Skip to contentRedhat Linux vulnerabilities
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +26 more +28 moreSamba: missing access check on reparse point operationsCVE-2026-1933Fix available7.1 High
- f5 nginx open source, nginx plus, debian linux +15 more +17 moreNGINX ngx_http_rewrite_module vulnerabilityCVE-2026-9256Public exploitFix availableEPSS 10.9%9.2 Critical
- encode starlette, red hat exploit intelligence, openshift lightspeed +18 more +20 moreStarlette has missing Host header validation that poisons request.url.path, bypassing path-based security checksCVE-2026-48710In KEVPublic exploitFix availableEPSS 70.3%6.5 Medium
- js-cookie javascript cookie, js-cookie, red hat cryostat 4 on rhel 9 +24 more +26 moreJavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injectionCVE-2026-46625Fix available7.5 High
- opensuse libsolv, red hat enterprise linux 10, enterprise linux 10.0 extended update support +12 more +14 moreLibsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv fileCVE-2026-9149Fix available6.5 Medium
- opensuse libsolv, red hat enterprise linux 10, enterprise linux 10.0 extended update support +12 more +14 moreLibsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksumsCVE-2026-9150Fix available6.5 Medium
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8, directory server 11.9 for rhel 8 +23 more +25 more389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)CVE-2026-9064Fix available7.5 High
- linux kernel, linux, red hat nvidia for rhel 10 +38 more +40 morenet: skbuff: preserve shared-frag marker during coalescingCVE-2026-46300In KEVPublic exploitFix availableEPSS 16.1%7.8 High
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +36 more +38 moreGnutls: gnutls: authentication bypass via nul character in usernameCVE-2026-42010Fix available7.1 High
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +32 more +34 moreGnutls: gnutls: denial of service via dtls zero-length fragmentCVE-2026-33845Fix available7.5 High
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +13 more +15 moreGnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp responseCVE-2026-3832Fix available3.7 Low
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +31 more +33 moreGnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparisonCVE-2026-3833Fix available6.5 Medium
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +46 more +48 moreGnutls: gnutls: denial of service via dtls packet reordering vulnerabilityCVE-2026-42009Fix available7.5 High
- xmlsoft libxml2, ibm aix, vios +10 more +12 moreLibxml2: libxml2: denial of service via crafted xsd-validated documentCVE-2026-6732Fix available6.5 Medium
- redhat instructlab, red hat enterprise linux ai (rhel ai) 3, redhat enterprise linux ai +2 moreInstructlab: instructlab: arbitrary code execution due to hardcoded `trust_remote_code=true`CVE-2026-68598.8 High
- redhat instructlab, red hat enterprise linux ai (rhel ai) 3, redhat enterprise linux ai +2 moreInstructlab: instructlab: path traversal allows arbitrary directory creation and file writeCVE-2026-68557.1 High
- gnu binutils, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreBinutils: binutils: arbitrary code execution via malformed xcoff object file processingCVE-2026-6846Fix available7.8 High
- gnu binutils, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreBinutils: binutils: denial of service vulnerabilities in readelf via crafted elf filesCVE-2026-6844Fix available5.5 Medium
- gnu nano, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreNano: nano: format string vulnerability leads to denial of serviceCVE-2026-6843Fix available5.5 Medium
- amazon linux, linux kernel, arista cloudvision agni +142 more +144 morecrypto: algif_aead - Revert to operating out-of-placeCVE-2026-31431In KEVPublic exploitFix availableEPSS 98.1%7.8 High
- gnu binutils, red hat enterprise linux 10, enterprise linux 6 +8 more +10 moreBinutils: binutils: denial of service via crafted elf fileCVE-2026-6845Fix available5.0 Medium
- ocaml opam, debian linux, red hat enterprise linux 10 +1 more +3 moreIn OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to...CVE-2026-41082Fix available7.3 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: arbitrary code execution or denial of service via buffer overflow in gif image processingCVE-2026-6384Fix available7.3 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: denial of service via specially crafted seattle filmworks fileCVE-2026-40919Fix available6.1 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: denial of service via crafted pvr image fileCVE-2026-40918Fix available5.5 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: application crashes or information disclosure via crafted icns image filesCVE-2026-40917Fix available5.0 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: denial of service due to stack buffer overflow in tim image loaderCVE-2026-40916Fix available5.0 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: heap buffer overflow due to integer overflow in fits image loaderCVE-2026-40915Fix available5.5 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreSssd: out-of-bounds read in the sssdCVE-2026-6245Fix available5.5 Medium
