Red Hat
300 CVEsCVE IDSeverityProduct / summaryPublished
CVE-2026-114038
MEDIUM 5.1
Red Hat Enterprise Linux 10 — A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a comma…
2026-10-21
CVE-2026-92822
MEDIUM 6.2
Red Hat Enterprise Linux 10 — A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into nested GVariant…
2026-10-21
CVE-2026-92823
MEDIUM 6.2
Red Hat Enterprise Linux 10 — A flaw was found in libmodulemd. In builds with rpmio support enabled, compressed modulemd YAML is decompresse…
2026-10-21
CVE-2026-92824
MEDIUM 6.2
Red Hat Enterprise Linux 10 — A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop incorrectly uses…
2026-10-21
CVE-2026-105311
HIGH 7.7
Streamshub Console For Apache Kafka® — The StreamsHub Console operator acts as a confused deputy: a Kubernetes tenant with permission to create a Con…
2026-10-20
CVE-2026-105312
CRITICAL 9.9
Streamshub Console For Apache Kafka® — A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image …
2026-10-20
CVE-2026-105941
HIGH 8.1
Streams For Apache Kafka 3 — The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserialized EDEK by…
2026-10-20
CVE-2026-105949
HIGH 8.8
Streams For Apache Kafka 2 — Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a …
2026-10-20
CVE-2026-112177
HIGH 7.3
Red Hat Enterprise Linux 10 — A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 …
2026-10-20
CVE-2026-113495
MEDIUM 5
Red Hat Enterprise Linux 10 — A flaw was found in cockpit-machines. Red Hat Subscription Management (RHSM) authentication tokens are passed …
2026-10-20
CVE-2026-113496
MEDIUM 5
Red Hat Enterprise Linux 10 — A flaw was found in cockpit-machines. When saving Virtual Network Computing (VNC) console settings, the config…
2026-10-20
CVE-2026-103314
HIGH 7.4
Red Hat Advanced Cluster Security For Kubernetes 4.11 — A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). The Central SAML authentication …
2026-10-19
CVE-2026-112210
MEDIUM 6
Red Hat Enterprise Linux 10 — A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs as root an…
2026-10-19
CVE-2026-112214
MEDIUM 6.5
Red Hat Enterprise Linux 10 — A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index object, an atta…
2026-10-19
CVE-2026-112257
HIGH 7.8
Red Hat Enterprise Linux 10 — A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-…
2026-10-19
CVE-2026-112258
HIGH 7.8
Red Hat Enterprise Linux 10 — A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list when a linke…
2026-10-19
CVE-2026-112259
MEDIUM 5.5
Red Hat Enterprise Linux 10 — A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause a NULL poi…
2026-10-19
CVE-2026-112260
HIGH 7.1
Red Hat Enterprise Linux 10 — A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a heap out-of-b…
2026-10-19
CVE-2026-112261
HIGH 7.8
Red Hat Enterprise Linux 10 — A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause…
2026-10-19
CVE-2026-16460
HIGH 7.4
Red Hat Enterprise Linux 10 — A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deploy…
2026-10-19
CVE-2026-104715
HIGH 7.8
Red Hat Enterprise Linux 10 — A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. W…
2026-10-16
CVE-2026-105958
HIGH 7.5
Red Hat Enterprise Linux 6 — A flaw was found in spice-server. Multiple migration data handlers use client-supplied offsets from SPICE_MSGC…
2026-10-16
CVE-2026-105959
HIGH 7.5
Red Hat Enterprise Linux 6 — A flaw was found in spice-server. The GLZ encoder dictionary restore path truncates a size_t allocation size t…
2026-10-16
CVE-2026-111555
MEDIUM 6
Red Hat Enterprise Linux 10 — A flaw was found in luksmeta. Improper boundary validation of metadata slots allows an attacker capable of sup…
2026-10-16
CVE-2026-111581
LOW 3.3
Red Hat Enterprise Linux 10 — A flaw was found in libblockdev. The bd_fs_ntfs_set_label() and bd_fs_vfat_set_label() functions pass caller-s…
2026-10-16
CVE-2026-111802
MEDIUM 6.6
Red Hat Enterprise Linux 10 — A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts t…
2026-10-16
CVE-2026-17591
LOW 3.6
Red Hat Hardened Images — A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information discl…
2026-10-16
CVE-2026-62438
MEDIUM 6.1
Red Hat Enterprise Linux 10 — A flaw was found in GIMP. An attacker can cause a Denial of Service (DoS) or potentially disclose sensitive me…
2026-10-16
CVE-2026-62439
HIGH 7
Red Hat Enterprise Linux 10 — A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory buffer si…● PoC
2026-10-16
CVE-2026-85231
MEDIUM 6.5
Red Hat Enterprise Linux 10 — A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending ove…
2026-10-16
CVE-2026-85977
MEDIUM 5.3
Red Hat Hardened Images — A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PM…● PoC
2026-10-16
CVE-2026-89085
MEDIUM 6.6
Red Hat Enterprise Linux 10 — A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 f…● PoC
2026-10-16
CVE-2026-89088
MEDIUM 5.5
Red Hat Enterprise Linux 10 — A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when…● PoC
2026-10-16
CVE-2026-89096
MEDIUM 5.9
Red Hat Enterprise Linux 10 — A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (DoS) by sen…
2026-10-16
CVE-2026-89098
MEDIUM 5.5
Red Hat Enterprise Linux 10 — A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket…● PoC
2026-10-16
CVE-2026-108334
HIGH 7.4
Red Hat Connectivity Link 1.4 — A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator. When generating the CE…
2026-10-15
CVE-2026-109131
MEDIUM 5.4
