Skip to contentRed Hat Openshift vulnerabilities
- vllm, red hat ai inference server, ai inference server 3.2 +6 more +8 morevLLM affected by RCE via auto_map dynamic module loading during model initializationCVE-2026-22807Public exploitFix available8.8 High
- isc bind 9, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreMalformed BRID/HHIT records can cause named to terminate unexpectedlyCVE-2025-13878Fix available7.5 High
- external-secrets, external-secrets external secrets operator, red hat external secrets operator for red hat openshift +1 more +3 moreExternal Secrets Operator insecurely retrieves secrets through the getSecretKey templating functionCVE-2026-22822Fix available9.3 Critical
- isaacs node-tar, tar, red hat confidential compute attestation +37 more +39 morenode-tar has Race Condition in Path Reservations via Unicode Ligature Collisions on macOS APFSCVE-2026-23950Fix available8.8 High
- dabeaz ply, red hat fence agents remediation operator, migration toolkit for containers +25 more +27 moreAn undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code...CVE-2025-56005Public exploitFix availableDisputedEPSS 18.8%9.8 Critical
- openstack keystonemiddleware, red hat openshift container platform 4.17, openshift container platform 4.18 +7 more +9 moreAn issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and...CVE-2026-22797Fix available9.9 Critical
- vesparny marky, red hat logging subsystem for red hat openshift, satellite 6 +2 moreMarky 0.0.1 - Persistent Cross-Site ScriptingCVE-2021-478395.1 Medium
- pyasn1, debian linux, red hat lightspeed core +48 more +50 morepyasn1 has a DoS vulnerability in decoderCVE-2026-23490Fix available7.5 High
- go toolchain cmd/go, golang go, red hat enterprise linux 10 +30 more +32 moreArbitrary file write using cgo pkg-config directive in cmd/goCVE-2025-61731Fix available7.8 High
- go standard library net/url, golang go, red hat assisted installer for red hat openshift container platform 2 +160 more +162 moreMemory exhaustion in query parameter parsing in net/urlCVE-2025-61726Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreGlib: glib: denial of service via integer overflow in g_buffered_input_stream_peek()CVE-2026-0988Fix available3.7 Low
- xmlsoft libxml2, ibm aix, vios +11 more +13 moreLibxml2: libxml2: denial of service via crafted xml catalogsCVE-2026-0992Fix available2.9 Low
- xmlsoft libxml2, ibm aix, vios +11 more +13 moreLibxml2: unbounded relaxng include recursion leading to stack overflowCVE-2026-0989Fix available3.7 Low
- xmlsoft libxml2, ibm aix, vios +11 more +13 moreLibxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processingCVE-2026-0990Fix available5.9 Medium
- google keras, red hat openshift ai (rhoai), openshift ai 2.25 +2 more +4 moreDenial of Service in Keras via Excessive Memory Allocation in HDF5 MetadataCVE-2026-0897Public exploitFix available7.1 High
- elastic kibana, red hat logging subsystem for red hat openshift, jboss enterprise application platform 8 +3 more +5 moreExternal Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini ConnectorCVE-2026-0532Fix available8.6 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: heap off-by-one in kvm xen physdevop_map_pirqCVE-2026-0665Fix available6.5 Medium
- red hat openshift dev spaces (rhosds) 3.22, openshift dev spaces (rhosds) 3.23, openshift dev spaces (rhosds) 3.24 +2 moreGithub.com/che-incubator/che-code: eclipse che — unauthenticated rce and secret exfiltration via tcp/3333CVE-2025-12548Public exploit9.0 Critical
- ollama, red hat ansible automation platform 2, openshift ai (rhoai) +2 moreOllama Multi-Modal Model Image Processing NULL Pointer DereferenceCVE-2025-155148.7 High
- gitlab, red hat openshift pipelines, openshift container platform 4 +2 moreImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-9222Fix available8.7 High
- gitlab, red hat openshift pipelines, openshift container platform 4 +2 moreMissing Authorization in GitLabCVE-2025-13772Fix available7.1 High
- gitlab, red hat openshift pipelines, openshift container platform 4 +2 moreImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-13761Fix available8.0 High
- vllm, red hat ai inference server, enterprise linux ai (rhel ai) 3 +1 more +3 morevLLM - Denial of Service via Unvalidated Multimodal EmbeddingsCVE-2026-56340Fix available8.7 High
- @tanstack react-router, remix-run @remix-run/router, red hat cryostat 4 +74 more +76 moreReact Router vulnerable to XSS via Open RedirectsCVE-2026-22029Fix available8.0 High
- @tanstack react-router, red hat ansible automation platform 2.6, ansible automation platform 2.6 for rhel 9 +6 more +8 moreReact Router SSR XSS in ScrollRestorationCVE-2026-21884Fix available8.2 High
