Skip to contentRed Hat vulnerabilities
Products
Show 140 moreShow less
Newest
- traefik, red hat openshift dev spaces 3.27 +1 moreTraefik: lowercase `Connection` tokens can delete traefik-managed forwarded identity headers (for example, `X-Real-Ip`)CVE-2026-29054Fix available7.5 High
- authlib, red hat ansible automation platform 2.6, quay 3.10 +5 more +7 moreAuthlib: Setting `alg: none` and a blank signature appears to bypass signature verificationCVE-2026-28802Fix available7.7 High
- locutus, red hat logging subsystem for red hat openshift +1 moreLocutus: Remote Code Execution (RCE) in locutus call_user_func_array due to Code InjectionCVE-2026-29091Fix available8.1 High
- traefik, red hat openshift dev spaces 3.27 +1 moreTraefik: tcp router clears read deadlines before tls forwarding, enabling stalled handshakes (slowloris doS)CVE-2026-26999Fix available7.5 High
- nltk, nltk nltk/nltk, red hat lightspeed core +5 more +7 morePath Traversal in nltk/nltkCVE-2026-0847Public exploitFix available8.6 High
- expressjs multer, red hat developer hub 1.8, developer hub 1.9 +1 more +3 moreMulter vulnerable to Denial of Service via uncontrolled recursionCVE-2026-3520Fix available8.7 High
- docker compose, cli, command line interface +27 more +29 moreDocker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityCVE-2025-15558Fix available7.0 High
- linux-nfs nfs-utils, red hat ceph storage 8, enterprise linux 10 +13 more +15 moreNfs-utils: rpc.mountd in the nfs-utils privilege escalationCVE-2025-12801Fix available6.5 Medium
- apache artemis, apache software foundation activemq artemis, red hat amq broker 7.12.6 +17 more +19 moreApache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federationCVE-2026-27446Fix availableEPSS 11.4%9.3 Critical
- djangoproject django, red hat ansible automation platform 2, discovery 2 +1 more +3 morePotential denial-of-service vulnerability in URLField via Unicode normalization on WindowsCVE-2026-25673Fix available7.5 High
- kernel util-linux, red hat enterprise linux 10, enterprise linux 7 +4 more +6 moreUtil-linux: util-linux: access control bypass due to improper hostname canonicalizationCVE-2026-3184Fix available3.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: virtio-snd: integer overflow leading to unbounded memory allocationCVE-2026-3196Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for cve-2024-7730)CVE-2026-3195Fix available7.4 High
- academysoftwarefoundation openexr, red hat ai inference server 3.3, enterprise linux 10 +17 more +19 moreOpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB writeCVE-2026-27622Fix available8.4 High
- aws aws-lc, amazon aws-lc-sys, aws libcrypto +7 more +9 morePKCS7_verify Signature Validation Bypass in AWS-LCCVE-2026-3338Fix available8.7 High
- aws aws-lc, amazon aws-lc-sys, aws libcrypto +7 more +9 morePKCS7_verify Certificate Chain Validation Bypass in AWS-LCCVE-2026-3336Fix available8.7 High
- chainguard kaniko, red hat openshift serverless +1 morekaniko has tar archive path traversal in build context extraction allows writing files outside destination directoryCVE-2026-28406Fix available8.2 High
- nest.js, nestjs nest, red hat developer hub +1 more +3 moreNestJS 11.1.13 - Lack of data validation allowing authentication/authorization bypassCVE-2026-2293Fix available8.2 High
- expressjs multer, red hat logging subsystem for red hat openshift, developer hub 1.8 +7 more +9 moreMulter vulnerable to Denial of Service via incomplete cleanupCVE-2026-3304Public exploitFix available8.7 High
- expressjs multer, red hat logging subsystem for red hat openshift, developer hub 1.8 +7 more +9 moreMulter vulnerable to Denial of Service via resource exhaustionCVE-2026-2359Fix available8.7 High
- red hat pen drive powered by red hat lightspeed, 3scale api management platform 2, enterprise linux 10 +5 more +7 moreRedis: redis: out-of-bounds read via crafted cluster bus packetsCVE-2026-92925Fix available7.1 High
- keycloak, red hat build of keycloak 26.2, build of keycloak 26.2.11 +3 more +5 moreOrg.keycloak/keycloak-services: webauthn attestation statement verification bypassCVE-2025-12150Fix available3.1 Low
- logicminds rubyipmi, redhat satellite, red hat satellite 6 +4 more +6 moreRubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc usernameCVE-2026-0980Fix available8.3 High
