Skip to contentRed Hat Openshift Container Platform 4.17 vulnerabilities
- red hat openshift container platform 4.14, openshift container platform 4.15, openshift container platform 4.16 +3 more +5 moreOpenshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verificationCVE-2026-92092Fix available7.4 High
- red hat agentic cluster security suite 0.2, cost management 4, advanced cluster security for kubernetes 4.11 +55 more +57 moreCa-certificates: distrust emudhra intermediate ca certificates due to security concernsCVE-2026-114406Fix available6.8 Medium
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +9 more +11 moreOpenshift/console: openshift/console: authenticated ssrf via helm chart url fetchCVE-2026-758887.7 High
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +9 more +11 moreInsights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-readerCVE-2026-930177.7 High
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +9 more +11 moreOauth-proxy: open redirect via /\ and /\t bypass in post-login redirectCVE-2026-835896.1 Medium
- red hat assisted installer for red hat openshift container platform 2, openshift container platform 4.13, openshift container platform 4.15 +2 more +4 moreOc-mirror: oc-mirror: path traversal / arbitrary file write in operator catalog image extractionCVE-2026-1012957.3 High
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +8 more +10 moreOpenshift/console: openshift/console: unauthenticated path traversal in i18n locale handlerCVE-2026-758877.5 High
- red hat openshift container platform 4, openshift container platform 4.17, openshift container platform 4.18 +4 more +6 moreOpenshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token forwardingCVE-2026-758867.2 High
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +8 more +10 moreOpenshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpointCVE-2026-758859.3 Critical
- red hat openshift container platform 4.13, openshift container platform 4.14, openshift container platform 4.15 +8 more +10 moreOpenshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login endpointsCVE-2026-493297.5 High
- red hat openshift container platform 4.14, openshift container platform 4.15, openshift container platform 4.16 +6 more +8 moreOpenshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift consoleCVE-2026-502367.4 High
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +8 more +10 moreOpenshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in openshift consoleCVE-2026-502377.4 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 extended lifecycle support - extension +25 more +27 moreDracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()CVE-2026-15816Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +24 more +26 moreSg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --exportCVE-2026-16313Fix available7.6 High
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +8 more +10 moreOpenshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreamsCVE-2026-493328.5 High
- red hat logging subsystem for red hat openshift, multicluster engine for kubernetes, multicluster engine for kubernetes 2.1 +17 more +19 moreHypershift: konnectivity proxy-server accepts agent connections without validating client certificatesCVE-2026-162429.4 Critical
- red hat confidential compute attestation, openshift container platform 4, openshift container platform 4.12 +11 more +13 moreGithub.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home envCVE-2026-158097.8 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +24 more +26 moreSssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypassCVE-2026-14476Fix available8.0 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +24 more +26 moreSssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalationCVE-2026-14474Fix available8.8 High
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +38 more +40 moreGlib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"CVE-2026-58014Fix available7.3 High
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +29 more +31 moreLibarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()CVE-2026-14164Fix available7.5 High
- fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +49 more +51 morefast-uri vulnerable to host confusion via failed IDN canonicalizationCVE-2026-13676Fix available7.5 High
- nodejs undici, red hat cluster observability operator 1.5.0, cryostat 4 +25 more +27 moreundici WebSocket client vulnerable to denial of service via fragment count bypassCVE-2026-12151Fix available7.5 High
- linux, linux kernel, red hat nvidia for rhel 10 +28 more +30 morenet/sched: fix pedit partial COW leading to page cache corruptionCVE-2026-46331Public exploitFix available7.8 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +23 more +25 moreDracut: dracut: root code execution via dhcp options command injectionCVE-2026-6893Fix available7.5 High
