Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- xmlsoft libxml2, ibm aix, vios +10 more +12 moreLibxml2: libxml2: denial of service via crafted xsd-validated documentCVE-2026-6732Fix available6.5 Medium
- redhat instructlab, red hat enterprise linux ai (rhel ai) 3, redhat enterprise linux ai +2 moreInstructlab: instructlab: arbitrary code execution due to hardcoded `trust_remote_code=true`CVE-2026-68598.8 High
- redhat instructlab, red hat enterprise linux ai (rhel ai) 3, redhat enterprise linux ai +2 moreInstructlab: instructlab: path traversal allows arbitrary directory creation and file writeCVE-2026-68557.1 High
- redhat quay, red hat quay 3 +1 moreQuay: red hat quay: authentication bypass allows privileged actions without valid credentialsCVE-2026-68485.4 Medium
- gnu binutils, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreBinutils: binutils: arbitrary code execution via malformed xcoff object file processingCVE-2026-6846Fix available7.8 High
- gnu binutils, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreBinutils: binutils: denial of service vulnerabilities in readelf via crafted elf filesCVE-2026-6844Fix available5.5 Medium
- gnu nano, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreNano: nano: format string vulnerability leads to denial of serviceCVE-2026-6843Fix available5.5 Medium
- amazon linux, linux kernel, arista cloudvision agni +142 more +144 morecrypto: algif_aead - Revert to operating out-of-placeCVE-2026-31431In KEVPublic exploitFix availableEPSS 98.1%7.8 High
- gnu binutils, red hat enterprise linux 10, enterprise linux 6 +8 more +10 moreBinutils: binutils: denial of service via crafted elf fileCVE-2026-6845Fix available5.0 Medium
- ocaml opam, debian linux, red hat enterprise linux 10 +1 more +3 moreIn OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to...CVE-2026-41082Fix available7.3 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: arbitrary code execution or denial of service via buffer overflow in gif image processingCVE-2026-6384Fix available7.3 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: denial of service via specially crafted seattle filmworks fileCVE-2026-40919Fix available6.1 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: denial of service via crafted pvr image fileCVE-2026-40918Fix available5.5 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: application crashes or information disclosure via crafted icns image filesCVE-2026-40917Fix available5.0 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: denial of service due to stack buffer overflow in tim image loaderCVE-2026-40916Fix available5.0 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: heap buffer overflow due to integer overflow in fits image loaderCVE-2026-40915Fix available5.5 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreSssd: out-of-bounds read in the sssdCVE-2026-6245Fix available5.5 Medium
- red hat build of keycloak, build of keycloak 26.4.12 +1 moreOrg.keycloak.forms.login: keycloak: keycloak: arbitrary code execution via stored cross-site scripting (xss) in organization selection login pageCVE-2026-379806.9 Medium
- x.org x server, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 moreXorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handlingCVE-2026-34002Fix available6.1 Medium
- x.org x server, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 moreXwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.CVE-2026-34000Fix available6.1 Medium
- jqlang jq, red hat ai inference server 3.2, ai inference server 3.3 +38 more +40 morejq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted BuffersCVE-2026-39979Fix available6.9 Medium
- keras, keras-team keras-team/keras, red hat openshift ai (rhoai) +3 more +5 moreSafe Mode Bypass in keras-team/kerasCVE-2026-1462Fix available8.8 High
- red hat openshift ai (rhoai), redhat openshift ai, red hat openshift ai 2.16 +3 more +5 moreOdh-dashboard: odh dashboard kubernetes service account exposureCVE-2026-54838.5 High
- apache tomcat, red hat enterprise linux 10, enterprise linux 10.0 extended update support +21 more +23 moreApache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptorCVE-2026-34486In KEVPublic exploitFix availableEPSS 98.5%7.5 High
- libcap project libcap, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +34 more +36 moreLibcap: libcap: privilege escalation via toctou race condition in cap_set_file()CVE-2026-4878Fix available6.7 Medium
- redhat quay, red hat mirror registry for red hat openshift, mirror registry for red hat openshift 2 +8 more +10 moreMirror-registry: quay: server-side request forgery in proxy cache upstream registry configurationCVE-2026-325915.2 Medium
- redhat quay, red hat mirror registry for red hat openshift, mirror registry for red hat openshift 2.0 +8 more +10 moreMirror-registry: remote code execution using pickle deserializationCVE-2026-325907.1 High
