Skip to contentRed Hat Update Infrastructure 4 For Cloud Providers vulnerabilities
- red hat ansible automation platform 2, satellite 6, update infrastructure 4 for cloud providers +1 more +3 morePython-pulpcore: pulpcore: header content guard jq filter exposes the content-app environmentCVE-2026-1230846.5 Medium
- red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9, satellite 6.17 for rhel 9 +4 more +6 morePulp-rpm: distribution tree publish creates directories from .treeinfo idsCVE-2026-1038705.0 Medium
- red hat ansible automation platform 2, satellite 6, update infrastructure 4 for cloud providers +1 more +3 morePulp-container: registry credentials are reused across remotes in a workerCVE-2026-1038686.5 Medium
- red hat ansible automation platform 2, ansible automation platform 2.6, ansible automation platform 2.6 for rhel 9 +9 more +11 morePulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theftCVE-2026-909598.1 High
- red hat ansible automation platform 2, satellite 6, update infrastructure 4 for cloud providers +1 more +3 morePulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg contentCVE-2026-842325.4 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +7 more +9 moreLibsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist dataCVE-2026-82327Fix available5.5 Medium
- red hat ansible automation platform 2, ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9 +10 more +12 morePulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexportCVE-2026-127019.0 Critical
- aio-libs aiohttp, red hat exploit intelligence, lightspeed core +27 more +29 moreAIOHTTP Vulnerable to Deserialization of Untrusted DataCVE-2026-34993Fix available6.4 Medium
- microsoft libsolv, red hat enterprise linux 10, enterprise linux 7 +6 more +8 moreLibsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of serviceCVE-2026-48863Fix available7.5 High
- jpadilla pyjwt, red hat openshift lightspeed, ai inference server +37 more +39 morePyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowedCVE-2026-48526Fix available7.4 High
- opensuse libsolv, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +37 more +39 moreLibsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page dataCVE-2026-48864Fix available7.8 High
- opensuse libsolv, red hat enterprise linux 10, enterprise linux 10.0 extended update support +12 more +14 moreLibsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv fileCVE-2026-9149Fix available6.5 Medium
- opensuse libsolv, red hat enterprise linux 10, enterprise linux 10.0 extended update support +12 more +14 moreLibsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksumsCVE-2026-9150Fix available6.5 Medium
- python urllib3, red hat exploit intelligence, external secrets operator for red hat openshift +48 more +50 moreurllib3: Decompression-bomb safeguards bypassed in parts of the streaming APICVE-2026-44432Fix available8.9 High
- pyca pyopenssl, red hat confidential compute attestation, exploit intelligence +37 more +39 morepyOpenSSL DTLS cookie callback buffer overflowCVE-2026-27459Fix available7.2 High
- djangoproject django, red hat ansible automation platform 2, ansible automation platform 2.5 +15 more +17 morePotential SQL injection via QuerySet.order_by and FilteredRelationCVE-2026-1312Public exploitFix available5.4 Medium
- djangoproject django, red hat ansible automation platform 2, ansible automation platform 2.5 +15 more +17 morePotential SQL injection in column aliases via control charactersCVE-2026-1287Fix available5.4 Medium
- djangoproject django, red hat ansible automation platform 2, ansible automation platform 2.5 +15 more +17 morePotential SQL injection via raster lookups on PostGISCVE-2026-1207Public exploitFix availableEPSS 12.8%5.4 Medium
- redhat satellite, red hat satellite 6.13 for rhel 8, satellite 6.14 for rhel 8 +4 more +6 morePuppet-pulpcore: an authentication bypass vulnerability exists in pulpcoreCVE-2024-7923Fix available9.8 Critical
- pulpproject pulp, red hat ansible automation platform 2, satellite 6 +1 more +3 morePulpcore: rbac permissions incorrectly assigned in tasks that create objectsCVE-2024-71436.7 Medium
- m2crypto project m2crypto, red hat enterprise linux 6, enterprise linux 7 +7 more +9 moreM2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657CVE-2023-50781Fix available7.5 High
- couchbase server, cryptography.io cryptography, red hat ansible automation platform 2 +8 more +10 morePython-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659CVE-2023-50782Fix available7.5 High