Skip to contentRed Hat Openshift vulnerabilities
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: null pointer dereference in pam responder when protocol version negotiation is skippedCVE-2026-1271015.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: local denial of service through unchecked oauth2 json code type in pam responderCVE-2026-1271005.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: stack buffer overflow during rsa certificate-to-ssh key conversionCVE-2026-1270995.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSandboxed-containers: kernel: systemd-gpt-auto-generator: guest data leakage in confidential computing (sandboxed containers)CVE-2026-1218767.9 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 7 +4 more +6 moreCockpit: cockpit: local privilege escalation via insecure symlink handling in public key addition helperCVE-2026-91151Fix available7.3 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 7 +5 more +7 moreXfsprogs: xfsprogs: local privilege escalation via command injection in xfs_adminCVE-2026-1084727.8 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 7 +4 more +6 moreCockpit: cockpit: denial of service via unbounded fragmented websocket messagesCVE-2026-91150Fix available7.5 High
- project quay quay, red hat openshift update service, quay 3.10 +8 more +10 moreQuay: quay: sql like wildcard injection in robot listing leaks cross-tenant robot tokensCVE-2026-1106979.9 Critical
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 morePodman: untrusted image labels allow auto-update to restart arbitrary systemd unitsCVE-2026-1218856.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreLibstdc++: overflow leaves streambuf in inconsistent state on i/o error.CVE-2026-1257094.2 Medium
- red hat assisted installer for red hat openshift container platform 2, multicluster engine for kubernetes, openshift container platform 4 +1 more +3 moreOpenshift/installer: openshift installer: unconditional csr approval during agent-based installation (abi) bootstrapCVE-2026-197068.3 High
- red hat openshift ai (rhoai)Trainer: trainer: trainjob env passthrough enables valuefrom.secretkeyref injection for namespace secret exfiltrationCVE-2026-83495No score
- red hat openshift pipelines, builds for red hat openshift, openshift serverless +2 more +4 morePipelines-as-code: openshift-pipelines-operator-rh: pipelines-as-code: repository users can trigger namespace edit-equivalent execution via auto-provisioned pipeline serviceaccountCVE-2026-502408.8 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 morePodman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncationCVE-2026-123876Fix available4.4 Medium
- red hat openshift ai (rhoai)Training-operator: pytorchjob validateupdate casts oldjob from newobj, bypassing managedby immutability (asvs v5.1.3; upstream bug)CVE-2026-83494No score
- red hat openshift ai (rhoai)Distributed-workloads: github actions pinned by mutable tag/branch, including third-party snyk/actions/setup@masterCVE-2026-834939.1 Critical
- red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +17 more +19 moreAnsible-core: ansible-core: ansible.builtin.git invokes git without a `--` separator, allowing argument injection via a `-`-leading repository url (e.g. --upload-pack) -> rceCVE-2026-845036.7 Medium
- red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +12 more +14 moreAnsible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)CVE-2026-1230376.7 Medium
- red hat exploit intelligence, openshift serverless, build of apache camel 4 for quarkus 3 +7 more +9 moreIo.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flawCVE-2026-1079127.7 High
- red hat openshift gitopsGithub.com/argoproj-labs/argocd-image-updater: argocd-image-updater: arbitrary command execution via crafted ssh repository proxy configurationCVE-2026-1216218.8 High
- red hat openshift container platform 4, openshift container platform 5 +1 moreImage-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster pull secretCVE-2026-829767.1 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 moreLibslirp: libslirp: queue pointer corruption in if_output() leading to denial of serviceCVE-2026-1208316.5 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 moreLibslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosureCVE-2026-1208307.4 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +4 more +6 moreJson-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice stepCVE-2026-1201947.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGcc: out-of-bounds read in std::from_charsCVE-2026-1154563.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreGcc: stack overflow in std::bitset on libstdc++CVE-2026-1154556.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGcc: integer wrap in `stdCVE-2026-1146915.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGcc: confirmed out-of-bounds read/write in libstdc++ parallel `stdCVE-2026-1146906.2 Medium
- red hat enterprise linux 9, enterprise linux 10, enterprise linux 6 +4 more +6 moreKernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)CVE-2026-1185935.9 Medium
- red hat openshift container platform 4.14, openshift container platform 4.15, openshift container platform 4.16 +3 more +5 moreOpenshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verificationCVE-2026-920927.4 High
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoderCVE-2026-930094.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: --leasequery without address argument applies no source address checkCVE-2026-930104.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file contentCVE-2026-930066.8 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validationCVE-2026-930075.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transformsCVE-2026-930115.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurationsCVE-2026-930086.8 Medium
- red hat openshift ai (rhoai)Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-process authorizationCVE-2026-1175749.1 Critical
- red hat openshift ai (rhoai)Kserve: kserve: server-side request forgery via malicious storageuriCVE-2026-134517.7 High
- samba, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreSamba: access control bypass via vfs_ceph_rgw case-insensitive openCVE-2026-109411Fix available8.1 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreGssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemonCVE-2026-116497Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +1 more +3 moreLibslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guestCVE-2026-115449Fix available3.5 Low
- red hat openshift container platform 4, openshift container platform 5 +1 moreOc: oc: symlink/hardlink target validation bypass in oc image extract allows file write outside destinationCVE-2026-1154245.5 Medium
- red hat agentic cluster security suite 0.2, cost management 4, advanced cluster security for kubernetes 4.11 +51 more +53 moreCa-certificates: distrust emudhra intermediate ca certificates due to security concernsCVE-2026-114406Fix available6.8 Medium
- red hat confidential compute attestation, dpu kit for nvidia, exploit intelligence +18 more +20 morePodman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layersCVE-2026-1142363.3 Low
- red hat openshift ai (rhoai)Lm-evaluation-harness: lm-evaluation-harness: ssrf via job-spec model.url with bearer credential forwardingCVE-2026-175576.5 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +4 more +6 moreLibmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifactsCVE-2026-928246.2 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +4 more +6 moreLibmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yamlCVE-2026-928236.2 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +4 more +6 moreLibmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yamlCVE-2026-928226.2 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreDevice-mapper-multipath: device-mapper-multipath: information disclosure via malformed format stringCVE-2026-114038Fix available5.1 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 moreBootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalizationCVE-2026-164607.4 High
- Show olderLoading…