- redhat quay, red hat mirror registry for red hat openshift, mirror registry for red hat openshift 2.0 +7 more +9 moreMirror-registry: quay: insecure direct object reference in blobuploadCVE-2026-325897.4 High
- red hat mirror registry for red hat openshift, mirror registry for red hat openshift 2 +1 moreMirror-registry: openshift mirror registry: user enumeration via authentication error messagesCVE-2025-142435.3 Medium
- red hat mirror registry for red hat openshift, redhat quay, red hat mirror registry for red hat openshift 2 +6 more +8 moreMirror-registry: quay: quay: server-side request forgery via log export functionalityCVE-2026-23776.5 Medium
- redhat process automation manager, red hat process automation 7 +1 moreRhpam: privilege escalation via excessive /etc/passwd permissionsCVE-2025-587136.4 Medium
- red hat openshift update serviceOsus-operator: privilege escalation via excessive /etc/passwd permissionsCVE-2025-578546.4 Medium
- red hat web terminalWeb-terminal: privilege escalation via excessive /etc/passwd permissionsCVE-2025-578536.4 Medium
- red hat multicluster engine for kubernetes, redhat advanced cluster management for kubernetes +1 moreMce: privilege escalation via excessive /etc/passwd permissionsCVE-2025-578516.4 Medium
- redhat ansible automation platform, red hat ansible automation platform 2, ansible automation platform 2.16 +5 more +7 moreAnsible-automation-platform: privilege escalation via excessive group writable /etc/passwd permissionsCVE-2025-578476.4 Medium
- libarchive, red hat enterprise linux 10, enterprise linux 6 +8 more +10 moreLibarchive: a null pointer dereference vulnerability exists in the acl parser of libarchiveCVE-2026-5745Fix available5.5 Medium
- red hat multicluster engine for kubernetes, multicluster engine for kubernetes 2.1, multicluster engine for kubernetes 2.11 +4 more +6 moreRhacm: open cluster management (ocm): cross-cluster privilege escalation via improper kubernetes client certificate renewal validationCVE-2026-4740Fix available8.2 High
- gnu tar, red hat discovery 2, enterprise linux 10 +7 more +9 moreTar: tar: hidden file injection via crafted archivesCVE-2026-5704Fix available5.0 Medium
- xiph theora, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibtheora: libtheora: denial of service or information disclosure via malformed avi file processingCVE-2026-5673Fix available5.6 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: org.keycloak.protocol.oidc.grants.ciba: keycloak: information disclosure via cors header injection due to unvalidated jwt azp claimCVE-2026-37977Fix available3.7 Low
- sequoia-pgp rpm-sequoia, red hat enterprise linux 10, enterprise linux 9 +2 more +4 moreRust-rpm-sequoia: rust-rpm-sequoia: denial of service via crafted rpm file during signature verificationCVE-2026-2625Fix available4.0 Medium
- red hat build of keycloak 26.2, build of keycloak 26.2.15, build of keycloak 26.4 +2 more +4 moreKeycloak: keycloak: uma policy bypass allows authenticated users to gain unauthorized access to victim-owned resources.CVE-2026-4636Fix available8.1 High
- red hat build of keycloak 26.2, build of keycloak 26.2.15, build of keycloak 26.4 +7 more +9 moreKeycloak: keycloak: denial of service via excessive processing of openid connect scope parametersCVE-2026-4634Fix available7.5 High
- red hat build of keycloak 26.2, build of keycloak 26.2.15, build of keycloak 26.4 +2 more +4 moreKeycloak: keycloak: replay of action tokens via improper handling of single-use entriesCVE-2026-4325Fix available5.3 Medium
- red hat build of keycloak 26.2, build of keycloak 26.2.15, build of keycloak 26.4 +2 more +4 moreKeycloak: keycloak: privilege escalation via forged authorization codes due to singleuseobjectprovider isolation flawCVE-2026-4282Public exploitFix available7.4 High
- red hat build of keycloak 26.2, build of keycloak 26.2.15, build of keycloak 26.4 +2 more +4 moreKeycloak: keycloak: information disclosure due to redirect_uri validation bypassCVE-2026-3872Fix available7.3 High
- corosync, red hat enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreCorosync: corosync: denial of service via integer overflow in join message validationCVE-2026-35092Fix available7.5 High
- corosync, red hat enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreCorosync: corosync: denial of service and information disclosure via crafted udp packetCVE-2026-35091Fix available8.2 High
- gnome gdk-pixbuf, red hat ai inference server 3.2, ai inference server 3.3 +35 more +37 moreGdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg imageCVE-2026-5201Public exploitFix available7.5 High
- redhat virtio-win, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreVirtio-win: virtio-win: memory corruption via use-after-free in virtio blk device resetCVE-2026-51656.7 Medium
- Show moreLoading…