle_channel()CVE-2026-58384Fix available7.3 High
- 389ds 389-ds-base, red hat directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8 +21 more +23 more389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbindCVE-2026-11610Fix available8.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: denial of service via integer overflow in playstation tim loaderCVE-2026-59089Fix available5.5 Medium
- Show moreLoading…