Skip to contentRed Hat Openshift Container Platform 5 vulnerabilities
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: null pointer dereference in pam responder when protocol version negotiation is skippedCVE-2026-1271015.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: local denial of service through unchecked oauth2 json code type in pam responderCVE-2026-1271005.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: stack buffer overflow during rsa certificate-to-ssh key conversionCVE-2026-1270995.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSandboxed-containers: kernel: systemd-gpt-auto-generator: guest data leakage in confidential computing (sandboxed containers)CVE-2026-1218767.9 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 7 +5 more +7 moreXfsprogs: xfsprogs: local privilege escalation via command injection in xfs_adminCVE-2026-108472Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreLibstdc++: overflow leaves streambuf in inconsistent state on i/o error.CVE-2026-1257094.2 Medium
- red hat assisted installer for red hat openshift container platform 2, multicluster engine for kubernetes, openshift container platform 4 +1 more +3 moreOpenshift/installer: openshift installer: unconditional csr approval during agent-based installation (abi) bootstrapCVE-2026-197068.3 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 morePodman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncationCVE-2026-123876Fix available4.4 Medium
- red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +17 more +19 moreAnsible-core: ansible-core: ansible.builtin.git invokes git without a `--` separator, allowing argument injection via a `-`-leading repository url (e.g. --upload-pack) -> rceCVE-2026-84503Fix available6.7 Medium
- red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +12 more +14 moreAnsible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)CVE-2026-1230376.7 Medium
- red hat openshift container platform 4, openshift container platform 5 +1 moreImage-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster pull secretCVE-2026-829767.1 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 moreLibslirp: libslirp: queue pointer corruption in if_output() leading to denial of serviceCVE-2026-120831Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 moreLibslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosureCVE-2026-120830Fix available7.4 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +4 more +6 moreJson-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice stepCVE-2026-1201947.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGcc: out-of-bounds read in std::from_charsCVE-2026-1154563.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreGcc: stack overflow in std::bitset on libstdc++CVE-2026-115455Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGcc: integer wrap in `stdCVE-2026-114691Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGcc: confirmed out-of-bounds read/write in libstdc++ parallel `stdCVE-2026-114690Fix available6.2 Medium
- red hat enterprise linux 9, enterprise linux 10, enterprise linux 6 +4 more +6 moreKernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)CVE-2026-1185935.9 Medium
- red hat openshift container platform 4.14, openshift container platform 4.15, openshift container platform 4.16 +3 more +5 moreOpenshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verificationCVE-2026-92092Fix available7.4 High
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoderCVE-2026-930094.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: --leasequery without address argument applies no source address checkCVE-2026-930104.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file contentCVE-2026-930066.8 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validationCVE-2026-930075.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transformsCVE-2026-930115.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurationsCVE-2026-930086.8 Medium
- samba, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreSamba: access control bypass via vfs_ceph_rgw case-insensitive openCVE-2026-109411Fix available8.1 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreGssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemonCVE-2026-116497Fix available5.5 Medium
- red hat openshift container platform 4, openshift container platform 5 +1 moreOc: oc: symlink/hardlink target validation bypass in oc image extract allows file write outside destinationCVE-2026-1154245.5 Medium
- red hat agentic cluster security suite 0.2, cost management 4, advanced cluster security for kubernetes 4.11 +55 more +57 moreCa-certificates: distrust emudhra intermediate ca certificates due to security concernsCVE-2026-114406Fix available6.8 Medium
- red hat confidential compute attestation, dpu kit for nvidia, exploit intelligence +18 more +20 morePodman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layersCVE-2026-1142363.3 Low
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +4 more +6 moreLibmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifactsCVE-2026-92824Fix available6.2 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +4 more +6 moreLibmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yamlCVE-2026-928236.2 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +4 more +6 moreLibmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yamlCVE-2026-928226.2 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreDevice-mapper-multipath: device-mapper-multipath: information disclosure via malformed format stringCVE-2026-114038Fix available5.1 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 moreBootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalizationCVE-2026-164607.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreNfs-utils: nfs-utils: denial of service via memory leak in rpc.statdCVE-2026-89096Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreLibtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decodingCVE-2026-85977Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreLibtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decodingCVE-2026-852316.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreNfs-utils: nfs-utils: denial of service via assertion failure in fsiddCVE-2026-89098Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreLuksmeta: missing slot-range validation permits out-of-gap device i/oCVE-2026-1115556.0 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreCifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypassCVE-2026-104715Public exploitFix available7.8 High
- red hat migration toolkit for applications 8, migration toolkit for containers, migration toolkit for virtualization +12 more +14 moreAnsible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injectionCVE-2026-929828.5 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable fileCVE-2026-109968Fix available5.5 Medium
- red hat openshift container platform 4.19, openshift container platform 4.20, openshift container platform 4.21 +2 more +4 moreInsights-runtime-extractor: insights-runtime-extractor: container escape via privileged binary executionCVE-2026-1047958.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-toolCVE-2026-109971Fix available4.7 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: pkcs#11 token pin written to world-readable fileCVE-2026-109970Fix available4.7 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umaskCVE-2026-109969Fix available4.7 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreDevice-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indicesCVE-2026-1100363.3 Low
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreClevis: clevis: integer underflow in pkcs#11 data socket handler crashes daemon on unbound client connectionCVE-2026-109976Fix available4.7 Medium
- Show moreLoading…