Skip to contentRed Hat Jboss Core Services vulnerabilities
- openssl, red hat cost management 4, multicluster engine for kubernetes +23 more +25 moreHeap Use-After-Free in the PKCS7_verify() FunctionCVE-2026-45447Public exploitFix available8.8 High
- apache http server, red hat jboss core services for rhel 8, enterprise linux 10 +10 more +12 moreApache HTTP Server: mod_xml2enc heap overflowCVE-2026-42536Public exploitFix available7.5 High
- apache http server, red hat jboss core services for rhel 8, enterprise linux 10 +10 more +12 moreApache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`CVE-2026-44185Fix available7.3 High
- apache http server, red hat jboss core services for rhel 8, enterprise linux 10 +10 more +12 moreApache HTTP Server: mod_proxy_html buffer overflowCVE-2026-34355Fix available7.5 High
- apache http server, debian linux, red hat jboss core services for rhel 8 +19 more +21 moreApache HTTP Server: mod_http2 denial of serviceCVE-2026-49975Public exploitFix availableEPSS 33.0%7.5 High
- libexpat project libexpat, red hat discovery 2, enterprise linux 10 +11 more +13 moreIn libexpat before 2.8.1, the computational complexity of attribute name collision checks allows...CVE-2026-45186Fix available2.9 Low
- apache http server, red hat jboss core services for rhel 8, jboss core services on rhel 7 +15 more +17 moreApache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header()CVE-2026-28780Fix available9.8 Critical
- apache http server, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreApache HTTP Server: http2: double free and possible RCE on early resetCVE-2026-23918Public exploitFix availableEPSS 49.7%8.8 High
- xmlsoft libxml2, ibm aix, vios +10 more +12 moreLibxml2: libxml2: denial of service via crafted xsd-validated documentCVE-2026-6732Fix available6.5 Medium
- apache httpclient, red hat cryostat 4, migration toolkit for applications 8 +45 more +47 moreApache HttpClient: SCRAM-SHA-256 mutual authentication bypass may cause the client to accept authentication without proper mutual authentication verificationCVE-2026-40542Fix available7.3 High
- codehaus-plexus plexus-utils, red hat cryostat 4, openshift developer tools and services +49 more +51 morePlexus-Utils has a Directory Traversal vulnerability in its extractFile methodCVE-2025-67030Fix available8.8 High
- nghttp2, red hat jboss core services for rhel 8, jboss core services on rhel 7 +37 more +39 morenghttp2 Denial of service: Assertion failure due to the missing state validationCVE-2026-27135Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 9, jboss core services +2 moreMod_proxy_cluster: mod_proxy_cluster: response body corruption via crlf injectionCVE-2026-32344.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreLibxml2: memory leak leading to local denial of service in xmllint interactive shellCVE-2026-1757Fix available6.2 Medium
- openssl, red hat cost management 4, ai inference server 3.2 +316 more +318 moreStack buffer overflow in CMS (Auth)EnvelopedData parsingCVE-2025-15467Public exploitFix availableEPSS 74.8%8.8 High
- xmlsoft libxml2, ibm aix, vios +11 more +13 moreLibxml2: libxml2: denial of service via crafted xml catalogsCVE-2026-0992Fix available2.9 Low
- xmlsoft libxml2, ibm aix, vios +11 more +13 moreLibxml2: unbounded relaxng include recursion leading to stack overflowCVE-2026-0989Fix available3.7 Low
- xmlsoft libxml2, ibm aix, vios +11 more +13 moreLibxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processingCVE-2026-0990Fix available5.9 Medium
- ruby zlib, red hat logging subsystem for red hat openshift, build of openjdk 1.8 +14 more +16 morezlib <= 1.3.1.2 untgz Global Buffer Overflow in TGZfname()CVE-2026-22184Fix availableDisputed4.6 Medium
- xmlsoft libxml2, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +34 more +36 moreLibxml2: stack buffer overflow in xmllint interactive shell command handlingCVE-2025-6170Fix available2.5 Low
- xmlsoft libxml2, red hat discovery 2, enterprise linux 10 +46 more +48 moreLibxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2CVE-2025-6021Fix available7.5 High
- gnome libxml2, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibxml: null pointer dereference leads to denial of service (dos)CVE-2025-49795Fix available7.5 High
- red hat cert-manager operator for red hat openshift 1.16, openshift file integrity operator - fio 1, discovery 2 +43 more +45 moreLibxml: type confusion leads to denial of service (dos)CVE-2025-49796Fix available9.1 Critical
- red hat cert-manager operator for red hat openshift 1.16, openshift file integrity operator - fio 1, 3scale api management platform 2 +43 more +45 moreLibxml: heap use after free (uaf) leads to denial of service (dos)CVE-2025-49794Fix available9.1 Critical
- red hat enterprise linux 10, enterprise linux 9, enterprise linux 9.4 extended update support +2 more +4 moreMod_proxy_cluster: mod_proxy_cluster unauthorized mcmp requestsCVE-2024-10306Fix available5.4 Medium
- red hat devworkspace operator 0.33, discovery 1.14, enterprise linux 10 +26 more +28 moreLibexpat: expat: improper restriction of xml entity expansion depth in libexpatCVE-2024-8176Public exploitFix available7.5 High
- modcluster mod proxy cluster, red hat jboss core services for rhel 8, jboss core services on rhel 7 +3 more +5 moreMod_cluster/mod_proxy_cluster: stored cross site scriptingCVE-2023-6710Public exploit5.4 Medium
- openssl, red hat enterprise linux 10, enterprise linux 3 +11 more +13 moreOpenssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypassCVE-2006-4339Fix available9.1 Critical