Skip to contentRed Hat Openstack Platform 18.0 vulnerabilities
- red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +17 more +19 moreAnsible-core: ansible-core: ansible.builtin.git invokes git without a `--` separator, allowing argument injection via a `-`-leading repository url (e.g. --upload-pack) -> rceCVE-2026-845036.7 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoderCVE-2026-930094.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: --leasequery without address argument applies no source address checkCVE-2026-930104.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file contentCVE-2026-930066.8 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validationCVE-2026-930075.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transformsCVE-2026-930115.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurationsCVE-2026-930086.8 Medium
- red hat confidential compute attestation, dpu kit for nvidia, exploit intelligence +18 more +20 morePodman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layersCVE-2026-1142363.3 Low
- red hat migration toolkit for applications 8, migration toolkit for containers, migration toolkit for virtualization +12 more +14 moreAnsible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injectionCVE-2026-929828.5 High
- red hat openstack platform 18.0Openstack-network-exporter: basic-auth uses plaintext password storage and non-constant-time comparisonCVE-2026-835357.4 High
- red hat openstack platform 18.0Openstack-network-exporter: http.server has no readheadertimeout / readtimeout (slowloris)CVE-2026-835365.3 Medium
- red hat build of podman desktop, certification program for red hat enterprise linux 9, edge manager 1 +8 more +10 moreGvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /exposeCVE-2026-107935Fix available9.3 Critical
- red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +15 more +17 moreAnsible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code executionCVE-2026-89091Fix available8.8 High
- red hat ceph storage 5, ceph storage 9, openstack platform 17.1 +1 more +3 moreCommunity.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosureCVE-2026-878726.8 Medium
- red hat ceph storage 5, ceph storage 9, openstack platform 17.1 +1 more +3 moreCommunity.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution on the ansible controllerCVE-2026-878748.1 High
- red hat ceph storage 5, ceph storage 9, openstack platform 17.1 +1 more +3 moreAnsible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listingsCVE-2026-801585.5 Medium
- erlang erts, otp, erlang\/otp +3 more +5 moreStack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crashCVE-2026-49759Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 8 +7 more +9 moreAnsible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chownCVE-2026-11837Public exploitFix available7.3 High
- openstack ironic, red hat openshift container platform 4, openstack platform 16.2 +2 more +4 moreOpenStack Ironic: Crafted JSON String to Certain Endpoints on the API or JSON-RPC Service May Result in Service CrashCVE-2026-50589Fix available5.3 Medium
- red hat openshift container platform 4, openstack platform 16.2, openstack platform 17.1 +1 more +3 moreOpenStack oslo.messaging does not verify RabbitMQ broker hostname during TLS handshakeCVE-2026-44393Fix available7.4 High
- go standard library crypto/x509, red hat assisted installer for red hat openshift container platform 2, cert manager support for red hat openshift release 1.19 +128 more +130 moreInefficient candidate hostname parsing in crypto/x509CVE-2026-27145Public exploitFix available6.5 Medium
- openstack keystone, red hat openstack platform 13 (queens), openstack platform 16.2 +2 more +4 moreOpenStack Keystone has an Incorrect Authorization issueCVE-2026-43000Fix available6.0 Medium
- openstack keystone, red hat openstack platform 13 (queens), openstack platform 16.2 +2 more +4 moreOpenStack Keystone has an Authorization BypassCVE-2026-42999Fix available6.0 Medium
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +54 more +56 moreInvoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/sshCVE-2026-46595Public exploitFix available10.0 Critical
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh/knownhosts, red hat assisted installer for red hat openshift container platform 2 +53 more +55 moreInvoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhostsCVE-2026-42508Fix available9.1 Critical
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +62 more +64 moreInvoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/sshCVE-2026-39835Fix available5.3 Medium
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh/agent, red hat assisted installer for red hat openshift container platform 2 +46 more +48 moreInvoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agentCVE-2026-39832Fix available9.1 Critical