Red Hat Ansible Automation Platform 2 — The Hub collection module documentation renderer in the unified Ansible Automation Platform UI (built from ups…
2026-10-15
CVE-2026-84823
HIGH 7.1
Red Hat Enterprise Linux 8 — A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role-Based Access Co…
2026-10-15
CVE-2026-85634
HIGH 8.8
Red Hat Fuse 7 — A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which …
2026-10-15
CVE-2026-92982
HIGH 8.5
Migration Toolkit For Applications 8 — A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template i…
2026-10-15
CVE-2026-100229
MEDIUM 6.5
Red Hat Enterprise Linux 10 — A flaw was found in GStreamer's H.266 codec parser library (libgstcodecparsers). An out-of-bounds write vulner…
2026-10-14
CVE-2026-100231
MEDIUM 6.1
Red Hat Enterprise Linux 10 — A flaw was found in the GStreamer multimedia framework's ASF muxer plugin (asfmux). When writing string metada…
2026-10-14
CVE-2026-100236
HIGH 8.6
Fast Datapath For Rhel 10 — A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not…
2026-10-14
CVE-2026-104795
HIGH 8.8
Red Hat Openshift Container Platform 4.21 — The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`)
that scans container processes…
2026-10-14
CVE-2026-109968
MEDIUM 5.5
Red Hat Enterprise Linux 10 — A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS disk encry…
2026-10-14
CVE-2026-109969
MEDIUM 4.7
Red Hat Enterprise Linux 10 — A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon creates AF_UNIX sock…
2026-10-14
CVE-2026-109970
MEDIUM 4.7
Red Hat Enterprise Linux 10 — A flaw was found in the clevis PKCS#11 pin. The clevis-luks-pkcs11-askpin script writes the PKCS#11 token PIN …
2026-10-14
CVE-2026-109971
MEDIUM 4.7
Red Hat Enterprise Linux 10 — A flaw was found in the clevis PKCS#11 pin. The clevis-decrypt-pkcs11 script passes the PKCS#11 token PIN as a…● PoC
2026-10-14
CVE-2026-110777
MEDIUM 5.7
Evolution Data Server — A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property a…
2026-10-14
CVE-2026-86476
HIGH 8.4
Red Hat Enterprise Linux 10 — A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers wh…
2026-10-14
CVE-2026-86561
MEDIUM 6.5
Fast Datapath For Rhel 10 — A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during vhost memory-re…
2026-10-14
CVE-2026-86562
HIGH 7.8
Fast Datapath For Rhel 10 — A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer ov…
2026-10-14
CVE-2026-86563
HIGH 7.8
Fast Datapath For Rhel 10 — A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to incorrect…
2026-10-14
CVE-2026-86565
HIGH 8.2
Fast Datapath For Rhel 10 — A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table si…
2026-10-14
CVE-2026-86566
MEDIUM 6.5
Fast Datapath For Rhel 10 — A flaw was found in DPDK lib/vhost. A guest with runt RX descriptors can underflow the copy length in vhost en…
2026-10-14
CVE-2026-86567
HIGH 8.8
Fast Datapath For Rhel 10 — A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is inv…
2026-10-14
CVE-2026-86845
MEDIUM 6.5
Fast Datapath For Rhel 10 — A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and…
2026-10-14
CVE-2026-86846
MEDIUM 6.5
Fast Datapath For Rhel 10 — A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is use…
2026-10-14
CVE-2026-86847
MEDIUM 6.5
Fast Datapath For Rhel 10 — A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next poi…
2026-10-14
CVE-2026-86848
HIGH 8.8
Fast Datapath For Rhel 10 — A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a guest descr…
2026-10-14
CVE-2026-86849
MEDIUM 6.5
Fast Datapath For Rhel 10 — A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missing length c…
2026-10-14
CVE-2026-86856
MEDIUM 6.5
Fast Datapath For Rhel 10 — A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be over…
2026-10-14
CVE-2026-88829
HIGH 7.2
Red Hat Hardened Images — A flaw was found in BusyBox httpd's reverse proxy feature. When the proxy is configured to forward requests ma…
2026-10-14
CVE-2026-88842
LOW 3.3
Red Hat Hardened Images — A flaw was found in BusyBox dpkg. The write_status_file() function does not reset a field cursor between packa…
2026-10-14
CVE-2026-90954
HIGH 7.8
Red Hat Hardened Images — A flaw was found in BusyBox's dpkg-deb archive extraction. The ar archive handler flushes deferred symlinks af…
2026-10-14
CVE-2026-93683
MEDIUM 6.4
Fast Datapath For Rhel 10 — A flaw was found in the DPDK vhost library. When handling a virtio indirect descriptor table, the host reads t…
2026-10-14
CVE-2026-105460
MEDIUM 5.5
Red Hat Enterprise Linux 10 — A flaw was found in BlueZ. An out-of-bounds read vulnerability exists in the btmon Bluetooth monitor tool when…
2026-10-13
CVE-2026-109832
HIGH 7.5
Red Hat Enterprise Linux 10 — A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, …
2026-10-13
CVE-2026-109833
MEDIUM 5.9
Red Hat Enterprise Linux 10 — A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS read path, par…
2026-10-13
CVE-2026-109854
LOW 2.5
Red Hat Enterprise Linux 10 — A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 enc…
2026-10-13
CVE-2026-109976
MEDIUM 4.7
Red Hat Enterprise Linux 10 — A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon crashes when an AF_U…● PoC
2026-10-13
CVE-2026-110036
LOW 3.3
Red Hat Enterprise Linux 10 — A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service (DoS) by ind…● PoC
2026-10-13
CVE-2026-88833
MEDIUM 6.5
Red Hat Hardened Images — A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the va…
2026-10-13
CVE-2026-88834
LOW 3.7
Red Hat Hardened Images — A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user ex…
