Skip to contentRed Hat vulnerabilities
Products
Show 140 moreShow less
Newest
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreFreeipa: idm: idm/freeipa web ui - client-side open redirect in reset_password.htmlCVE-2026-536834.3 Medium
- red hat build of keycloak 26.6.8, single sign-on 7 +1 moreKeycloak-services: keycloak-services: cross-session email verification proof not bound to upstream identity for social providersCVE-2026-829686.4 Medium
- red hat ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9, ansible automation platform 2.6 +2 more +4 moreAutomation-controller: automation-controller-container: automation-controller/awx: bulk job launch checks instance_groups at read level instead of use level, allowing execution-placement authorization…CVE-2026-844706.4 Medium
- red hat openshift container platform 4.13, openshift container platform 4.14, openshift container platform 4.15 +8 more +10 moreOpenshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login endpointsCVE-2026-493297.5 High
- [unknown] gvfs, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreGvfs: mtp: out-of-bounds read in do_read()CVE-2026-84270Fix available4.3 Medium
- [unknown] gvfs, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreGvfs: afp: heap-based buffer overflow in dsi read pathCVE-2026-84269Fix available6.5 Medium
- [unknown] gvfs, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreGvfs: sftp: uninitialized heap disclosure in read_string()CVE-2026-84267Fix available4.3 Medium
- red hat ansible automation platform 2, satellite 6, update infrastructure 4 for cloud providers +1 more +3 morePulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg contentCVE-2026-842325.4 Medium
- [unknown] gvfs, red hat enterprise linux 10, enterprise linux 10.0 extended update support +13 more +15 moreGvfs: sftp: heap-based buffer overflow in read_reply()CVE-2026-84268Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreRpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenamesCVE-2026-84233Fix available7.0 High
- red hat amq broker 7, build of apache camel 4 for quarkus 3, build of apache camel for spring boot 4 +2 more +4 moreOrg.jolokia/jolokia-core: incomplete jndi denylist in jolokia jsr-160 proxy (bypass of cve-2018-1000130 fix)CVE-2026-84218Fix available8.1 High
- red hat certificate system 9, enterprise linux 10, enterprise linux 6 +3 more +5 morePki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hostsCVE-2026-536825.3 Medium
- red hat certificate system 9, enterprise linux 10, enterprise linux 6 +3 more +5 morePki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosureCVE-2026-118736.5 Medium
- the webkitgtk team webkitgtk, webkit, red hat enterprise linux 6 +13 more +15 moreWebkitgtk: validate the full featurelist array once in opentypeverticaldata findfeatureCVE-2026-83596Fix available8.8 High
- red hat cost management on-premise 1, enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 moreGdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elfCVE-2026-13732Fix available7.0 High
- red hat build of apache camel 3.33.3.sp1, build of apache camel 4 for quarkus 3, build of apicurio registry 3 +14 more +16 moreResteasy-core: resteasy sourceprovider remote unauthenticated file readCVE-2026-17615Fix available7.5 High
- red hat build of quarkus 3.27.5.sp1, build of quarkus 3.33.3.sp1 +1 moreIo.smallrye/smallrye-graphql: smallrye graphql: unauthenticated denial of service via large exponent float literalsCVE-2026-767637.5 High
- quarkus quarkus-qute, red hat build of apache camel 3.33.3.sp1, build of apache camel 4 for quarkus 3 +3 more +5 moreIo.quarkus:quarkus-qute: quarkus-qute:server-side template injection (ssti) vulnerability in reflectionvalueresolver of the quarkus qute template engineCVE-2026-128948.8 High
- red hat build of apache camel for spring boot 4, enterprise linux 10, enterprise linux 8 +6 more +8 moreUndertow-core: undertow: websocketcontainer defaults for buffers and timeouts are infiniteCVE-2026-816247.5 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handlingCVE-2026-82343Fix available6.1 Medium
- kubeflow pipelinesKubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABLE_AUTHZ=trueCVE-2026-5474510.0 Critical