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +68 more +70 moreInvoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/sshCVE-2026-39830Fix available9.1 Critical
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +74 more +76 moreInvoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/sshCVE-2026-39829Fix available7.5 High
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +64 more +66 moreInvoking bypass of certificate restrictions in golang.org/x/crypto/sshCVE-2026-39828Fix available6.3 Medium
- nlnet labs unbound, red hat data grid 8, enterprise linux 10 +10 more +12 moreLong list of incoming EDNS options degrades performanceCVE-2026-41292Fix available6.6 Medium
- red hat ansible automation platform 2, openstack platform 18.0, quay 3 +1 more +3 moreAPScheduler's JSONSerializer and CBORSerializer are vulnerable to Remote Code Execution (RCE) via Insecure DeserializationCVE-2026-310729.8 Critical
- go standard library net/mail, golang go, red hat assisted installer for red hat openshift container platform 2 +108 more +110 moreQuadratic string concatenation in consumePhrase in net/mailCVE-2026-42499Fix available7.5 High
- go standard library net/mail, golang go, red hat assisted installer for red hat openshift container platform 2 +107 more +109 moreQuadratic string concatentation in consumeComment in net/mailCVE-2026-39820Fix available7.5 High
- go standard library net/http, golang go, http2 +106 more +108 moreInfinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCVE-2026-33814Fix available7.5 High
- apache thrift, red hat cryostat 4 on rhel 9, multicluster global hub +24 more +26 moreApache Thrift: TSSLTransportFactory.java hostname verificationCVE-2026-43869Fix available7.3 High
- openstack ironic, red hat openshift container platform 4, openstack platform 16.2 +2 more +4 moreOpenStack Ironic has an Incorrect Resource Transfer Between SpheresCVE-2026-42997Fix available7.7 High
- prometheus, red hat file integrity operator, logging for red hat openshift 6 +53 more +55 morePrometheus: remote read endpoint allows denial of service via crafted snappy payloadCVE-2026-42154Public exploitFix available7.5 High
- prometheus, red hat custom metric autoscaler operator for red hat openshift, file integrity operator +52 more +54 morePrometheus Azure AD remote write OAuth client secret exposed via config APICVE-2026-42151Fix available7.5 High
- openstack keystone, red hat openstack platform 13 (queens), openstack platform 16.2 +3 more +5 moreOpenStack Keystone has an Incorrect Authorization IssueCVE-2026-43001Fix available7.9 High
- apache thrift, red hat multicluster global hub, multicluster global hub 1.3.4 +17 more +19 moreApache Thrift: Go TFramedTransport uint32 overflowCVE-2026-41602Fix available7.5 High
- apache thrift, red hat cryostat 4 on rhel 9, multicluster global hub +16 more +18 moreApache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.CVE-2025-48431Fix available7.5 High
- red hat fast datapath for rhel 7, fast datapath for rhel 8, fast datapath for rhel 9 +6 more +8 moreOpenvswitch: open vswitch: denial of service via malformed ftp epasv commandCVE-2026-34956Fix available5.9 Medium
- go standard library crypto/x509, golang go, red hat assisted installer for red hat openshift container platform 2 +103 more +105 moreCase-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509CVE-2026-33810Fix available8.2 High
- go standard library crypto/tls, golang go, red hat assisted installer for red hat openshift container platform 2 +117 more +119 moreUnauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tlsCVE-2026-32283Fix available7.5 High
- erlang otp, erlang\/inets, erlang\/otp +3 more +5 moreScriptAlias CGI targets bypass directory auth in inets httpd (mod_auth vs mod_cgi path mismatch)CVE-2026-28808Fix available8.3 High
- erlang otp, erlang\/otp, erlang\/public key +4 more +6 moreOCSP designated-responder authorization bypass via missing signature verificationCVE-2026-32144Fix available7.6 High
- go-jose, red hat assisted installer for red hat openshift container platform 2, cert-manager operator for red hat openshift +110 more +112 moreGo JOSE affect by a panic in JWE decryptionCVE-2026-34986Fix available7.5 High
- grpc, grpc grpc-go, red hat assisted installer for red hat openshift container platform 2 +166 more +168 moregRPC-Go has an authorization bypass via missing leading slash in :pathCVE-2026-33186Public exploitFix available9.1 Critical
- ultrajson, red hat openstack platform 16.2, openstack platform 17.1 +1 more +3 moreUltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loopCVE-2026-32875Fix available7.5 High
- Show olderLoading…