2026-10-13
CVE-2026-88838
MEDIUM 5.5
Red Hat Hardened Images — A flaw was found in BusyBox's mount utility. A non-root user can bypass mount security restrictions set in /et…
2026-10-13
CVE-2026-107193
MEDIUM 6.5
Red Hat Satellite 6 — A flaw has been found in **permission filters** in the **foreman** package. The API loads a filter by its iden…
2026-10-12
CVE-2026-107203
MEDIUM 5.4
Red Hat Satellite 6 — An **incorrect authorization** flaw has been found in **network interface handling** in the **Foreman** packag…
2026-10-12
CVE-2026-108094
HIGH 7.8
Red Hat Enterprise Linux 10 — A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description path. A local …
2026-10-12
CVE-2026-109082
MEDIUM 6.8
Red Hat Build Of Keycloak — A flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-se…
2026-10-12
CVE-2026-109194
MEDIUM 6.4
Red Hat Quay 3 — A flaw was found in Red Hat Quay. The build trigger management application programming interface (API) fails t…
2026-10-12
CVE-2026-109195
LOW 3.1
Red Hat Quay 3 — A flaw was found in Quay. An authenticated attacker can access repository auto-prune configurations from other…
2026-10-12
CVE-2026-52903
HIGH 8.8
Manageiq — A deserialization of untrusted data vulnerability was found in ManageIQ. The YamlLoadAliases module overrides …
2026-10-12
CVE-2026-75888
HIGH 7.7
Red Hat Openshift Container Platform 4.20 — A flaw was found in the OpenShift console. An authenticated console user can exploit a Server-Side Request For…
2026-10-12
CVE-2026-83535
HIGH 7.4
Red Hat Openstack Platform 18.0 — A flaw was found in openstack-network-exporter. When an operator configures user authentication but omits or m…
2026-10-12
CVE-2026-83536
MEDIUM 5.3
Red Hat Openstack Platform 18.0 — A flaw was found in openstack-network-exporter. The HTTP server within the component is configured without ess…
2026-10-12
CVE-2026-85471
MEDIUM 6.4
Mirror Registry For Red Hat Openshift — A flaw was found in Quay. An authenticated repository administrator could bypass the hostname blacklist in web…
2026-10-12
CVE-2026-87744
CRITICAL 9.1
Red Hat Build Of Quarkus 3.27.6.Redhat — A flaw was found in Quarkus REST Data Panache. This vulnerability allows unauthenticated attackers to bypass s…
2026-10-12
CVE-2026-94451
MEDIUM 6.5
Red Hat Build Of Quarkus 3.27.6.Redhat — Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities. A flaw wa…
2026-10-12
CVE-2026-107655
MEDIUM 4
Red Hat Hardened Images — A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperl…● PoC
2026-10-09
CVE-2026-107889
MEDIUM 5.5
Red Hat Build Of Keycloak — A flaw was found in the login theme rendering component of Keycloak. The issue occurs because the security fil…
2026-10-09
CVE-2026-107935
CRITICAL 9.3
Red Hat Build Of Podman Desktop — A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock pa…
2026-10-09
CVE-2026-108063
MEDIUM 5.5
Red Hat Enterprise Linux 10 — A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry …
2026-10-09
CVE-2026-108093
MEDIUM 5.5
Red Hat Enterprise Linux 10 — A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites …
2026-10-09
CVE-2026-108119
MEDIUM 6.3
Red Hat Hardened Images — A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries…
2026-10-09
CVE-2026-107444
MEDIUM 4.3
Red Hat Hardened Images — A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scop…
2026-10-08
CVE-2026-107445
MEDIUM 5.4
Red Hat Hardened Images — A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization …
2026-10-08
CVE-2026-107466
MEDIUM 6.1
Red Hat Enterprise Linux 10 — A flaw was found in flatpak-builder. This vulnerability allows an attacker to cause information disclosure by …
2026-10-08
CVE-2026-107565
MEDIUM 5.1
Red Hat Enterprise Linux 10 — A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when s…
2026-10-08
CVE-2026-107604
MEDIUM 4.9
Red Hat Build Of Keycloak — A flaw was found in the installation provider and client registration endpoints of the Keycloak identity manag…
2026-10-08
CVE-2026-107623
MEDIUM 4.3
Red Hat Build Of Keycloak — A flaw was found in the OIDC Dynamic Client Registration (DCR) component of Keycloak. A bug in the response se…
2026-10-08
CVE-2026-107651
MEDIUM 5.5
Red Hat Enterprise Linux 6 — A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata reader due to …
2026-10-08
CVE-2026-89091
HIGH 8.8
Migration Toolkit For Applications 8 — A flaw was found in ansible-core. When installing a collection with
`ansible-galaxy collection install`, the a…
2026-10-08
CVE-2026-93017
HIGH 7.7
Red Hat Openshift Container Platform 4.20 — The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the…
2026-10-08
CVE-2026-103868
MEDIUM 6.5
Red Hat Ansible Automation Platform 2 — A flaw was found in pulp-container when it authenticates to an upstream registry. Basic and bearer credentials…
2026-10-07
CVE-2026-103869
MEDIUM 6.5
Red Hat Ansible Automation Platform 2 — A flaw was found in pulp-ansible's bearer-token refresh for collection remotes. The access token is kept in on…
2026-10-07
CVE-2026-103870
MEDIUM 5
Red Hat Satellite 6 — A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are u…
2026-10-07
CVE-2026-106061
MEDIUM 5.5
Red Hat Enterprise Linux 10 — A flaw was found in GIMP’s X cursor (XMC) thumbnail loader. When GIMP generates a thumbnail for a crafted XMC …
2026-10-07
CVE-2026-106064
MEDIUM 6.3
Red Hat Enterprise Linux 10 — A heap-based buffer overflow was found in GIMP’s GIF export plug-in. Exporting an image with very large width …
