Skip to contentRed Hat vulnerabilities
Products
Show 140 moreShow less
Newest
- apache http server, red hat jboss core services for rhel 8, jboss core services on rhel 7 +15 more +17 moreApache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header()CVE-2026-28780Fix available9.8 Critical
- ruby net-imap, red hat 3scale api management platform 2, enterprise linux 10 +19 more +21 morenet-imap: Command Injection via unvalidated Symbol inputsCVE-2026-42258Fix available5.8 Medium
- argoproj argo workflows, argo-workflows, red hat openshift ai (rhoai) +2 moreArgo Workflows has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/SecureCVE-2026-42296Fix available8.1 High
- argoproj argo workflows, argo-workflows, red hat openshift ai (rhoai) +2 moreArgo Workflows: Unauthenticated Memory Exhaustion (DoS) in Webhook InterceptorCVE-2026-42294Fix available8.2 High
- argoproj argo workflows, argo-workflows, red hat openshift ai (rhoai) +2 moreArgo Workflows Is Missing Authorization in Sync ConfigMap ProviderCVE-2026-42297Fix available8.5 High
- postfix, red hat enterprise linux 10, enterprise linux 10.0 extended update support +10 more +12 morePostfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over...CVE-2026-43964Fix available3.7 Low
- red hat enterprise linux 6, hardened images, vda-linux busybox mirror +2 moreBusyBox DHCPv6 Client Heap Buffer Overflow via DNS_SERVERSCVE-2026-29004Fix available7.2 High
- quarkus, red hat cryostat 4 on rhel 9, hawtio hawtio 4.4.0 +16 more +18 moreQuarkus authorization bypass via semicolon path normalization inconsistencyCVE-2026-39852Fix available8.8 High
- apache opennlp, red hat build of apache camel for spring boot 4, data grid 8 +4 more +6 moreApache OpenNLP: XXE via Dictionary Parsing in DictionaryEntryPersistorCVE-2026-40682Fix available9.1 Critical
- apache opennlp, red hat build of apache camel for spring boot 4, data grid 8 +5 more +7 moreApache OpenNLP: Arbitrary Class Instantiation via Model Manifest in ExtensionLoaderCVE-2026-42027Fix available9.8 Critical
- apache opennlp, red hat data grid 8, fuse 7 +2 more +4 moreApache OpenNLP: OOM DoS via Unbounded Array Allocation in AbstractModelReaderCVE-2026-42440Fix available7.5 High
- patriksimek vm2, red hat developer hub, self-service automation portal 2 +2 morevm2: WASM Sandbox Escape (Node 25 only)CVE-2026-26956Fix available9.8 Critical
- patriksimek vm2, red hat developer hub, self-service automation portal 2 +2 morevm2: Sandbox EscapeCVE-2026-26332Fix available9.8 Critical
- patriksimek vm2, red hat developer hub, developer hub 1.10 +1 more +3 morevm2: Sandbox Breakout Through InspectCVE-2026-24781Fix available9.8 Critical
- patriksimek vm2, red hat developer hub, self-service automation portal 2 +2 morevm2: Sandbox Breakout Through Promise SpeciesCVE-2026-24120Fix available9.8 Critical
- patriksimek vm2, red hat developer hub, self-service automation portal 2 +2 moreVM2 Sandbox Breakout Through __lookupGetter__CVE-2026-24118Public exploitFix available9.8 Critical
- apache http server, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreApache HTTP Server: http2: double free and possible RCE on early resetCVE-2026-23918Public exploitFix availableEPSS 49.7%8.8 High
- red hat ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9, ansible automation platform 2.6 +1 more +3 moreAap-controller: aap-gateway: account hijacking and unauthorized access via unverified email linkingCVE-2026-62668.3 High
- websockets ws, red hat cryostat 4, cryostat 4 on rhel 9 +47 more +49 morews: Uninitialized memory disclosureCVE-2026-45736Fix available4.4 Medium
- prometheus, red hat file integrity operator, logging for red hat openshift 6 +53 more +55 morePrometheus: remote read endpoint allows denial of service via crafted snappy payloadCVE-2026-42154Public exploitFix available7.5 High
- prometheus, red hat custom metric autoscaler operator for red hat openshift, file integrity operator +52 more +54 morePrometheus Azure AD remote write OAuth client secret exposed via config APICVE-2026-42151Fix available7.5 High
- containers bubblewrap, red hat enterprise linux 10, enterprise linux 8 +2 more +4 morebubblewrap vulnerable to privilege escalation in setuid mode via ptraceCVE-2026-41163Fix available8.7 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 moreAn integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a...CVE-2026-37459Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 9 +1 moreAn issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the...CVE-2025-700715.9 Medium
- red hat enterprise linux 10, enterprise linux 9 +1 moreAn issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the...CVE-2025-700697.5 High
