Skip to contentRed Hat vulnerabilities
Products
Show 140 moreShow less
Newest
- red hat amq broker 7, build of apache camel for spring boot 4, fuse 7 +2 more +4 moreIo.netty/netty-codec-mqtt: netty: resource exhaustion in mqttdecoderCVE-2026-935757.5 High
- red hat build of apache camel for spring boot 4, fuse 7, jboss enterprise application platform 7 +1 more +3 moreIo.netty/netty-codec-memcache: netty: memcache binary codec signed/unsigned type mismatch causes frame desynchronization and response smugglingCVE-2026-935616.5 Medium
- red hat exploit intelligence, openshift serverless, build of apache camel 4 for quarkus 3 +8 more +10 moreQuarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http securityCVE-2026-877437.5 High
- red hat build of apache camel for spring boot 4Io.netty/netty-handler-ssl-ocsp: netty: ocsp validation silently skipped when a response omits the optional nextupdate fieldCVE-2026-934935.9 Medium
- red hat build of apache camel for spring boot 4, fuse 7, jboss enterprise application platform 7 +1 more +3 moreIo.netty/netty-codec-stomp: netty: bytebuf leak in stompsubframedecoder when a frame body is never terminatedCVE-2026-934947.5 High
- red hat build of apache camel 3.33.4.redhat, build of apache camel 4 for quarkus 3, build of apicurio registry 3 +19 more +21 moreResteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard configCVE-2026-89058Fix available7.4 High
- red hat build of apache camel 3.33.4.redhat, build of apache camel 4 for quarkus 3, build of apicurio registry 3 +19 more +21 moreResteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)CVE-2026-890597.5 High
- keycloak, red hat build of keycloak +1 moreKeycloak-services: keycloak: replay protection bypass leads to unauthorized access via database driver semantics mismatchCVE-2026-909977.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreLibxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attributeCVE-2026-76781Fix available5.5 Medium
- red hat exploit intelligence, build of quarkus 3.27.5.sp2, build of quarkus 3.33.3.sp2 +1 more +3 moreQuarkus-websockets-next: denial of service (oom) in quarkus-websockets-next via unbounded message bufferingCVE-2026-877427.5 High
- red hat exploit intelligence, build of apicurio registry 3, build of quarkus +4 more +6 moreSmallrye-jwt: quarkus-smallrye-jwt: smallrye-jwt: unauthenticated same-origin ssrf via unsanitized jwt kid header in awsalbkeyresolverCVE-2026-818295.3 Medium
- red hat satellite 6Rubygem-foreman_remote_execution: job output readable without object-level view_job_invocations checkCVE-2026-929044.3 Medium
- red hat satellite 6Rubygem-foreman_ansible: ansible inventory api ignores view_hosts permission filters, exposes hidden parametersCVE-2026-928934.3 Medium
- red hat satellite 6Rubygem-foreman_ansible: unscoped lookupvalue deletion allows cross-model override value destructionCVE-2026-928944.3 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 8 +10 more +12 moreFlatpak-builder: host code execution via `git am` hook execution in patch source extraction (`use-git-am`)CVE-2026-86320Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 morePppd: pppd: buffer overflow in peap response handling leads to data corruption or denial of service.CVE-2026-75883Fix available6.8 Medium
- red hat quay 3Quay-builder-qemu: quay-builder-qemu: release workflow uses third-party action pinned to mutable @master with registry credentials in scopeCVE-2026-854698.0 High
- red hat build of keycloak 26.4, build of keycloak 26.4.16, build of keycloak 26.6 +2 more +4 moreKeycloak-services: keycloak-services: broker-originated username collision causes account lockoutCVE-2026-19607Public exploit5.3 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.16, build of keycloak 26.6 +4 more +6 moreKeycloak-services: keycloak-services: privilege escalation via impersonation role allows takeover of realm administrator accountsCVE-2026-175267.2 High
- red hat advanced cluster management for kubernetes 2, edge manager 1.2, edge manager 1.3 +2 more +4 moreFlightctl: flightctl: package-global go-git https transport mutated per-repo -- cross-tenant tls-config bleedCVE-2026-926156.6 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.16, build of keycloak 26.6 +2 more +4 moreKeycloak-services: keycloak-services: unauthenticated dos via unbounded locale cachingCVE-2026-796517.5 High
- red hat build of keycloak 26.4, build of keycloak 26.4.16, build of keycloak 26.6 +2 more +4 moreKeycloak-services: keycloak-services: incomplete fix for cve-2026-15573 allows policy enforcer bypass via percent-encoded uri segmentsCVE-2026-749098.1 High
- red hat build of keycloak 26.4, build of keycloak 26.4.16, build of keycloak 26.6 +4 more +6 moreKeycloak-services: keycloak-services: saml redirect deflate helpers leak native zlib stateCVE-2026-182127.5 High
- red hat ansible automation platform 2, enterprise linux 10, enterprise linux 7 +5 more +7 moreJwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops arrayCVE-2026-92091Fix available5.9 Medium
