Skip to contentRed Hat Enterprise Linux vulnerabilities
- openssl, red hat cost management 4, multicluster engine for kubernetes +23 more +25 moreHeap Use-After-Free in the PKCS7_verify() FunctionCVE-2026-45447Public exploitFix available8.8 High
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditionsCVE-2026-116116.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moredrm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madviseCVE-2026-46309Fix available7.0 High
- apache http server, red hat jboss core services for rhel 8, enterprise linux 10 +10 more +12 moreApache HTTP Server: mod_xml2enc heap overflowCVE-2026-42536Public exploitFix available7.5 High
- apache http server, red hat jboss core services for rhel 8, enterprise linux 10 +10 more +12 moreApache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`CVE-2026-44185Fix available7.3 High
- apache http server, red hat jboss core services for rhel 8, enterprise linux 10 +10 more +12 moreApache HTTP Server: mod_proxy_html buffer overflowCVE-2026-34355Fix available7.5 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensionsCVE-2026-49218Fix available7.5 High
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()CVE-2026-50263Fix available5.5 Medium
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributesCVE-2026-50262Fix available5.5 Medium
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformatCVE-2026-50264Fix available7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()CVE-2026-50261Fix available7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()CVE-2026-50260Fix available7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexingCVE-2026-50259Fix available7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levelsCVE-2026-50258Fix available7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()CVE-2026-50257Fix available7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +16 more +18 moreXorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatchCVE-2026-50256Fix available7.8 High
- red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +29 more +31 moreAnsible-core: argument injection in ansible-galaxy role install leads to arbitrary code executionCVE-2026-11332Fix available7.8 High
- red hat advanced cluster management for kubernetes 2, build of keycloak, enterprise linux 8 +1 more +3 moredecompress: Arbitrary File Write via Archive Extraction (Zip Slip)CVE-2026-107326.1 Medium
- axios, red hat cryostat 4, gatekeeper 3 +62 more +64 moreAxios: Regular Expression Denial of Service (ReDoS) via Cookie Name InjectionCVE-2026-44496Fix available7.5 High
- axios, red hat cryostat 4, gatekeeper 3 +65 more +67 moreAxios: Allocation of Resources Without Limits or Throttling in axiosCVE-2026-44488Fix available7.5 High
- axios, red hat cryostat 4, gatekeeper 3 +65 more +67 moreAxios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP AdapterCVE-2026-44487Fix available8.2 High
- axios, red hat cryostat 4, gatekeeper 3 +63 more +65 moreAxios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connectionCVE-2026-44486Fix available7.5 High
- red hat multicluster engine for kubernetes, enterprise linux 10, enterprise linux 6 +16 more +18 moreNetworkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backendCVE-2026-10805Fix available6.7 Medium
- linux, linux kernel, red hat enterprise linux 10 +7 more +9 morenetfilter: nft_inner: Fix IPv6 inner_thoff desyncCVE-2026-46244Fix available9.1 Critical
- huggingface huggingface/transformers, transformers, red hat openshift lightspeed +7 more +9 morePolicy Bypass in LightGlue Nested Config Resolution in huggingface/transformersCVE-2026-5241Fix available8.0 High
- apache http server, debian linux, red hat jboss core services for rhel 8 +19 more +21 moreApache HTTP Server: mod_http2 denial of serviceCVE-2026-49975Public exploitFix availableEPSS 33.0%7.5 High
- go standard library crypto/x509, red hat assisted installer for red hat openshift container platform 2, cert manager support for red hat openshift release 1.19 +128 more +130 moreInefficient candidate hostname parsing in crypto/x509CVE-2026-27145Public exploitFix available6.5 Medium
- aio-libs aiohttp, red hat exploit intelligence, lightspeed core +27 more +29 moreAIOHTTP Vulnerable to Deserialization of Untrusted DataCVE-2026-34993Fix available6.4 Medium
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreJIT miscompilation in the JavaScript Engine: JIT componentCVE-2026-10702Public exploit4.3 Medium
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreIncorrect boundary conditions in the Graphics: Text componentCVE-2026-107017.5 High
- devolutions server, mariadb, red hat enterprise linux 10 +6 more +8 moreMariaDB server has unsafe parameter handling in `wsrep_notify_cmd`CVE-2026-49261Fix available10.0 Critical
- devolutions server, mariadb, red hat enterprise linux 7 +6 more +8 moreMariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner sideCVE-2026-48165Fix available8.0 High
- devolutions server, mariadb, red hat enterprise linux 10 +5 more +7 moreMariaDB: wsrep SST unsafe parameter handling on the donor side (rsync)CVE-2026-48163Fix available8.0 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +6 more +8 moreRrdtool: rrdtool: stack buffer overflow allows local code execution or denial of serviceCVE-2026-43958Fix available7.8 High
- vitejs launch-editor, vite, red hat cluster observability operator 1.5.0 +25 more +27 morelaunch-editor vulnerable to command injection via the crafted request on WindowsCVE-2024-52011Public exploitFix available7.5 High
- amd aiter, red hat ai inference server, enterprise linux ai (rhel ai) 3 +1 more +3 moreAI Tensor Engine for ROCm (AITER) 0.1.14 Unauthenticated RCE via MessageQueue.recv() Pickle DeserializationCVE-2026-491219.2 Critical
- linux, linux kernel, red hat nvidia for rhel 10 +26 more +28 moresmb: client: reject userspace cifs.spnego descriptionsCVE-2026-46243Public exploitFix available7.1 High
- red hat ai inference server 3.3, enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 morePoppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplicationCVE-2026-10118Fix available7.8 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +13 more +15 moreHeap-buffer-overflow write in planar bitmap decoderCVE-2026-45700Fix available7.7 High
- freerdp, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreFreeRDP cliprdr server heap-buffer-overflow via undersized capabilitySetLength in CB_CLIP_CAPSCVE-2026-44420Fix available8.8 High
- freerdp, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreFreeRDP RDPEAR NDR ref-id aliasing causes client-side UAF/double-free and type confusionCVE-2026-44422Fix available7.5 High
- axios, red hat cryostat 4, gatekeeper 3 +79 more +81 moreAxios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config MergeCVE-2026-44495Fix available7.0 High
- axios, red hat cryostat 4, gatekeeper 3 +65 more +67 moreAxios: Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`CVE-2026-44494Fix available8.7 High
- axios, red hat cryostat 4, gatekeeper 3 +65 more +67 moreAxios: shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)CVE-2026-44492Fix availableEPSS 12.3%8.6 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: libsoup: http request smuggling via unsigned to signed conversion errorCVE-2026-6324Fix available4.8 Medium
- microsoft libsolv, red hat enterprise linux 10, enterprise linux 7 +6 more +8 moreLibsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of serviceCVE-2026-48863Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGlib-networking: infinite loop in glib-networking gnutls backend allows remote denial of service via circular certificate chainCVE-2026-10028Fix available4.3 Medium
- jpadilla pyjwt, red hat openshift lightspeed, ai inference server +37 more +39 morePyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowedCVE-2026-48526Fix available7.4 High
- microsoft .net, asp.net core, .net 10.0 runtime +14 more +16 moreASP.NET Core Denial of Service VulnerabilityCVE-2026-45591Fix available7.5 High
- linux, linux kernel, red hat enterprise linux 10 +15 more +17 moresctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALLCVE-2026-46227Fix available7.8 High
- Show moreLoading…