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds checkCVE-2026-82330Fix available6.1 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette countCVE-2026-82328Fix available6.1 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +7 more +9 moreLibsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist dataCVE-2026-82327Fix available5.5 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0CVE-2026-82324Fix available6.1 Medium
- red hat enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +1 moreFfmpeg: ffmpeg: heap buffer overflow in tdsc_load_cursor() via cur_fmt_mono cursorCVE-2026-18393Fix available5.4 Medium
- red hat ansible automation platform 2, enterprise linux 10, enterprise linux 9 +2 more +4 moreJwcrypto: jwcrypto: denial of service via malformed jwe tokensCVE-2026-801795.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc profile parser on error recoveryCVE-2026-81893Fix available4.7 Medium
- red hat build of apache camel - hawtio 4, build of apache camel for spring boot 4, data grid 8 +13 more +15 moreUndertow-core: undertow: denial of service via websocket permessage-deflate processingCVE-2026-56807.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +13 more +15 moreRsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() functionCVE-2026-78002Fix available7.5 High
- red hat satellite 6, satellite 6.16 for rhel 8, satellite 6.16 for rhel 9 +3 more +5 moreRubygem-katello: cross-tenant content view filter rule access and modification via unauthorized parent filter lookupCVE-2026-816685.4 Medium
- theforeman foreman, red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9 +3 more +5 moreForeman: cross-tenant disclosure of template revisions via unauthorized audit lookupCVE-2026-816586.5 Medium
- red hat ceph storage 4, ceph storage 6, ceph storage 7 +8 more +10 moreLibtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthroughCVE-2026-18495Fix available6.1 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibvirt: unsafe chown in qemutpmemulatorpreparehost() allows arbitrary file ownership change via symlinkCVE-2026-77159Fix available5.5 Medium
- red hat ceph storage 5, ceph storage 9, openstack platform 17.1 +1 more +3 moreAnsible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listingsCVE-2026-801585.5 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: stack vla size underflow denial of service in seattleCVE-2026-79902Fix available5.5 Medium
- red hat satellite 6, satellite 6.16 for rhel 8, satellite 6.16 for rhel 9 +3 more +5 moreKetello: katello content view history api cross-organization authorization bypassCVE-2026-796544.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreBluez: stack overflow in name2utf8 causes dos and potential code executionCVE-2026-80186Fix available7.6 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreBluez: sdp-xml: bluez 5.86: unprivileged-local and adjacent-le-peer leads to arbitrary code execution as rootCVE-2026-80185Fix available5.7 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validationCVE-2026-80101Fix available4.4 Medium
- red hat enterprise linux 10Libsoup3: libsoup: quadratic cpu denial of service in http range coalescing after cve-2025-32907 fixCVE-2026-77680Public exploitFix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreEmacs: emacs: command injection via crafted filenames in trampCVE-2026-79992Fix available7.8 High
- red hat ansible automation platform 2Galaxy_ng: galaxy_ng: blind ssrf via namespace avatar_url with no private-address restrictionCVE-2026-797176.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreSos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file writeCVE-2026-79655Fix available7.8 High
- red hat build of keycloak 26.6, build of keycloak 26.6.7, single sign-on 7 +2 moreKeycloak-services: keycloak-services: jwt bearer authorization grant does not enforce consentrequiredCVE-2026-796525.9 Medium
- red hat directory server 11, directory server 12, directory server 13 +6 more +8 more389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dosCVE-2026-787016.5 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 moreFile-roller: file-roller: stack buffer overflow in parse_progress_line for 7z and rar handlersCVE-2026-78322Fix available6.5 Medium
- red hat openshift container platform 4Cri-o: cri-o: unvalidated image env var causes daemon crashCVE-2026-171136.0 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loaderCVE-2026-78475Fix available6.1 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bitCVE-2026-78465Fix available7.0 High
- Show moreLoading…