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +32 more +34 moreGnutls: gnutls: security bypass due to incorrect name constraint handlingCVE-2026-42011Fix available7.4 High
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +36 more +38 moreGnutls: gnutls: authentication bypass via nul character in usernameCVE-2026-42010Fix available7.1 High
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +29 more +31 moreGnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassemblyCVE-2026-33846Fix available7.5 High
- argoproj argo cd, argo-cd, red hat openshift data foundation 4 +3 more +5 moreArgoCD ServerSideDiff is vulnerable to Kubernetes Secret ExtractionCVE-2026-42880Public exploitFix available9.6 Critical
- argoproj argo cd, red hat openshift data foundation 4, openshift gitops +2 moreIn Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext...CVE-2026-438247.7 High
- libssh2, red hat enterprise linux 6, enterprise linux 7 +9 more +11 morelibssh2 userauth.c userauth_password integer overflowCVE-2026-7598Fix available6.9 Medium
- linux, linux kernel, red hat enterprise linux 10 +19 more +21 moreipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()CVE-2026-43038Fix available9.8 Critical
- linux, linux kernel, red hat nvidia for rhel 10 +26 more +28 moreip6_tunnel: clear skb2->cb[] in ip4ip6_err()CVE-2026-43037Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +9 more +11 moresmb: client: validate the whole DACL before rewriting it in cifsaclCVE-2026-31709Fix available8.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morewriteback: Fix use after free in inode_switch_wbs_work_fn()CVE-2026-31703Fix available7.8 High
- openstack ironic-python-agent, ironic python agent, red hat openshift container platform 4 +4 more +6 moreOpenStack Ironic Python Agent Includes Functionality from Untrusted Control SphereCVE-2026-43003Fix available8.0 High
- openstack keystone, red hat openstack platform 13 (queens), openstack platform 16.2 +3 more +5 moreOpenStack Keystone has an Incorrect Authorization IssueCVE-2026-43001Fix available7.9 High
- frrouting, red hat enterprise linux 10, enterprise linux 8 +1 more +3 moreAn off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd...CVE-2026-37457Fix available7.5 High
- wireshark, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreHeap-based Buffer Overflow in WiresharkCVE-2026-5403Fix available7.8 High
- wireshark, red hat enterprise linux 10, enterprise linux 10.0 extended update support +4 more +6 moreImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in WiresharkCVE-2026-5656Fix available7.0 High
- wireshark, red hat enterprise linux 10, enterprise linux 10.0 extended update support +4 more +6 moreHeap-based Buffer Overflow in WiresharkCVE-2026-5405Fix available7.8 High
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +32 more +34 moreGnutls: gnutls: denial of service via dtls zero-length fragmentCVE-2026-33845Fix available7.5 High
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +13 more +15 moreGnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp responseCVE-2026-3832Fix available3.7 Low
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +31 more +33 moreGnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparisonCVE-2026-3833Fix available6.5 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreOrg.keycloak.keycloak-services: improper access control on keycloak server when the account account api feature is disabledCVE-2026-75005.4 Medium
- red hat multicluster engine for kubernetes 2.1, multicluster engine for kubernetes 2.11, multicluster engine for kubernetes 2.7 +2 more +4 moreAssisted-service: assisted-service: authenticated users can gain administrative access to openshift clusters via credential disclosureCVE-2026-71636.1 Medium
- pallets click click, red hat ansible automation platform 2, ansible automation platform 2.5 for rhel 8 +3 more +5 more[DISPUTED] Pallets Click contains a command injection via Unsanitized Filename "click.edit()"CVE-2026-7246Fix availableDisputed7.2 High
- qt, qt qtdeclarative, red hat multicluster global hub +10 more +12 morePossible QML code injection in VectorImage componentCVE-2025-14576Fix available7.4 High
- bytecodealliance wasmtime, red hat enterprise linux 10, hardened images +2 moreWasmtime: Panic when allocating a table exceeding the size of the host's address spaceCVE-2026-44216Fix available5.9 Medium
- wireshark, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreHeap-based Buffer Overflow in WiresharkCVE-2026-5402Fix available8.8 High
- Show moreLoading…