Skip to contentRed Hat vulnerabilities
Products
Show 140 moreShow less
Newest
- redhat build of keycloak, red hat build of keycloak 26.6, build of keycloak 26.6.7 +3 more +5 moreKeycloak-services: keycloak-services: authorization codes can be retargeted to another client sessionCVE-2026-16089Fix available5.4 Medium
- red hat build of keycloak 26.6, build of keycloak 26.6.7, data grid 8 +3 more +5 moreKeycloak-services: keycloak-services: organization invitation link exposure allows unauthorized member creationCVE-2026-16072Fix available4.9 Medium
- red hat build of keycloak 26.6, build of keycloak 26.6.8, data grid 8 +3 more +5 moreKeycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url changeCVE-2026-159435.5 Medium
- red hat build of keycloak 26.6, build of keycloak 26.6.7, data grid 8 +5 more +7 moreKeycloak-services: keycloak-services: group hierarchy search discloses hidden parent groups under fgap v2CVE-2026-15945Fix available4.3 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +5 more +7 morePipewire: pipewire: sandbox escape and arbitrary code execution via malicious library loadingCVE-2026-5674Fix available8.8 High
- keycloak, red hat jboss enterprise application platform 8, jboss enterprise application platform expansion pack +1 more +3 moreOrg.keycloak/keycloak-quarkus-server: keycloak: unauthorized access via jwt authorization grant with disabled usersCVE-2026-1609Fix available8.1 High
- feast feature server, red hat openshift ai (rhoai) +1 moreFeast: resource exhaustion via websocket endpointCVE-2026-235387.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreSamba-winbind: samba: pam_winbind mkhomedir chowns critical system paths without validationCVE-2026-15779Fix available6.1 Medium
- red hat confidential compute attestation, openshift container platform 4, openshift container platform 4.12 +11 more +13 moreGithub.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home envCVE-2026-158097.8 High
- red hat openshift gitopsGitops-operator: gitops-operator: missing allowednamespace check in reconcilerhook for clusterrole/role cases enables potential privilege escalation and dosCVE-2026-142517.7 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary stringCVE-2026-157146.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leakCVE-2026-157135.9 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +12 more +14 moreLibsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violationCVE-2026-15711Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +12 more +14 moreSoupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of serviceCVE-2026-15709Fix available7.5 High
- red hat enterprise linux 10Soupclientmessageiohttp2: libsoup3: libsoup: http/2 goaway frame parsing heap buffer over-read via invalid nul-termination assumptionCVE-2026-157125.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: incomplete fix for cve-2026-0716: out-of-bounds read in libsoup websocket frame processing (unmasked path)CVE-2026-12478Public exploitFix available4.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreQemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keysCVE-2026-12080Public exploitFix available7.3 High
- red hat openshift gitops, argoproj argo-helm, red hat openshift data foundation 4 +1 more +3 moreArgo-cd: argo cd unauthenticated remote code execution in repo-server via generatemanifest grpc endpointCVE-2026-154168.9 High
- red hat pen drive powered by red hat lightspeedRedhatinsights/incluster-checks: incluster-checks: privileged host-chroot debug pods created in shared default namespace enable privilege escalation to node rootCVE-2026-155847.5 High
- red hat openshift distributed tracing 3.10.1Tempo-operator: tempo operator: query rbac bypassCVE-2026-621476.5 Medium
- red hat openshift ai 2.25, openshift ai 3.4 +1 moreVllm-orchestrator-gateway: vllm-orchestrator-gateway: authorization header and full chat payloads logged at hard-coded debug defaultCVE-2026-155747.5 High
- red hat openshift ai 2.25, openshift ai 3.4 +1 moreGuardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)CVE-2026-151439.3 Critical
- red hat cost management on-premise 1, enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: heap overflow oob read while parsing a tar archive contains a pax extended headerCVE-2026-15028Fix available3.9 Low
- red hat openshift ai 2.25, openshift ai 3.3, openshift ai 3.4 +2 moreGuardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)CVE-2026-153789.3 Critical
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +13 more +15 moreGstreamer1-plugins-bad-free: gstreamer: dtls certificate subject dn stack buffer overflow in openssl_verify_callbackCVE-2026-59692Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +12 more +14 moreGstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb hextile heap out-of-bounds write with 16bpp framebufferCVE-2026-59691Fix available7.1 High