- redhat keycloak, red hat build of keycloak 26.4, build of keycloak 26.4.9 +4 more +6 moreOrg.keycloak/keycloak-services: keycloak: unauthorized modification of unmanaged user attributes by administratorsCVE-2026-0871Fix available4.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGvfs: gvfs ftp backend: information disclosure via untrusted pasv responsesCVE-2026-28295Fix available4.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGvfs: ftp gvfs backend: arbitrary ftp command injection via crlf sequences in file pathsCVE-2026-28296Fix available4.3 Medium
- angular, red hat advanced cluster management for kubernetes 2, enterprise linux 10 +5 more +7 moreAngular i18n vulnerable to Cross-Site Scripting (XSS)CVE-2026-27970Fix available7.6 High
- koajs koa, red hat developer hub, openshift ai (rhoai) +4 more +6 moreKoa has Host Header Injection via `ctx.hostname`CVE-2026-27959Public exploitFix available7.5 High
- lfprojects mcp go sdk, modelcontextprotocol go-sdk, red hat migration toolkit for virtualization +3 more +5 moreMCP Go SDK Vulnerable to Improper Handling of Case SensitivityCVE-2026-27896Fix available7.0 High
- storybook, red hat enterprise linux 10, enterprise linux 9 +2 more +4 moreStorybook Dev Server Vulnerable to WebSocket HijackingCVE-2026-27148Fix available8.9 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has Out-of-bounds WriteCVE-2026-26965Fix available8.8 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has Out-of-bounds WriteCVE-2026-26955Fix available8.8 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick - Command Injection via SVG DecoderCVE-2026-56379Fix available9.2 Critical
- swaldman c3p0, red hat build of apache camel - hawtio 4, build of apache camel 4.14.4 for spring boot 3.5.11 +15 more +17 morec3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString propertyCVE-2026-27830Fix available8.9 High
- swaldman mchange-commons-java, mchange commons java, red hat build of apache camel - hawtio 4 +17 more +19 moremchange-commons-java: Remote Code Execution via JNDI Reference ResolutionCVE-2026-27727Fix available8.9 High
- redhat developer hub, red hat developer hub 1.8, developer hub 1.9 +2 moreRhdh: graphql injection leading to platform-wide denial of service (dos) in rh developer hub orchestrator pluginCVE-2026-31186.5 Medium
- freedesktop udisks, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 moreUdisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus apiCVE-2026-26104Fix available5.5 Medium
- freedesktop udisks, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 moreUdisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus apiCVE-2026-26103Fix available7.1 High
- rollup, red hat openshift pipelines, openshift service mesh 3 +26 more +28 moreRollup 4 has Arbitrary File Write via Path TraversalCVE-2026-27606Public exploitFix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Firefox 148 and Thunderbird 148CVE-2026-28079.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the DOM: Core & HTML componentCVE-2026-27999.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the DOM: Core & HTML componentCVE-2026-27988.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the JavaScript: GC componentCVE-2026-27979.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreJIT miscompilation in the JavaScript: WebAssembly componentCVE-2026-2796Public exploit9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the JavaScript: GC componentCVE-2026-27959.8 Critical
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreInformation disclosure due to uninitialized memory in Firefox and Firefox Focus for AndroidCVE-2026-27947.5 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreMemory allocation with excessive without limits in the internal SVG decoderCVE-2026-25985Fix available7.5 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick's policy bypass through path traversal allows reading restricted content despite secured policyCVE-2026-25965Fix available8.6 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 +2 moreImageMagick has heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensionsCVE-2026-25794Fix available8.2 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148CVE-2026-2793Fix available9.8 Critical
- Show moreLoading…