2026-10-07
CVE-2026-106065
MEDIUM 6.3
Red Hat Enterprise Linux 10 — A heap-based buffer overflow was found in GIMP’s PCX export plug-in. For images with extremely large width and…
2026-10-07
CVE-2026-106066
MEDIUM 6.3
Red Hat Enterprise Linux 10 — A heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting very large images, g_…
2026-10-07
CVE-2026-106067
MEDIUM 6.3
Red Hat Enterprise Linux 10 — A heap-based buffer overflow was found in GIMP’s Hot color filter plug-in. For very large images, a pixel buff…
2026-10-07
CVE-2026-106471
HIGH 8.1
Red Hat Satellite 6 — A flaw was found in Candlepin. The central authorization filter incorrectly grants access when any one of mult…
2026-10-07
CVE-2026-107121
MEDIUM 6.5
Red Hat Build Of Keycloak — A flaw was found in the SMTP email configuration handling of the keycloak-services component. When the STARTTL…
2026-10-07
CVE-2026-107151
MEDIUM 5.9
Red Hat Satellite 6 — Missing authentication has been found in remote-execution task updates in the smart_proxy_dynflow package. The…
2026-10-07
CVE-2026-107161
HIGH 7.5
Red Hat Enterprise Linux 10 — A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 p…
2026-10-07
CVE-2026-107167
MEDIUM 6.2
Red Hat Enterprise Linux 10 — A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free …
2026-10-07
CVE-2026-107168
MEDIUM 6.2
Red Hat Enterprise Linux 10 — A flaw was found in m17n-lib. By providing crafted input containing an invalid UTF-8 character sequence, an at…
2026-10-07
CVE-2026-107169
MEDIUM 6.2
Red Hat Enterprise Linux 10 — A flaw was found in m17n-lib. An attacker could provide specially crafted or truncated UTF-8 input to trigger …
2026-10-07
CVE-2026-107170
LOW 2.9
Red Hat Enterprise Linux 10 — A flaw was found in m17n-lib. A partial failure during library initialization can leave an internal driver poi…
2026-10-07
CVE-2026-107174
MEDIUM 6.4
Openshift Serverless — A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize …
2026-10-07
CVE-2026-107176
MEDIUM 6.8
Red Hat Openshift Container Platform 4 — A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshi…
2026-10-07
CVE-2026-101258
HIGH 7.8
Red Hat Enterprise Linux 10 — A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass …
2026-10-06
CVE-2026-104031
MEDIUM 5.5
Red Hat Enterprise Linux 10 — A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated du…
2026-10-06
CVE-2026-104032
MEDIUM 5.5
Red Hat Enterprise Linux 10 — A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates throu…
2026-10-06
CVE-2026-104033
MEDIUM 5.4
Red Hat Enterprise Linux 10 — A flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightweight Directory Acce…● PoC
2026-10-06
CVE-2026-104034
MEDIUM 4.7
Red Hat Enterprise Linux 10 — A flaw was found in SSSD. A use-after-free vulnerability exists in the Kerberos Credential Manager (KCM) respo…
2026-10-06
CVE-2026-104035
MEDIUM 5.5
Red Hat Enterprise Linux 10 — A flaw was found in SSSD. An issue in the Kerberos Credential Manager (KCM) responder allows a local user to c…
2026-10-06
CVE-2026-104036
MEDIUM 5.8
Red Hat Enterprise Linux 10 — A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if…
2026-10-06
CVE-2026-104037
MEDIUM 5.5
Red Hat Enterprise Linux 10 — A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with …● PoC
2026-10-06
CVE-2026-104038
MEDIUM 5.9
Red Hat Enterprise Linux 10 — A flaw was found in sssd. A remote attacker can cause a denial of service (DoS) by submitting a certificate th…● PoC
2026-10-06
CVE-2026-104039
MEDIUM 4.7
Red Hat Enterprise Linux 10 — A flaw was found in SSSD. A local user can cause a denial of service (DoS) by disrupting system authentication…
2026-10-06
CVE-2026-104040
MEDIUM 4.4
Red Hat Enterprise Linux 10 — A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing s…
2026-10-06
CVE-2026-104041
MEDIUM 5.5
Red Hat Enterprise Linux 10 — A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries th…● PoC
2026-10-06
CVE-2026-104042
MEDIUM 5.5
Red Hat Enterprise Linux 10 — A flaw was found in sssd. A local attacker can cause a Denial of Service (DoS) by sending a crafted Pluggable …● PoC
2026-10-06
CVE-2026-104043
MEDIUM 5.5
Red Hat Enterprise Linux 10 — A flaw was found in SSSD. A local attacker with access to the Name Service Switch (NSS) responder UNIX socket …
2026-10-06
CVE-2026-104044
MEDIUM 6.2
Red Hat Enterprise Linux 10 — A flaw was found in sssd. A local attacker can trigger a Denial of Service (DoS) by sending a specially crafte…
2026-10-06
CVE-2026-104045
MEDIUM 4.7
Red Hat Enterprise Linux 10 — A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in…● PoC
2026-10-06
CVE-2026-104046
MEDIUM 6.2
Red Hat Enterprise Linux 10 — A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is ena…
2026-10-06
CVE-2026-104047
MEDIUM 5.3
Red Hat Enterprise Linux 10 — A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized …
2026-10-06
CVE-2026-104048
MEDIUM 6.8
Red Hat Enterprise Linux 10 — A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access …● PoC
2026-10-06
CVE-2026-105305
MEDIUM 5.4
Red Hat Build Of Keycloak — A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant fl…
2026-10-06
CVE-2026-106033
MEDIUM 5.4
Red Hat Ansible Automation Platform 2 — A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the Ansible Platform UI due to unvalidated inpu…
2026-10-06
CVE-2026-106062
HIGH 7.8
Red Hat Enterprise Linux 10 — A heap-based buffer overflow was found in GIMP’s DirectDraw Surface (DDS) loader. When loading a crafted DDS i…
