Skip to contentRed Hat vulnerabilities
Products
Show 140 moreShow less
Newest
- red hat multicluster global hub 1.4.9, multicluster global hub 1.5.8, multicluster global hub 1.6.6 +9 more +11 moreMulticloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clustersCVE-2026-667929.9 Critical
- red hat openshift ai 3.4Models-as-a-service: red hat openshift ai: maas-api and maas-controller serviceaccounts with excessive permissions lead to privilege escalationCVE-2026-152187.9 High
- redhat quay, red hat openshift update service, quay 3 +2 moreQuay: ssrf via build archive_url in quay build apiCVE-2026-742474.2 Medium
- redhat quay, red hat openshift update service, quay 3 +2 moreQuay: unauthenticated exported logs download in quayCVE-2026-742455.9 Medium
- redhat quay, red hat openshift update service, quay 3 +2 moreQuay: stripe webhook accepts forged events without signature verification in quayCVE-2026-742445.9 Medium
- redhat quay, red hat openshift update service, quay 3 +2 moreQuay: unauthenticated secscan notification endpoint in quay when psk is unsetCVE-2026-742436.5 Medium
- redhat quay, red hat openshift update service, quay 3 +2 moreQuay: repository notification uuid idor in quay apiCVE-2026-742425.3 Medium
- redhat quay, red hat openshift update service, quay 3 +2 moreQuay: ldap referral filter injection in quay external ldap authenticationCVE-2026-742414.8 Medium
- redhat quay, red hat openshift update service, quay 3 +2 moreQuay: jwt claim validation bypasses in quay federated robot and sso authenticationCVE-2026-742405.4 Medium
- red hat build of apache camel for spring boot 4, enterprise linux 10, enterprise linux 8 +5 more +7 moreIo.undertow/undertow: undertow: http response header integrity issue due to character truncationCVE-2026-198795.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +7 more +9 moreLibdm: lvm2: libdm: denial of service via uncontrolled recursion in config parserCVE-2026-19617Fix available5.5 Medium
- red hat ansible automation platform 2, enterprise linux 10, enterprise linux 8 +7 more +9 morePodman: podman: quadlet install --replace non-truncating write retains removed host-access directivesCVE-2026-19730Fix available4.2 Medium
- red hat multicluster engine for kubernetes 2.10, multicluster engine for kubernetes 2.11, multicluster engine for kubernetes 2.17 +3 more +5 moreClusterclaims-controller: confused deputy: tenant-controlled clusterclaim labels propagated to managedcluster, enabling cross-tenant managedclusterset joinCVE-2026-732667.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreSblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handlingCVE-2026-735846.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreSblim-sfcb: unsafe deserialization in sblim-sfcb provider-manager ipc allows out-of-bounds memory access via malformed operationhdrCVE-2026-735836.6 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreSblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attackCVE-2026-735856.3 Medium
- red hat enterprise linux 10, enterprise linux 9, redhat enterprise linux +2 moreOpen-iscsi: open-iscsi: integer underflow in iscsiuio ipv4 dhcp parsingCVE-2026-18728Fix available6.5 Medium
- openstack designateIn OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving...CVE-2026-71194Fix available6.8 Medium
- openstack designateIn OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the...CVE-2026-71193Fix available9.6 Critical
- redhat insights-client, red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13 +5 more +7 moreInsights-client: insights-client: clusterrole grants cluster-wide secrets get/list/watch beyond least privilegeCVE-2026-718466.5 Medium
- red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +3 more +5 moreAcm-search-v2-api-rhel9: search-v2-api: unbounded tokenreviews cache allows unauthenticated memory-exhaustion dosCVE-2026-714697.5 High
- red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +3 more +5 moreAcm-search-v2-rhel9: search-v2-operator: hub search cr collector.imageoverride propagated to every spoke as arbitrary container imageCVE-2026-714719.0 Critical
- red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +3 more +5 moreAcm-search-v2-rhel9: search-v2-operator: addonfactory.getvaluesfromaddonannotation enables arbitrary helm-values override per spokeCVE-2026-714738.5 High
- red hat enterprise linux 10, enterprise linux 9, redhat enterprise linux +2 moreOpen-iscsi: open-iscsi: integer underflow in iscsiuio dhcpv6 parsingCVE-2026-18727Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 9, redhat enterprise linux +2 moreOpen-iscsi: open-iscsi: denial of service in iscsiuio router advertisement parsingCVE-2026-18726Fix available6.5 Medium
- rsyslog, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 moreRsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogdCVE-2026-19654Fix available7.5 High
- red hat multicluster engine for kubernetes 2.10, multicluster engine for kubernetes 2.11, multicluster engine for kubernetes 2.17 +3 more +5 moreProvider-credential-controller: provider-credential-controller: cross-namespace credential propagation via attacker-controlled copiedfrom labels bypasses authorizationCVE-2026-191305.8 Medium
