Skip to contentRed Hat Openstack Services On Openshift 18.0 vulnerabilities
- red hat agentic cluster security suite 0.2, cost management 4, advanced cluster security for kubernetes 4.11 +55 more +57 moreCa-certificates: distrust emudhra intermediate ca certificates due to security concernsCVE-2026-114406Fix available6.8 Medium
- erlang otp, erlang\/otp, red hat hardened images +3 more +5 morenameConstraints DNS bypass via subject CommonName fallback in public_key hostname verificationCVE-2026-42790Fix available7.6 High
- erlang otp, erlang\/otp, red hat hardened images +3 more +5 moreNon-CA certificate accepted as intermediate issuer in public_key path validationCVE-2026-42789Fix available7.0 High
- go standard library net, golang go, red hat assisted installer for red hat openshift container platform 2 +145 more +147 moreCrash when handling long CNAME response in netCVE-2026-33811Fix available7.5 High
- openstack keystone, red hat openstack platform 13 (queens), openstack platform 16.2 +3 more +5 moreOpenStack Keystone has an Incorrect Authorization IssueCVE-2026-43001Fix available7.9 High
- go standard library crypto/x509, golang go, red hat assisted installer for red hat openshift container platform 2 +103 more +105 moreCase-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509CVE-2026-33810Fix available8.2 High
- go standard library crypto/tls, golang go, red hat assisted installer for red hat openshift container platform 2 +117 more +119 moreUnauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tlsCVE-2026-32283Fix available7.5 High
- go standard library crypto/x509, golang go, red hat assisted installer for red hat openshift container platform 2 +140 more +142 moreUnexpected work during chain building in crypto/x509CVE-2026-32280Fix available7.5 High
- openstack glance, red hat openstack platform 16.2, openstack platform 17.1 +1 more +3 moreOpenStack Glance is affected by Server-Side Request Forgery (SSRF)CVE-2026-34881Fix available5.0 Medium
- go standard library net/url, golang go, red hat assisted installer for red hat openshift container platform 2 +143 more +145 moreIncorrect parsing of IPv6 host literals in net/urlCVE-2026-25679Fix available7.5 High
- go standard library crypto/x509, golang go, red hat assisted installer for red hat openshift container platform 2 +99 more +101 moreIncorrect enforcement of email constraints in crypto/x509CVE-2026-27137Fix available7.5 High
- openstack nova, red hat openstack platform 13 (queens), openstack platform 16.2 +4 more +6 moreOpenStack Nova calls qemu-img without format restrictions for resizeCVE-2026-24708Fix available8.2 High
- pyasn1, debian linux, red hat lightspeed core +48 more +50 morepyasn1 has a DoS vulnerability in decoderCVE-2026-23490Fix available7.5 High
- go standard library net/url, golang go, red hat assisted installer for red hat openshift container platform 2 +160 more +162 moreMemory exhaustion in query parameter parsing in net/urlCVE-2025-61726Fix available7.5 High