- x.org x server, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 moreXorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handlingCVE-2026-34002Fix available6.1 Medium
- x.org x server, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 moreXwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.CVE-2026-34000Fix available6.1 Medium
- jqlang jq, red hat ai inference server 3.2, ai inference server 3.3 +38 more +40 morejq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted BuffersCVE-2026-39979Fix available6.9 Medium
- apache tomcat, red hat enterprise linux 10, enterprise linux 10.0 extended update support +21 more +23 moreApache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptorCVE-2026-34486In KEVPublic exploitFix availableEPSS 98.5%7.5 High
- libcap project libcap, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +34 more +36 moreLibcap: libcap: privilege escalation via toctou race condition in cap_set_file()CVE-2026-4878Fix available6.7 Medium
- libarchive, red hat enterprise linux 10, enterprise linux 6 +8 more +10 moreLibarchive: a null pointer dereference vulnerability exists in the acl parser of libarchiveCVE-2026-5745Fix available5.5 Medium
- gnu tar, red hat discovery 2, enterprise linux 10 +7 more +9 moreTar: tar: hidden file injection via crafted archivesCVE-2026-5704Fix available5.0 Medium
- xiph theora, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibtheora: libtheora: denial of service or information disclosure via malformed avi file processingCVE-2026-5673Fix available5.6 Medium
- sequoia-pgp rpm-sequoia, red hat enterprise linux 10, enterprise linux 9 +2 more +4 moreRust-rpm-sequoia: rust-rpm-sequoia: denial of service via crafted rpm file during signature verificationCVE-2026-2625Fix available4.0 Medium
- corosync, red hat enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreCorosync: corosync: denial of service via integer overflow in join message validationCVE-2026-35092Fix available7.5 High
- corosync, red hat enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreCorosync: corosync: denial of service and information disclosure via crafted udp packetCVE-2026-35091Fix available8.2 High
- gnome gdk-pixbuf, red hat ai inference server 3.2, ai inference server 3.3 +35 more +37 moreGdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg imageCVE-2026-5201Public exploitFix available7.5 High
- redhat virtio-win, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreVirtio-win: virtio-win: memory corruption via use-after-free in virtio blk device resetCVE-2026-51656.7 Medium
- redhat virtio-win, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreVirtio-win: virtio-win: denial of service via unvalidated descriptor count in unmap requestCVE-2026-51646.7 Medium
- libarchive, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +36 more +38 moreLibarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processingCVE-2026-5121Fix available7.5 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 moreLibsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishmentCVE-2026-5119Fix available5.9 Medium
- redhat undertow, red hat build of apache camel - hawtio 4, build of apache camel for spring boot 4 +21 more +23 moreUndertow: undertow: request smuggling via malformed http request headersCVE-2026-28369Fix available8.7 High
- redhat undertow, red hat build of apache camel - hawtio 4, build of apache camel for spring boot 4 +21 more +23 moreUndertow: undertow: request smuggling via inconsistent header parsingCVE-2026-28368Fix available8.7 High
- firewalld, red hat enterprise linux 10, enterprise linux 10.0 extended update support +6 more +8 moreFirewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorizationCVE-2026-4948Fix available5.5 Medium
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: denial of service via use-after-free in soupserver during tls handshakeCVE-2026-2436Fix available6.5 Medium
- nodejs node, node.js, red hat enterprise linux 10 +7 more +9 moreA flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received...CVE-2026-21710Public exploitFix availableEPSS 25.4%7.5 High
- Show moreLoading…