Skip to contentRed Hat Enterprise Linux vulnerabilities
- wireshark, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreHeap-based Buffer Overflow in WiresharkCVE-2026-5403Fix available7.8 High
- wireshark, red hat enterprise linux 10, enterprise linux 10.0 extended update support +4 more +6 moreImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in WiresharkCVE-2026-5656Fix available7.0 High
- wireshark, red hat enterprise linux 10, enterprise linux 10.0 extended update support +4 more +6 moreHeap-based Buffer Overflow in WiresharkCVE-2026-5405Fix available7.8 High
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +32 more +34 moreGnutls: gnutls: denial of service via dtls zero-length fragmentCVE-2026-33845Fix available7.5 High
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +13 more +15 moreGnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp responseCVE-2026-3832Fix available3.7 Low
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +31 more +33 moreGnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparisonCVE-2026-3833Fix available6.5 Medium
- qt, qt qtdeclarative, red hat multicluster global hub +10 more +12 morePossible QML code injection in VectorImage componentCVE-2025-14576Fix available7.4 High
- bytecodealliance wasmtime, red hat enterprise linux 10, hardened images +2 moreWasmtime: Panic when allocating a table exceeding the size of the host's address spaceCVE-2026-44216Fix available5.9 Medium
- wireshark, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreHeap-based Buffer Overflow in WiresharkCVE-2026-5402Fix available8.8 High
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +14 more +16 moreGnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removalCVE-2026-5419Fix available3.7 Low
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +32 more +34 moreGnutls: gnutls: information disclosure via heap overread in rsa key exchangeCVE-2026-5260Fix available8.2 High
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +21 more +23 moreGnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handlingCVE-2026-42015Fix available5.3 Medium
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +21 more +23 moreGnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pinCVE-2026-42014Fix available6.6 Medium
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +32 more +34 moreGnutls: gnutls: certificate validation bypass due to oversized subject alternative nameCVE-2026-42013Fix available8.2 High
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +24 more +26 moreGnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sansCVE-2026-42012Fix available7.1 High
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +46 more +48 moreGnutls: gnutls: denial of service via dtls packet reordering vulnerabilityCVE-2026-42009Fix available7.5 High
- pgjdbc, postgresql jdbc driver, red hat amq broker 7.13.6 +17 more +19 morepgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoSCVE-2026-42198Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreCockpit is vulnerable to directory traversalCVE-2026-38993Fix available6.5 Medium
- libsndfile project libsndfile, red hat ai inference server 3.3, enterprise linux 10 +14 more +16 moreAn issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was...CVE-2026-37555Fix available7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Thunderbird 150.0.1CVE-2026-73247.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +16 more +18 moreMemory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1CVE-2026-7323Fix available7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +16 more +18 moreMemory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1CVE-2026-7322Fix available7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +16 more +18 moreInformation disclosure due to incorrect boundary conditions in the Audio/Video componentCVE-2026-7320Fix available7.5 High
- apache thrift, red hat multicluster global hub 1.3.4, multicluster global hub 1.4.5 +12 more +14 moreApache Thrift: C++ JSON OOB readCVE-2026-41607Fix available6.5 Medium
- apache thrift, red hat multicluster global hub 1.3.4, multicluster global hub 1.4.5 +12 more +14 moreApache Thrift: c_glib dispatch stack overflowCVE-2026-41606Fix available5.3 Medium
- apache thrift, red hat multicluster global hub 1.3.4, multicluster global hub 1.4.5 +12 more +14 moreApache Thrift: Swift Compact Protocol integer overflowCVE-2026-41605Fix available7.3 High
