Skip to content
Redhat Openshift vulnerabilities
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via race condition in autofs responder
CVE-2026-104045
4.7 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via incomplete identity provider authentication requests
CVE-2026-104046
6.2 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation
CVE-2026-104048
6.8 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: information disclosure via query injection in entra id lookups
CVE-2026-104047
5.3 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion
CVE-2026-88252
4.7 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder
CVE-2026-104039
4.7 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via unprivileged autofs cache invalidation
CVE-2026-104032
5.5 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via memory exhaustion in autofs responder
CVE-2026-104031
5.5 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via out-of-bounds read in autofs responder
CVE-2026-104029
3.3 Low
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via out-of-bounds read during passkey parsing
CVE-2026-104030
5.5 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization
CVE-2026-90462
5.4 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service in nss responder via crafted zero-length requests
CVE-2026-90996
4.0 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: local denial of service due to null pointer dereference in pam responder
CVE-2026-90995
5.5 Medium
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: ssrf via build archive_url in quay build api
CVE-2026-74247
4.2 Medium
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: unauthenticated exported logs download in quay
CVE-2026-74245
5.9 Medium
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: stripe webhook accepts forged events without signature verification in quay
CVE-2026-74244
5.9 Medium
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: unauthenticated secscan notification endpoint in quay when psk is unset
CVE-2026-74243
6.5 Medium
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: repository notification uuid idor in quay api
CVE-2026-74242
5.3 Medium
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: ldap referral filter injection in quay external ldap authentication
CVE-2026-74241
4.8 Medium
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: jwt claim validation bypasses in quay federated robot and sso authentication
CVE-2026-74240
5.4 Medium
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +7 more +9 more
Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser
CVE-2026-19617
Fix available
5.5 Medium
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +8 more +10 more
Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing
CVE-2026-19548
Fix available
5.5 Medium
-
smuellerdd libkcapi, red hat enterprise linux 10, enterprise linux 10.0 extended update support +8 more +10 more
Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return
CVE-2026-71227
Fix available
5.1 Medium
-
smuellerdd libkcapi, red hat enterprise linux 10, enterprise linux 10.0 extended update support +11 more +13 more
Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path
CVE-2026-71226
Fix available
7.3 High
-
smuellerdd libkcapi, red hat enterprise linux 10, enterprise linux 10.0 extended update support +8 more +10 more
Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries
CVE-2026-71225
Fix available
6.5 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1
CVE-2026-68743
Fix available
5.5 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply
CVE-2026-68744
Fix available
3.3 Low
-
gnu tar, red hat discovery 2, enterprise linux 10 +10 more +12 more
Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape
CVE-2026-18477
Fix available
4.4 Medium
-
gnu tar, red hat discovery 2, enterprise linux 10 +10 more +12 more
Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite
CVE-2026-18508
Fix available
4.4 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr
CVE-2026-68742
Fix available
5.5 Medium
-
redhat openshift ai, red hat openshift ai 2.25, openshift ai 3.3 +1 more +3 more
Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regex
CVE-2026-15154
6.5 Medium
-
gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +37 more +39 more
Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
CVE-2026-58016
Fix available
7.5 High
-
p11-kit project p11-kit, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +16 more +18 more
P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing
CVE-2026-13757
Fix available
6.2 Medium
-
red hat openshift dev spaces 3.29, redhat openshift dev spaces +1 more
Vscode-java: vscode: command injection vulnerability in the javadoc hover provider of the vscode-java extension
CVE-2026-12856
8.8 High
-
kernel util-linux, red hat cost management on-premise 1, enterprise linux 10 +9 more +11 more
Util-linux: util-linux: heap use-after-free in libblkid nested partition probing
CVE-2026-13595
Fix available
6.8 Medium
-
kubevirt, red hat openshift virtualization 4, redhat openshift virtualization +2 more
Virt-controller-rhel9: kubevirt: kubevirt: multus default-network annotation injection via unvalidated tenant networkname when externalnetresourceinjection is enabled
CVE-2026-13434
4.9 Medium
-
kubevirt, red hat openshift virtualization 4, redhat openshift virtualization +2 more
Kubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of service
CVE-2026-13322
3.8 Low
-
kubevirt, red hat openshift virtualization 4, redhat openshift virtualization +2 more
Virt-api-rhel9: kubevirt: kubevirt: ssrf in virt-api port-forward via unvalidated guest-agent-reported ip
CVE-2026-13318
Fix available
6.4 Medium
-
kubevirt, red hat openshift virtualization 4, redhat openshift virtualization +2 more
Kubevirt: kubevirt: symlink following in writetocachedfile allows host file overwrite from virt-launcher
CVE-2026-13218
4.2 Medium
-
kubevirt, red hat openshift virtualization 4, redhat openshift virtualization +2 more
Kubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request body
CVE-2026-13208
6.5 Medium
-
kubevirt, red hat container native virtualization 4.12, container native virtualization 4.13 +10 more +12 more
Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption
CVE-2026-13201
Fix available
7.3 High
-
redhat cluster logging operator, red hat logging subsystem for red hat openshift +1 more
Openshift/cluster-logging-operator: cluster logging operator creates and forwards serviceaccount tokens without verifying clf creator authorization
CVE-2026-10609
Fix available
6.8 Medium
-
openbsd openssh, redhat enterprise linux, red hat enterprise linux 10 +18 more +20 more
Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service
CVE-2026-55653
Fix available
4.3 Medium
-
thekelleys dnsmasq, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies
CVE-2026-12725
Fix available
5.9 Medium
-
redhat openshift container platform, windows machine config operator, red hat openshift container platform 4 +4 more +6 more
Windows-machine-config-operator: windows-machine-config-operator: ssh host key not verified enables credential theft
CVE-2026-54100
8.3 High
-
redhat openshift container platform, windows machine config operator, red hat openshift container platform 4 +5 more +7 more
Windows-machine-config-operator: windows-machine-config-operator: wicd csr extra-organization allows privilege escalation to system:masters
CVE-2026-54099
8.8 High
-
envoyproxy envoy, red hat openshift service mesh 2.6, openshift service mesh 3.0 +4 more +6 more
Envoy vulnerable to HTTP/2 memory exhaustion via cookie header size bypass and HPACK amplification
CVE-2026-47774
Fix available
7.5 High
-
red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +7 more +9 more
Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection
CVE-2026-1784
8.8 High
-
redhat openshift container platform, red hat openshift container platform 4 +1 more
Openshift: openshift: non-admin user can bypass resourcequota and flood etcd with events causing cluster-wide api degradation
CVE-2026-10533
5.0 Medium
-
axios, red hat cryostat 4, gatekeeper 3 +79 more +81 more
Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
CVE-2026-44495
Fix available
7.0 High
- Show olderLoading…