2026-10-06
CVE-2026-106063
MEDIUM 6.3
Red Hat Enterprise Linux 10 — A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with extremely …
2026-10-06
CVE-2026-76061
MEDIUM 5.5
Red Hat Openshift Container Platform 4 — A flaw was found in CRI-O's `bind_mount_prefix` handling. When configured with a non-empty `bind_mount_prefix`…
2026-10-06
CVE-2026-80048
MEDIUM 5.5
Red Hat Enterprise Linux 10 — A flaw was found in `sssd-kcm`. A local user or process able to connect to the `sssd-kcm` UNIX socket can expl…● PoC
2026-10-06
CVE-2026-83550
HIGH 7.1
Multicluster Global Hub — A flaw was found in postgres-exporter. Due to the blank import of `net/http/pprof`, debug endpoints are expose…
2026-10-06
CVE-2026-88252
MEDIUM 4.7
Red Hat Enterprise Linux 10 — A flaw was found in sssd. A local user can cause a Denial of Service (DoS) by exhausting the responder service…● PoC
2026-10-06
CVE-2026-92821
MEDIUM 6.8
Red Hat Enterprise Linux 10 — A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access r…
2026-10-06
CVE-2026-101919
HIGH 8.8
Multicluster Engine For Kubernetes — A flaw was found in the HyperShift operator. The operator copies user-provided Kubernetes configuration (kubec…
2026-10-05
CVE-2026-102295
MEDIUM 5.4
Red Hat Quay 3 — A flaw was found in Quay. A cross-site scripting (XSS) vulnerability in the OAuth callback handler allows a re…
2026-10-05
CVE-2026-102576
MEDIUM 4.2
Red Hat Quay 3 — A flaw was found in Quay. A remote attacker could trick a user into logging in through a crafted link, resulti…
2026-10-05
CVE-2026-104029
LOW 3.3
Red Hat Enterprise Linux 10 — A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted reque…
2026-10-05
CVE-2026-104030
MEDIUM 5.5
Red Hat Enterprise Linux 10 — A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitt…
2026-10-05
CVE-2026-105301
MEDIUM 4
Red Hat Build Of Keycloak — A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access…
2026-10-05
CVE-2026-105302
MEDIUM 5.7
Red Hat Build Of Keycloak — A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The …
2026-10-05
CVE-2026-105306
MEDIUM 6.5
Red Hat Build Of Keycloak — A flaw was found in the Dynamic Client Registration flow of the Keycloak identity and access management server…
2026-10-05
CVE-2026-105326
LOW 2.5
Red Hat Hardened Images — An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accept…
2026-10-05
CVE-2026-105447
MEDIUM 5.5
Red Hat Quay 3 — A flaw was found in Quay. When handling build trigger requests, the application incorrectly exposes trigger co…
2026-10-05
CVE-2026-71297
MEDIUM 5.4
Multicluster Engine For Kubernetes — A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client …
2026-10-05
CVE-2026-71298
MEDIUM 6.4
Multicluster Engine For Kubernetes — A flaw was found in maestro. A remote attacker could exploit a SQL injection vulnerability in the `orderBy` qu…
2026-10-05
CVE-2026-71299
MEDIUM 6.5
Multicluster Engine For Kubernetes — A flaw was found in Maestro. Its REST API write endpoints were registered without proper authentication middle…
2026-10-05
CVE-2026-104988
HIGH 8.1
Red Hat Certificate System 10 — A flaw was found in Dogtag PKI (pki-core). The CMCAuthForEST authentication plugin fails open when an EST full…
2026-10-02
CVE-2026-94422
HIGH 8.7
Fedora — An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to…
2026-10-02
CVE-2026-95512
MEDIUM 5.5
Red Hat Hardened Images — A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vu…
2026-10-02
CVE-2026-103641
MEDIUM 5.5
Red Hat Enterprise Linux 10 — A flaw was found in GEGL. The Radiance HDR loader reads past the end of a memory-mapped image when an uncompre…
2026-10-01
CVE-2026-103754
MEDIUM 5.9
Red Hat Ansible Automation Platform 2 — A flaw was found in ansible-runner. The unstream_dir() function, which receives and extracts a streamed zip ar…
2026-10-01
CVE-2026-103884
MEDIUM 6.5
Red Hat Build Of Keycloak — A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checki…
2026-10-01
CVE-2026-12405
HIGH 8.8
Red Hat Satellite 6.16 For Rhel 8 — A flaw was found in rubygem-foreman_remote_execution. A command injection vulnerability exists in the Red Hat …
2026-10-01
CVE-2026-12423
HIGH 7.5
Red Hat Satellite 6.16 For Rhel 8 — A flaw was found in Foreman. The Red Hat Satellite /unattended/provision API endpoint is vulnerable to an auth…
2026-10-01
CVE-2026-12540
HIGH 8.2
Red Hat Satellite 6.16 For Rhel 8 — A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake errors:fetch_log tas…
2026-10-01
CVE-2026-12541
HIGH 8.2
Red Hat Satellite 6.16 For Rhel 8 — A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:imp…
2026-10-01
CVE-2026-12542
MEDIUM 5.3
Red Hat Satellite 6.16 For Rhel 8 — A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe …
2026-10-01
CVE-2026-12544
HIGH 7.7
Red Hat Satellite 6.16 For Rhel 8 — A flaw was found in Foreman. The foreman-rake initialization logic in /usr/share/foreman/config/settings.rb co…
2026-10-01
CVE-2026-12545
MEDIUM 6.7
Red Hat Satellite 6.16 For Rhel 8 — A flaw was found in rubygem-hammer_cli. A command injection vulnerability exists in Hammer CLI and the Railtie…
2026-10-01
CVE-2026-56097
MEDIUM 6.5
Red Hat Satellite 6.16 For Rhel 8 — A flaw was found in rubygem-katello. An SQL injection vulnerability exists in the Red Hat Satellite Katello Re…
2026-10-01
CVE-2026-56098
MEDIUM 4.3