- linux, linux kernel, red hat enterprise linux 10 +20 more +22 morenet: gro: don't merge zcopy skbsCVE-2026-46323Fix available7.8 High
- arm c1-premium, c1-ultra, cortex-a710 +45 more +47 moreArm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1,...CVE-2025-10263Public exploitFix available9.1 Critical
- go standard library crypto/x509, red hat assisted installer for red hat openshift container platform 2, cert manager support for red hat openshift release 1.19 +128 more +130 moreInefficient candidate hostname parsing in crypto/x509CVE-2026-27145Public exploitFix available6.5 Medium
- linux, linux kernel, red hat nvidia for rhel 10 +26 more +28 moresmb: client: reject userspace cifs.spnego descriptionsCVE-2026-46243Public exploitFix available7.1 High
- redhat openshift router, red hat openshift container platform 4.12, openshift container platform 4.13 +10 more +12 moreOpenshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontendCVE-2026-465797.4 High
- redhat openshift router, red hat openshift container platform 4, openshift container platform 4.17 +7 more +9 moreOpenshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validationCVE-2026-429657.7 High
- opensuse libsolv, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +37 more +39 moreLibsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page dataCVE-2026-48864Fix available7.8 High
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +26 more +28 moreSamba: remote code execution in samrCVE-2026-4408Public exploitFix availableEPSS 46.9%9.0 Critical
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +22 more +24 moreSamba: group policy certificate enrollment uses http:// without validationCVE-2026-3012Fix available8.0 High
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +21 more +23 moreSamba: vfs_worm does not block directory modificationCVE-2026-2340Fix available6.5 Medium
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +26 more +28 moreSamba: missing access check on reparse point operationsCVE-2026-1933Fix available7.1 High
- shell-quote, red hat cluster observability operator 1.5.0, cryostat 4 +46 more +48 moreshell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`CVE-2026-9277Public exploitFix available9.2 Critical
- amd epyc™ 7002 series processors, epyc™ embedded 7002 series processors, ryzen embedded v2000a series processors +31 more +33 moreImproper isolation of shared resources within the CPU operation cache on Zen 2-based products...CVE-2025-54518Fix available7.3 High
- linux kernel, linux, red hat nvidia for rhel 10 +38 more +40 morenet: skbuff: preserve shared-frag marker during coalescingCVE-2026-46300In KEVPublic exploitFix availableEPSS 16.1%7.8 High
- linux, linux kernel, red hat enterprise linux 10 +26 more +28 morenetfilter: flowtable: strictly check for maximum number of actionsCVE-2026-43329Fix available7.8 High
- linux, linux kernel, red hat nvidia for rhel 10 +30 more +32 morexfrm: esp: avoid in-place decrypt on shared skb fragsCVE-2026-43284Public exploitFix availableEPSS 94.2%8.8 High
- go standard library net/mail, golang go, red hat assisted installer for red hat openshift container platform 2 +108 more +110 moreQuadratic string concatenation in consumePhrase in net/mailCVE-2026-42499Fix available7.5 High
- go standard library net/mail, golang go, red hat assisted installer for red hat openshift container platform 2 +107 more +109 moreQuadratic string concatentation in consumeComment in net/mailCVE-2026-39820Fix available7.5 High
- go standard library net/http, golang go, http2 +106 more +108 moreInfinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCVE-2026-33814Fix available7.5 High
- go standard library net, golang go, red hat assisted installer for red hat openshift container platform 2 +145 more +147 moreCrash when handling long CNAME response in netCVE-2026-33811Fix available7.5 High
- linux, linux kernel, red hat enterprise linux 10 +24 more +26 morefs/smb/client: fix out-of-bounds read in cifs_sanitize_prepathCVE-2026-43112Fix available8.8 High
- prometheus, red hat file integrity operator, logging for red hat openshift 6 +53 more +55 morePrometheus: remote read endpoint allows denial of service via crafted snappy payloadCVE-2026-42154Public exploitFix available7.5 High
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +32 more +34 moreGnutls: gnutls: security bypass due to incorrect name constraint handlingCVE-2026-42011Fix available7.4 High
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +36 more +38 moreGnutls: gnutls: authentication bypass via nul character in usernameCVE-2026-42010Fix available7.1 High
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +29 more +31 moreGnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassemblyCVE-2026-33846Fix available7.5 High
- Show moreLoading…