- red hat container native virtualization 4.12, container native virtualization 4.13, container native virtualization 4.14 +8 more +10 moreKubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to hostCVE-2026-13622Fix available8.8 High
- red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +3 more +5 moreMulticloud-operators-subscription: multicloud-operators-subscription: hub and spoke serviceaccounts bound to wildcard rbac (*/*/*)CVE-2026-725089.9 Critical
- gstreamer gst-plugins-good, gstreamer, red hat enterprise linux 10 +14 more +16 moreGstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/writeCVE-2026-73433Fix available6.6 Medium
- gstreamer gst-plugins-good, gstreamer, red hat enterprise linux 10 +14 more +16 moreGstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsingCVE-2026-73434Fix available6.1 Medium
- red hat multicluster engine for kubernetes 2.10, multicluster engine for kubernetes 2.11, multicluster engine for kubernetes 2.17 +3 more +5 moreCluster-curator-controller: cluster-curator-controller: spec.install.overridejob allows arbitrary job spec injectionCVE-2026-732689.9 Critical
- red hat multicluster engine for kubernetes 2.10, multicluster engine for kubernetes 2.11, multicluster engine for kubernetes 2.17 +3 more +5 moreCluster-curator-controller: cluster-curator-controller: tenant-controllable trigger creates clusterrolebinding granting cluster-wide secrets access to namespace-local saCVE-2026-732699.9 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +8 more +10 moreBinutils: binutils: multiple use-after-free in add_archive_element via lto plugin processingCVE-2026-19548Fix available5.5 Medium
- red hat amq broker 7, build of apache camel 4 for quarkus 3, build of apache camel for spring boot 4 +6 more +8 moreArtemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in red hat eap permit deserialization by defaultCVE-2026-864048.8 High
- red hat directory server 11, directory server 12, directory server 13 +5 more +7 more389-ds-base: 389-ds-base: pre-authentication double-free in get_ldapmessage_controls_ext() via critical session tracking controlCVE-2026-186635.9 Medium
- red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +3 more +5 moreMulticloud-operators-channel: multicloud-operators-channel: cross-namespace secret and configmap mutation via spec.secretref.namespace confused deputyCVE-2026-649276.4 Medium
- red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +3 more +5 moreMulticloud-operators-channel: multicloud-operators-channel: auto-generated role grants every managed-cluster agent secrets:get,list,watch in channel namespacesCVE-2026-731227.7 High
- red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +3 more +5 moreMulticloud-operators-subscription: multicloud-operators-subscription: fetchchannelreferences honours channel.spec.secretref.namespace enabling cross-namespace secret exfiltrationCVE-2026-668787.7 High
- red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +3 more +5 moreMulticloud-integrations: multicloud-integrations: gitopscluster.spec.argoserver.argonamespace writes spoke bearer tokens to attacker-chosen namespaceCVE-2026-703989.6 Critical
- red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +3 more +5 moreMulticloud-integrations: multicloud-integrations: pull-model propagation allows hub tenant to target arbitrary spoke cluster via unvalidated ocm-managed-cluster annotationCVE-2026-725269.9 Critical
- freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreFreeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writesCVE-2026-195508.2 High
- redhat insights-client, red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13 +5 more +7 moreInsights-client-rhel9: insights-client: pull-secret bearer token written to logs on non-200 ccx responseCVE-2026-714747.1 High
- red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +3 more +5 moreAcm-search-v2-api-rhel9: search-v2-api: cross-user bearer-token reuse via global federation-config cacheCVE-2026-714685.3 Medium
- redhat insights-client, red hat advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +4 more +6 moreInsights-client-rhel9: insights-client: spoke-controlled clusterid injected unencoded into insights api url pathCVE-2026-714756.8 Medium
- redhat insights-client, red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13 +5 more +7 moreInsights-client: insights-client: ccx_token bearer credential logged in clear text at startup via setdefault()CVE-2026-718456.3 Medium
- red hat advanced cluster management for kubernetes 2.17Acm-search-v2-api-rhel9: search-v2-api: authentication bypass on /federated via upgrade: websocket header spoofingCVE-2026-714677.5 High
- red hat openshift container platform 4Ose-oauth-server: oauth-server: open redirect vulnerability enables phishing via unvalidated parameter.CVE-2026-190784.3 Medium
- red hat build of apache camel - hawtio 4, build of apache camel for spring boot 4, data grid 8 +11 more +13 moreUndertow-core: undertow:http request smuggling via oversized chunk-size bit overlapCVE-2026-141805.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreDbi: incomplete fix for cve-2026-14380 dbi: arbitrary code execution via caller-influenced profile attributeCVE-2026-19546Fix available8.8 High
- Show moreLoading…