- apache thrift, red hat multicluster global hub 1.3.4, multicluster global hub 1.4.5 +12 more +14 moreApache Thrift: Swift Range crash in skip()CVE-2026-41604Fix available8.2 High
- apache thrift, red hat cryostat 4 on rhel 9, multicluster global hub +16 more +18 moreApache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.CVE-2025-48431Fix available7.5 High
- spring boot, vmware spring boot, red hat amq broker 7 +14 more +16 moreSpring Boot's default security filter chain has no authorization rule with Actuator but without HealthCVE-2026-40976Fix available9.1 Critical
- spring boot, vmware spring boot, red hat hawtio hawtio 4.4.0 +14 more +16 moreSpring Boot's random value property source uses a weak PRNG unsuitable for secretsCVE-2026-40975Fix available4.8 Medium
- simple-git project simple-git, red hat enterprise linux 8, enterprise linux 9 +3 more +5 moresimple-git is vulnerable to Remote Code ExecutionCVE-2026-6951Public exploitFix available9.2 Critical
- axios, red hat cryostat 4, gatekeeper 3 +61 more +63 moreAxios: unbounded recursion in toFormData causes DoS via deeply nested request dataCVE-2026-42039Fix available6.9 Medium
- axios, red hat cryostat 4, gatekeeper 3 +57 more +59 moreAxios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge StrategyCVE-2026-42041Fix available4.8 Medium
- axios, red hat cryostat 4, gatekeeper 3 +56 more +58 moreAxios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0CVE-2026-42043Fix available7.2 High
- axios, red hat cryostat 4, gatekeeper 3 +59 more +61 moreAxios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`CVE-2026-42044Fix available6.5 Medium
- axios, red hat cryostat 4, gatekeeper 3 +57 more +59 moreAxios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request HijackingCVE-2026-42033Fix available7.4 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morexfrm: hold dev ref until after transport_finish NF_HOOKCVE-2026-31663Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morerxrpc: Fix RxGK token loading to check boundsCVE-2026-31641Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 moreusb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()CVE-2026-31617Fix available5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +6 more +8 moreusbip: validate number_of_packets in usbip_pack_ret_submit()CVE-2026-31607Fix available9.8 Critical
- apache activemq, activemq broker, apache software foundation activemq all +8 more +10 moreApache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All: Authenticated user can perform RCE via DestinationView MBean exposed by JolokiaCVE-2026-41044Public exploitFix available8.8 High
- apache activemq, activemq broker, apache software foundation activemq all +8 more +10 moreApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Possible bypass of CVE-2026-34197 via HTTP discovery second-stage URICVE-2026-40466Fix available8.8 High
- grafana tempo, enterprise traces (get), red hat logging subsystem for red hat openshift +13 more +15 moreTempo query limit results in unbounded memory allocationCVE-2026-21728Fix available7.5 High
- xmlsoft libxml2, ibm aix, vios +10 more +12 moreLibxml2: libxml2: denial of service via crafted xsd-validated documentCVE-2026-6732Fix available6.5 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +1 more +3 moreWebkitgtk: authorization bypass through webpage::send-request signal handlerCVE-2025-662864.7 Medium
- ruby erb, red hat enterprise linux 10, enterprise linux 10.0 extended update support +10 more +12 moreERB has an @_init deserialization guard bypass via def_module / def_method / def_classCVE-2026-41316Fix available8.1 High
- xmldom, red hat build of podman desktop, developer hub 1.9 +6 more +8 morexmldom: Denial of service via uncontrolled recursion in XML serializationCVE-2026-41673Fix available8.7 High
- xmldom, red hat build of podman desktop, developer hub 1.9 +6 more +8 morexmldom: XML node injection through unvalidated processing instruction serializationCVE-2026-41675Fix available8.7 High
- xmldom, red hat build of podman desktop, developer hub 1.9 +6 more +8 morexmldom: XML node injection through unvalidated comment serializationCVE-2026-41672Fix available8.7 High
- linux, linux kernel, red hat enterprise linux 10 +11 more +13 moredrm/amd/display: Do not skip unrelated mode changes in DSC validationCVE-2026-31488Fix available7.8 High
- Show moreLoading…