- red hat build of keycloak 26.6.8, single sign-on 7 +1 moreKeycloak-services: keycloak-services: residual cross-browser account-link proof allows silent re-linkingCVE-2026-923586.4 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +4 more +6 morePodman: arbitrary file write when importing oci archiveCVE-2025-11395Fix available5.5 Medium
- gnome gimp, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreGimp: integer overflow when generating a thumbnail preview for a psd fileCVE-2026-92248Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreTftp: tftp-hpa: denial of service due to out-of-bounds read/write in remap engineCVE-2026-85234Fix available7.5 High
- red hat ansible automation platform 2, enterprise linux 10, enterprise linux 8 +6 more +8 morePodman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directoryCVE-2026-79699Fix available4.4 Medium
- red hat ansible automation platform 2, enterprise linux 10, enterprise linux 8 +7 more +9 morePodman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callersCVE-2026-79705Fix available4.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreEnvironment-modules: command injection in environment-modules bash completion via malicious module names containing shell metacharactersCVE-2026-85013Fix available7.3 High
- red hat enterprise linux 8Gss-ntlmssp: gss-ntlmssp: memory leak in ntlm_decode_target_info via duplicated av_pair entries in ntlm challengeCVE-2026-919263.7 Low
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGnome-shell: gnome-shell: out-of-bounds read in remote search icon rendering due to unvalidated icon-data buffer sizeCVE-2026-91786Fix available6.1 Medium
- red hat enterprise linux 8, enterprise linux 9, enterprise linux 9.6 extended update support +1 more +3 moreLeapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scan_mysql runs mysqld --validate-config as root and can load mysql-writable pluginsCVE-2026-75092Fix available7.3 High
- red hat build of apache camel - hawtio 4Hawtio-operator: hawtio-operator: tls private key written to operator log at debug levelCVE-2026-813205.5 Medium
- red hat build of apache camel - hawtio 4Hawtio-operator: hawtio-operator: routes/custom-host confused-deputy via spec.routehostnameCVE-2026-813036.3 Medium
- fedora, red hat enterprise linux 10, enterprise linux 6 +3 more +5 morePackageKit: dnf5 backend ignores SIMULATE on RepoRemoveCVE-2026-19816Fix available7.1 High
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: denial of service in nss responder via crafted zero-length requestsCVE-2026-909964.0 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: local denial of service due to null pointer dereference in pam responderCVE-2026-909955.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: denial of service via malformed pam v1 requestsCVE-2026-909944.0 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: local oob read in nss service request parsers (`sss_nss_protocol_parse_svc_name` / `sss_nss_protocol_parse_svc_port`)CVE-2026-904634.0 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreGimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset fileCVE-2026-90947Fix available7.8 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +1 more +3 moreGimp: gimp: heap-based buffer overflow in psp loader due to selection-channel geometry mismatchCVE-2026-90949Fix available7.8 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreGimp: gimp: heap-based buffer overflow in ico loader via integer overflow in embedded png dimensionsCVE-2026-90948Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreDevice-mapper-multipath: local denial of service via blocking ipc send operationsCVE-2026-89329Fix available6.2 Medium
- red hat build of keycloak 26.6.8, single sign-on 7 +1 moreKeycloak-services: keycloak-services: confidential client secret disclosed to view-clients role via client registration getCVE-2026-892984.9 Medium
- red hat advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14, advanced cluster management for kubernetes 2.15 +2 more +4 moreStolostron/multicluster-observability-addon: cross-namespace secret disclosure in multicluster-observability-addon via unvalidated configuration referencesCVE-2026-890607.7 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGstreamer1-plugins-good: gstreamer: integer overflow and out-of-bounds read in qtdemux cea-608 closed-caption parserCVE-2026-88914Fix available4.4 Medium
- [unknown] gvfs, red hat enterprise linux 10, enterprise linux 10.0 extended update support +7 more +9 moreGvfs: gvfs-admin socket ownership race permits local rootCVE-2026-88924Fix available7.0 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +1 more +3 moreEvolution: evolution: javascript execution via spoofed vcard control bypasses mail script-markup restrictionCVE-2026-88859Fix available6.3 Medium
- Show moreLoading…