Red Hat Satellite 6.16 For Rhel 8 — A flaw was found in rubygem-katello. The RegistryProxiesController in Katello contains an authorization bypass…
2026-10-01
CVE-2026-83589
MEDIUM 6.1
Red Hat Openshift Container Platform 4.18 — A flaw was found in oauth-proxy. The application fails to properly validate the destination redirect parameter…
2026-10-01
CVE-2026-86344
HIGH 7.5
Red Hat Directory Server 11 — A flaw was found in 389-ds-base. An unauthenticated remote attacker can send a complete LDAP operation followe…
2026-10-01
CVE-2026-86345
CRITICAL 9
Red Hat Directory Server 11 — A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client co…
2026-10-01
CVE-2026-96577
HIGH 7.1
Red Hat Openshift Container Platform 4.18 — A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all net…
2026-10-01
CVE-2026-96658
HIGH 8.8
Red Hat Satellite 6.16 For Rhel 8 — A flaw was found in Foreman. This vulnerability allows an authenticated remote attacker with low-level read pe…
2026-10-01
CVE-2026-96659
CRITICAL 9.1
Red Hat Satellite 6.16 For Rhel 8 — A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions…
2026-10-01
CVE-2026-101295
HIGH 7.3
Assisted Installer For Red Hat Openshift Container Platform 2 — Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirroring operato…
2026-09-30
CVE-2026-103242
HIGH 7.1
Red Hat Enterprise Linux 10 — A heap-based buffer overflow flaw was found in rpm. RPMTAG_FILESIGNATURES in a crafted, unsigned RPM package's…
2026-09-30
CVE-2026-103399
MEDIUM 5.3
Red Hat Enterprise Linux 10 — A flaw was found in SoupServer (libsoup). When an HTTP/1.x client sends a request with Expect: 100-continue an…
2026-09-30
CVE-2026-62146
HIGH 7.8
Red Hat Openshift Container Platform 4 — A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrit…
2026-09-30
CVE-2026-102473
MEDIUM 5.5
Red Hat Enterprise Linux 6 — A flaw was found in dash. When built without libc fnmatch, the internal pmatch() matcher implements * by unbou…
2026-09-29
CVE-2026-102474
MEDIUM 4
Red Hat Enterprise Linux 6 — A flaw was found in dash. The printf builtin reserves four bytes before converting a Unicode \u or \U escape, …
2026-09-29
CVE-2026-102555
HIGH 8.2
Red Hat Enterprise Linux 10 — A flaw was found in libsoup. The soup_uri_decode_data_uri() function incorrectly treated base64 data-URI paylo…
2026-09-29
CVE-2026-102556
HIGH 8.6
Red Hat Enterprise Linux 10 — A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted t…
2026-09-29
CVE-2026-102557
HIGH 8.6
Red Hat Enterprise Linux 10 — A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did no…
2026-09-29
CVE-2026-102558
HIGH 8.6
Red Hat Enterprise Linux 10 — A flaw was found in libsoup. When max-incoming-payload-size is unlimited (0), SoupWebsocketConnection could gr…
2026-09-29
CVE-2026-102559
HIGH 8.6
Red Hat Enterprise Linux 10 — A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing paylo…
2026-09-29
CVE-2026-102560
HIGH 8.6
Red Hat Enterprise Linux 10 — A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing …
2026-09-29
CVE-2026-102623
MEDIUM 6.5
Red Hat Openshift Virtualization 4 — A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances (VMIs)…
2026-09-29
CVE-2026-95520
HIGH 7.1
Red Hat Enterprise Linux 10 — A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose …
2026-09-29
CVE-2026-97024
HIGH 7.1
Red Hat Enterprise Linux 10 — A path traversal vulnerability in Flatpak's handling of the files/etc directory during app deployment allows a…
2026-09-29
CVE-2026-97029
MEDIUM 5.7
Red Hat Enterprise Linux 10 — Flatpak's process ID namespace separation does not prevent a sandboxed app's kill(0, signal) or killpg(0, sign…
2026-09-29
CVE-2026-101292
HIGH 8.2
Red Hat Jboss Enterprise Application Platform 7.4.25 — Apache ActiveMQ Artemis before 2.34.0 contains an unsafe reflection vulnerability in FederationStreamConnectMe…
2026-09-28
CVE-2026-101333
LOW 3.7
Red Hat Build Of Keycloak — A flaw was found in the Micrometer user-event metrics listener of Keycloak, a solution for integrated identity…
2026-09-28
CVE-2026-102010
HIGH 7
Red Hat Hardened Images — A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in li…
2026-09-28
CVE-2026-86330
HIGH 7.2
Red Hat Openshift Data Foundation 4 — An OS command injection flaw was found in the set_hostname_internal function of NooBaa's cluster_internal_api.…
2026-09-28
CVE-2026-87114
HIGH 7.1
Red Hat Openshift Container Platform 4.19 — A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly execut…
2026-09-28
CVE-2026-96740
MEDIUM 6.5
Streamshub Console For Apache Kafka® — A flaw was found in the StreamsHub Console for Apache Kafka. Tenant-supplied Kafka client properties from the …
2026-09-28
CVE-2026-97023
HIGH 7.1
Red Hat Enterprise Linux 10 — A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows …
2026-09-28
CVE-2026-97025
LOW 3.2
Red Hat Enterprise Linux 10 — Flatpak writes the OCI repository authentication token with world-readable permissions (0644) in the system-he…
2026-09-28
CVE-2026-97026
LOW 3.9
Red Hat Enterprise Linux 10 — Flatpak creates temporary child repository directories under the user cache with world-writable permissions (0…
2026-09-28
CVE-2026-97027
LOW 3.6
Red Hat Enterprise Linux 10 — Flatpak passes through arbitrary vendor-extension keys unmodified when exporting an application's Desktop Entr…
2026-09-28
CVE-2026-96279
MEDIUM 6.5
Red Hat Enterprise Linux 10 — A malicious OCI registry can hardlink arbitrary host files into the extraction directory when a user installs …
2026-09-27
CVE-2026-96280
