Skip to contentRed Hat vulnerabilities
Products
Show 140 moreShow less
Newest
- red hat jboss enterprise application platform 7, jboss enterprise application platform 8, jboss enterprise application platform 8.1 +2 moreWildfly-ejb: wildfly-iiop-openjdk: eap iiop listeners may permit unauthed deserializationCVE-2026-155647.4 High
- red hat openshift ai (rhoai)Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-process authorizationCVE-2026-1175749.1 Critical
- red hat openshift ai (rhoai)Kserve: kserve: server-side request forgery via malicious storageuriCVE-2026-134517.7 High
- red hat jboss enterprise application platform 7.4, jboss enterprise application platform 7.4 els on rhel 7, jboss enterprise application platform 7.4 els on rhel 8 +2 more +4 moreOpenjdk-orb: incomplete fix for cve-2026-15560,unauthed class loading via iiop in eapCVE-2026-847258.1 High
- samba, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreSamba: access control bypass via vfs_ceph_rgw case-insensitive openCVE-2026-109411Fix available8.1 High
- red hat data grid 8Infinispan-operator: infinispan operator: sensitive information disclosure due pod args storeCVE-2026-921716.5 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 moreGssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemonCVE-2026-116497Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreOpen-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoningCVE-2026-1154867.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreOpen-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuioCVE-2026-1154856.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreOpen-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msgCVE-2026-1154847.6 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +1 more +3 moreLibslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guestCVE-2026-115449Fix available3.5 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreIpa: freeipa: freeipa uses subject cn as proof of certificate ownershipCVE-2026-1152215.4 Medium
- red hat openshift container platform 4, openshift container platform 5 +1 moreOc: oc: symlink/hardlink target validation bypass in oc image extract allows file write outside destinationCVE-2026-1154245.5 Medium
- red hat enterprise linux 10, enterprise linux 9 +1 moreGoose: goose: shell history and environment leak via terminal integrationCVE-2026-111079Fix available7.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 morePatch: filename validation bypass in reversal fallback allows file creation outside the working directoryCVE-2026-115207Fix available5.5 Medium
- red hat agentic cluster security suite 0.2, cost management 4, advanced cluster security for kubernetes 4.11 +55 more +57 moreCa-certificates: distrust emudhra intermediate ca certificates due to security concernsCVE-2026-114406Fix available6.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreOpenscap: openscap: arbitrary file write via path traversal in source datastream decompositionCVE-2026-85518Fix available6.1 Medium
- red hat build of keycloak, single sign-on 7 +1 moreKeycloak-services: keycloak-services: required otp enrollment bypassed via update user locale required action orderingCVE-2026-1144384.2 Medium
- red hat multicluster global hubMulticluster-global-hub-operator-bundle: operator serviceaccount granted unrestricted impersonation of users, groups and serviceaccounts cluster-wideCVE-2026-1107447.2 High
- red hat build of apache camel for spring boot 4, enterprise linux 8, enterprise linux 9 +5 more +7 moreUndertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink traversalCVE-2026-1143703.7 Low
- red hat confidential compute attestation, dpu kit for nvidia, exploit intelligence +18 more +20 morePodman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layersCVE-2026-1142363.3 Low
- red hat openshift ai (rhoai)Lm-evaluation-harness: lm-evaluation-harness: ssrf via job-spec model.url with bearer credential forwardingCVE-2026-175576.5 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +4 more +6 moreLibmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifactsCVE-2026-92824Fix available6.2 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +4 more +6 moreLibmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yamlCVE-2026-928236.2 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +4 more +6 moreLibmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yamlCVE-2026-928226.2 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreDevice-mapper-multipath: device-mapper-multipath: information disclosure via malformed format stringCVE-2026-114038Fix available5.1 Medium
- red hat streams for apache kafka 3Kroxylicious-kms-provider-azure-key-vault-kms: streams for apache kafka kroxylicious: azure key vault ssrf exfiltrates bearer token via untrusted edek vaultnameCVE-2026-1059418.1 High
- red hat streams for apache kafka 2, streams for apache kafka 3 +1 moreCruise-control: streams for apache kafka cruise control: authentication bypass via extra path segment allows unauthenticated access to all admin endpointsCVE-2026-1059498.8 High
- red hat streams for apache kafka 2, streams for apache kafka 3, streamshub console for apache kafka® +2 moreConsole-operator: streams for apache kafka console: tenant-controlled container image on clusterrole-bound pod enables namespace-to-cluster privilege escalationCVE-2026-1053129.9 Critical
- red hat streams for apache kafka 2, streams for apache kafka 3, streamshub console for apache kafka® +2 moreConsole-operator: streams for apache kafka console: cross-namespace kafkauser secret exfiltration via confused deputyCVE-2026-1053117.7 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 moreCockpit-machines: cockpit-appstream: vnc console password disclosure through virt-xml command-line argumentsCVE-2026-113496Fix available5.0 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 moreCockpit-machines: cockpit-appstream: rhsm access-token disclosure through image helper command-line argumentsCVE-2026-113495Fix available5.0 Medium
- red hat enterprise linux 8, enterprise linux 10, enterprise linux 6 +2 more +4 moreGhostscript: reintroduction of .charkeys -dsafer bypass in rhel 8CVE-2026-112177Fix available7.3 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: use-after-free in xcf loader via prop_selected_pathCVE-2026-112261Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: use-after-free in xcf loader via prop_linked and prop_selection on channelsCVE-2026-112258Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033)CVE-2026-112257Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: heap out-of-bounds read in xcf text-layer parasite parsingCVE-2026-112260Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: null pointer dereference in swatchbooker (sbz) palette importCVE-2026-1122595.5 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGstreamer1-plugins-ugly-free: gstreamer1-plugins-ugly-free: unbounded memory allocation in asfdemux simple index parserCVE-2026-1122146.5 Medium
- red hat advanced cluster security for kubernetes 4.10, advanced cluster security for kubernetes 4.11 +1 moreStackrox: stackrox: saml response replay allows multiple central authentication tokensCVE-2026-1033147.4 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreRhc: rhc: local privilege escalation via symlink following in rhc-canonical-facts.serviceCVE-2026-1122106.0 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 moreBootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalizationCVE-2026-164607.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreNfs-utils: nfs-utils: denial of service via memory leak in rpc.statdCVE-2026-89096Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreNautilus: nautilus: arbitrary file deletion via trash symlinkCVE-2026-1118026.6 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreLibarchive: libarchive: use-after-free via aliased mac metadata copyCVE-2026-17591Fix available3.6 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: paa integer overflow out-of-bounds readCVE-2026-62438Fix available6.1 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerabilityCVE-2026-62439Fix available7.0 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreLibtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decodingCVE-2026-85977Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreLibtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decodingCVE-2026-852316.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreNfs-utils: nfs-utils: denial of service via assertion failure in fsiddCVE-2026-89098Fix available5.5 Medium
- Show moreLoading…