- redhat openshift ai, red hat openshift ai 2.25, openshift ai 3.3 +1 more +3 moreGuardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regexCVE-2026-151546.5 Medium
- trustyai-explainability trustyai-service-operator, red hat openshift ai (rhoai) +1 moreTrustyai-service-operator: trustyai service operator: gorch port bypass when auth is enabledCVE-2026-150636.3 Medium
- trustyai trustyai-service-operator, red hat openshift ai (rhoai) +1 moreTrustyai-service-operator: trustyai service operator: unauthenticated access to ai guardrails and orchestrator apisCVE-2026-150446.3 Medium
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: non-constant-time comparison in pbkdf2-sha256 password verificationCVE-2026-150413.7 Low
- red hat jboss enterprise application platform 7, jboss enterprise application platform 8, jboss enterprise application platform 8.1 for rhel 10 +5 more +7 moreJastow: jastow cross-site scripting attack due to unsanitized uriCVE-2025-12799Fix available6.5 Medium
- red hat directory server 11, directory server 12, directory server 13 +8 more +10 more389-ds-base: 389-ds-base: static initialization vector in aes-cbc/3des-cbc attribute encryptionCVE-2026-149694.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGstreamer1-plugins-bad-free: gstreamer: webrtcbin accepts remote sdp without a=fingerprint due to inverted presence checkCVE-2026-14935Fix available3.7 Low
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: heap-buffer-overflow in dn normalization via quoted multivalued rdnCVE-2026-149405.3 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +24 more +26 moreSssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypassCVE-2026-14476Fix available8.0 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +24 more +26 moreSssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalationCVE-2026-14474Fix available8.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreGimp: gimp: integer overflow in read_rle_channel()CVE-2026-58384Fix available7.3 High
- 389ds 389-ds-base, red hat directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8 +21 more +23 more389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbindCVE-2026-11610Fix available8.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: denial of service via integer overflow in playstation tim loaderCVE-2026-59089Fix available5.5 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreGimp: gimp: stack buffer overflow in pnmscanner_gettoken()CVE-2026-58380Fix available7.3 High
- red hat advanced cluster security 4, advanced cluster security 4.9, advanced cluster security for kubernetes 4.11 +1 more +3 moreStackrox: stackrox: unbounded graphql query depth allows authenticated denial of serviceCVE-2026-91657.7 High
- red hat build of keycloak, data grid 8, jboss enterprise application platform expansion pack +1 more +3 moreKeycloak-services: keycloak-services: oidc email_verified claim incorrectly applied to userinfo emailCVE-2026-147814.8 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +8 more +10 moreGimp: gimp: heap buffer overflow in read_channel_data()CVE-2026-58379Fix available7.3 High
- red hat build of keycloak 26.4, build of keycloak 26.4.14, build of keycloak 26.6 +2 more +4 moreKeycloak-services: keycloak: fgap v2 parent group children endpoint bypasses per-child view permission filterCVE-2026-14615Fix available4.3 Medium
- red hat build of keycloak, build of keycloak 26.4, build of keycloak 26.4.14 +5 more +7 moreKeycloak-services: keycloak-services: fgap v2 client scope assignment bypass via clientresourceCVE-2026-14614Fix available5.4 Medium
- red hat build of keycloak, build of keycloak 26.6, build of keycloak 26.6.6 +3 more +5 moreKeycloak-services: keycloak-services: keycloak: fgap v2 role groups endpoint discloses hidden group metadata without group view permissionCVE-2026-14613Fix available4.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreFreeipa: ipa: idm: freeipa: off-by-one buffer overflows in ipa-otpd oauth2.c during oauth2 device authorizationCVE-2026-146124.2 Medium
- hp hplip, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreHplip: incomplete fix for cve-2026-8631CVE-2026-14544Fix available9.8 Critical
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: double-free in read_layer_block()CVE-2026-58381Fix available6.1 Medium
- red hat confidential compute attestation, ansible automation platform 2, ansible automation platform 2.6 for rhel 9 +12 more +14 moreSequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusionCVE-2026-42784Fix available7.4 High
- Show moreLoading…