HIGH 7.5
Red Hat Enterprise Linux 10 — The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecti…
2026-09-27
CVE-2026-96281
MEDIUM 6.2
Red Hat Enterprise Linux 10 — On a multi-user system, a user with an active local login session could downgrade a system-wide Flatpak app to…
2026-09-27
CVE-2026-96282
LOW 3.1
Red Hat Enterprise Linux 10 — A malicious Flatpak extension can probe the host filesystem to determine what files and directories exist at a…
2026-09-27
CVE-2026-96283
LOW 3.3
Red Hat Enterprise Linux 10 — By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull, the pull is not actually ca…
2026-09-27
CVE-2026-96284
LOW 2.5
Red Hat Enterprise Linux 10 — A malicious user can get read-access to files in the flatpak-system-helper context if a system OCI repository …
2026-09-27
CVE-2026-93834
HIGH 8.8
Red Hat Enterprise Linux 10 — A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread an…● PoC
2026-09-25
CVE-2026-96448
MEDIUM 6.6
Red Hat Build Of Keycloak — A flaw was found in the Fine-Grained Admin Permissions (FGAP v2) feature of Keycloak, an identity and access m…
2026-09-25
CVE-2026-97846
MEDIUM 6.8
Red Hat Build Of Keycloak — Keycloak provides a feature called mTLS holder-of-key binding which ensures that a token can only be used by t…
2026-09-25
CVE-2026-90959
HIGH 8.1
Red Hat Ansible Automation Platform 2 — A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'file_url' parameter th…
2026-09-24
CVE-2026-94416
MEDIUM 6.8
Red Hat Ansible Automation Platform 2 — An authorization bypass was found in the Ansible Automation Platform (AAP) gateway. The gateway API allows an …
2026-09-24
CVE-2026-95519
HIGH 7.8
Red Hat Enterprise Linux 10 — A flaw was found in rpm. An attacker can supply a crafted manifest file that, when processed by a user or auto…
2026-09-24
CVE-2026-95521
HIGH 7.8
Red Hat Enterprise Linux 10 — A command injection flaw was found in rpm. Installing or rebuilding a source RPM whose source or spec file bas…
2026-09-24
CVE-2026-97176
MEDIUM 4.2
Red Hat Build Of Keycloak — A flaw was found in the Level of Authentication enforcement mechanism of Keycloak, an identity and access mana…
2026-09-24
CVE-2026-97177
MEDIUM 6.6
Red Hat Build Of Keycloak — A flaw was found in the user update mechanism of the Keycloak Admin REST API. When Fine-Grained Admin Permissi…
2026-09-24
CVE-2026-97185
HIGH 7.8
Red Hat Enterprise Linux 8 — A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not…
2026-09-24
CVE-2026-97311
MEDIUM 4.3
Red Hat Build Of Keycloak — A flaw was found in the Admin REST API of Keycloak, an identity and access management solution. The endpoints …
2026-09-24
CVE-2026-71458
MEDIUM 5
Red Hat Ansible Automation Platform 2.5 For Rhel 8 — URLModificationMiddleware resolves named-URL lookups
against unfiltered Model.objects before RBA…
2026-09-23
CVE-2026-71459
MEDIUM 5
Red Hat Ansible Automation Platform 2.5 For Rhel 8 — JobJobEventsChildrenSummary view has no model/parent_model.
ModelAccessPermission.check_get_perm…
2026-09-23
CVE-2026-71460
MEDIUM 4.3
Red Hat Ansible Automation Platform 2.5 For Rhel 8 — /api/v2/config/ is protected only by IsAuthenticated.
license_info (account_number, subscription…
2026-09-23
CVE-2026-71461
MEDIUM 4.3
Red Hat Ansible Automation Platform 2.7 — HostList.list() catches bare Exception and returns str(e)
verbatim. Via host_filter, any authent…
2026-09-23
CVE-2026-71462
MEDIUM 4.1
Red Hat Ansible Automation Platform 2.5 For Rhel 8 — StringListPathField.to_internal_value() calls
os.path.exists() on unbounded user-supplied paths.…
2026-09-23
CVE-2026-71463
LOW 2.7
Red Hat Ansible Automation Platform 2.5 For Rhel 8 — Notification template Jinja AST whitelist only inspects
static Getattr nodes. Dynamic subscripts…
2026-09-23
CVE-2026-71464
LOW 3.1
Red Hat Ansible Automation Platform 2.5 For Rhel 8 — LaunchConfigurationBaseSerializer.scm_branch has no
validate_scm_branch() leading-dash check, un…
2026-09-23
CVE-2026-71465
LOW 3.1
Red Hat Ansible Automation Platform 2.5 For Rhel 8 — RunAdHocCommand.build_args() appends limit as bare
positional (args.append(limit)) instead of us…
2026-09-23
CVE-2026-75884
CRITICAL 9.1
Red Hat Ansible Automation Platform 2.4 For Rhel 8 — A flaw was found in AWX. The container group pod_spec_override field uses an incomplete blocklist that only re…
2026-09-23
CVE-2026-75886
HIGH 7.2
Red Hat Openshift Container Platform 4.17 — A flaw was found in openshift/console. An unauthenticated remote attacker can exploit a misconfiguration in th…
2026-09-23
CVE-2026-75887
HIGH 7.5
Red Hat Openshift Container Platform 4.12 — A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerabil…
2026-09-23
CVE-2026-76648
HIGH 8.5
Red Hat Ansible Automation Platform 2.7 — CopyAPIView (awx/awx/api/generics.py:873) sets permission_classes =
(IsAuthenticated,), so DRF's get_object() …
2026-09-23
CVE-2026-84474
CRITICAL 9.9
Red Hat Ansible Automation Platform 2.4 For Rhel 8 — A flaw was found in Red Hat Ansible Automation Platform's automation-
controller. The provisioning-callback se…
2026-09-23
CVE-2026-84486
HIGH 8.2
Red Hat Ansible Automation Platform 2.6 For Rhel 9 — A flaw was found in Red Hat Ansible Automation Platform's automation-
controller. Four debug views that trigge…
2026-09-23
CVE-2026-84499
HIGH 7.7
Red Hat Ansible Automation Platform 2.5 For Rhel 8 — A flaw was found in Red Hat Ansible Automation Platform's automation-
controller. Survey questions of type pas…