- @tanstack react-router, red hat cryostat 4, gatekeeper 3 +47 more +49 moreReact Router has Path Traversal in File Session StorageCVE-2025-61686Public exploitFix availableEPSS 17.3%9.1 Critical
- @tanstack react-router, red hat ansible automation platform 2.6, ansible automation platform 2.6 for rhel 9 +6 more +8 moreReact Router has XSS VulnerabilityCVE-2025-59057Public exploitFix available7.6 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +16 more +18 moreLibsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authenticationCVE-2026-0719Fix available8.6 High
- webpros plesk obsidian, red hat openshift dev spaces +1 morePlesk Obsidian versions 8.0.1 through 18.0.73 are vulnerable to a Denial of Service (DoS)...CVE-2025-65518Public exploit7.5 High
- red hat openshift dev spaces, technitium dnsserver +1 moreAn issue in Technitium DNS Server v.13.5 allows a remote attacker to cause a denial of service...CVE-2025-503347.5 High
- ruby zlib, red hat logging subsystem for red hat openshift, build of openjdk 1.8 +14 more +16 morezlib <= 1.3.1.2 untgz Global Buffer Overflow in TGZfname()CVE-2026-22184Fix availableDisputed4.6 Medium
- python urllib3, red hat assisted installer for red hat openshift container platform 2, cert-manager operator for red hat openshift 1.18 +105 more +107 moreurllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)CVE-2026-21441Fix available8.9 High
- aio-libs aiohttp, red hat openshift lightspeed, openshift service mesh 2 +18 more +20 moreAIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bombCVE-2025-69223Fix available7.5 High
- feast-dev feast-dev/feast, red hat openshift ai (rhoai), openshift ai 2.25 +2 moreArbitrary Code Execution in feast-dev/feastCVE-2025-11157Fix available7.8 High
- gitoxidelabs gix-date, gitoxide, red hat logging subsystem for red hat openshift +3 more +5 moreGix-date: gix-date: undefined behavior due to invalid string generationCVE-2026-0810Fix available7.1 High
- red hat libnbd, enterprise linux 10, enterprise linux 8 +2 more +4 moreLibnbd: libnbd: arbitrary code execution via ssh argument injection through a malicious uriCVE-2025-14946Fix available4.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: unbounded allocation in virtio-cryptoCVE-2025-14876Fix available5.5 Medium
- red hat openshift container platform 4Ose-openshift-apiserver: openshift api server: server-side request forgery (ssrf) vulnerability in imagestreamimport mechanismCVE-2025-144436.4 Medium
- red hat openshift gitops, redhat-developer gitops-operator, red hat openshift gitops 1.16 +2 more +4 moreOpenshift-gitops-operator: openshift gitops: namespace admin cluster takeover via privileged jobsCVE-2025-13888Fix available9.1 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreNetworkmanager: networkmanager file accessCVE-2025-9615Fix available3.3 Low
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +27 more +29 moreGlib: integer overflow in glib gio attribute escaping causes heap buffer overflowCVE-2025-14512Fix available6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +26 more +28 moreGlib: glib: buffer underflow in gvariant parser leads to heap corruptionCVE-2025-14087Fix available5.6 Medium
- util-linux, red hat cert manager support for red hat openshift release 1.18, ceph storage 7 +11 more +13 moreUtil-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernamesCVE-2025-14104Fix available6.1 Medium
- red hat openshift dev spacesCodeready-ws: privilege escalation via excessive /etc/passwd permissionsCVE-2025-578506.4 Medium
- gnome glib, red hat ceph storage 8, discovery 2 +58 more +60 moreGlib: integer overflow in in g_escape_uri_string()CVE-2025-13601Fix available7.7 High
- red hat cert manager support for red hat openshift release 1.18, ceph storage 8, discovery 2 +11 more +13 moreGnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() functionCVE-2025-9820Fix available4.0 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: use-after-free in net_set_vlanCVE-2025-54770Fix available4.9 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: missing unregister call for normal_exit command may lead to use-after-freeCVE-2025-61664Fix available4.9 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: missing unregister call for normal commands may lead to use-after-freeCVE-2025-61663Fix available4.9 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 10.0 extended update support +23 more +25 moreGrub2: missing unregister call for gettext command may lead to use-after-freeCVE-2025-61662Fix available7.8 High
- Show moreLoading…