2026-09-23
CVE-2026-84502
CRITICAL 9.9
Red Hat Ansible Automation Platform 2.4 For Rhel 8 — A flaw was found in Red Hat Ansible Automation Platform's automation-
controller. The Project scm_url field is…
2026-09-23
CVE-2026-84683
HIGH 8.7
Red Hat Ansible Automation Platform 2.5 For Rhel 8 — A flaw was found in Red Hat Ansible Automation Platform's automation-
controller. The HTML view of job, ad hoc…
2026-09-23
CVE-2026-84691
HIGH 8.7
Red Hat Ansible Automation Platform 2.5 For Rhel 8 — A flaw was found in Red Hat Ansible Automation Platform's automation-
controller. The setting that formats the…
2026-09-23
CVE-2026-84706
HIGH 7.6
Red Hat Ansible Automation Platform 2.5 For Rhel 8 — A flaw was found in Ansible Automation Platform's automation-controller. The custom
Credential Type environmen…
2026-09-23
CVE-2026-84712
MEDIUM 5.3
Red Hat Ansible Automation Platform 2.5 For Rhel 8 — A flaw was found in the automation-controller API. The
unauthenticated health-check endpoint…
2026-09-23
CVE-2026-84713
MEDIUM 6.5
Red Hat Ansible Automation Platform 2.7 — A flaw was found in the automation-controller notification
subsystem. Although NotificationT…
2026-09-23
CVE-2026-84714
HIGH 7.1
Red Hat Ansible Automation Platform 2.5 For Rhel 8 — A flaw was found in the automation-controller input-validation
guard sanitize_jinja(). The f…
2026-09-23
CVE-2026-84716
MEDIUM 6.6
Red Hat Ansible Automation Platform 2.5 For Rhel 8 — A flaw was found in the automation-controller instance
install-bundle endpoint. When a Syste…
2026-09-23
CVE-2026-84717
MEDIUM 5.3
Red Hat Ansible Automation Platform 2.5 For Rhel 8 — A flaw was found in the Ansible Automation Platform automation-controller. The unauthenticated
Bitbucket Data …
2026-09-23
CVE-2026-84718
MEDIUM 4.3
Red Hat Ansible Automation Platform 2.5 For Rhel 8 — A flaw was found in the Ansible Automation Platform automation-controller. In the shipped
production configura…
2026-09-23
CVE-2026-84719
CRITICAL 9.9
Red Hat Ansible Automation Platform 2.4 For Rhel 8 — A flaw was found in the Ansible Automation Platform automation-controller. When a
WorkflowJobTemplate is copie…
2026-09-23
CVE-2026-84720
MEDIUM 6.5
Red Hat Ansible Automation Platform 2.5 For Rhel 8 — A flaw was found in the Ansible Automation Platform automation-controller. The
WorkflowJobNode.ancestor_artifa…
2026-09-23
CVE-2026-84721
MEDIUM 6.4
Red Hat Ansible Automation Platform 2.7 — A server-side request forgery flaw was found in the Ansible Automation Platform
automation-controller email no…
2026-09-23
CVE-2026-84724
MEDIUM 6.6
Red Hat Ansible Automation Platform 2.5 For Rhel 8 — An argument-injection flaw was found in the Ansible Automation Platform automation-controller
system-job subsy…
2026-09-23
CVE-2026-85475
HIGH 7.2
Red Hat Ansible Automation Platform 2.7 — A flaw was found in the Ansible Automation Platform automation controller. The
external logging (rsyslog) conf…
2026-09-23
CVE-2026-88830
HIGH 7.5
Red Hat Hardened Images — A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer…
2026-09-23
CVE-2026-88831
MEDIUM 5.3
Red Hat Hardened Images — BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask…
2026-09-23
CVE-2026-88832
HIGH 7.3
Red Hat Hardened Images — BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer o…
2026-09-23
CVE-2026-88835
MEDIUM 6.1
Red Hat Hardened Images — BusyBox dpkg read_package_field() steps past a NUL terminator on malformed .deb packages, causing an out-of-bo…
2026-09-23
CVE-2026-88837
MEDIUM 6.5
Red Hat Hardened Images — BusyBox httpd treats yescrypt ($y$) password hashes as plaintext during Basic Authentication, inverting the au…
2026-09-23
CVE-2026-88839
MEDIUM 6.7
Red Hat Hardened Images — BusyBox passwd/group tokenize() references a stale endpoint pointer after trimming, causing an out-of-bounds w…
2026-09-23
CVE-2026-88840
MEDIUM 5.3
Red Hat Hardened Images — BusyBox TLS get_client_hello() reads past the end of the input buffer when parsing a truncated ClientHello mes…
2026-09-23
CVE-2026-96275
HIGH 8.8
Red Hat Enterprise Linux 10 — A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on …
2026-09-23
CVE-2026-96276
MEDIUM 6.5
Red Hat Enterprise Linux 10 — If a malicious SDK container declares an extension point with a crafted `directory` path, and a developer runs…
2026-09-23
CVE-2026-96442
HIGH 7.8
Gnu Emacs — A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language ba…
2026-09-23
CVE-2026-96445
MEDIUM 6.8
Red Hat Build Of Keycloak — A flaw was found in the Conditional OTP authenticator of Keycloak, an identity and access management solution.…
2026-09-23
CVE-2026-96446
MEDIUM 4.2
Red Hat Build Of Keycloak — A flaw was found in the Pushed Authorization Request PAR implementation of Keycloak. The issue occurs when the…
2026-09-23
CVE-2026-96512
HIGH 7.8
Red Hat Enterprise Linux 10 — A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with tim…
2026-09-23
CVE-2026-96541
HIGH 7.5
Red Hat Enterprise Linux 10 — A denial-of-service flaw was found in gnome-remote-desktop. An unauthenticated remote attacker can open RDP co…● PoC
2026-09-23
CVE-2026-96545
MEDIUM 4.4
Red Hat Enterprise Linux 10 — An out-of-bounds heap read flaw was found in GIMP's TIM image loader. When a user opens a crafted 4bpp TIM ima…● PoC
2026-09-23
CVE-2026-96546
LOW 2.5
Red Hat Enterprise Linux 10 — A one-byte out-of-bounds heap read flaw was found in GIMP's uncompressed DDS image loader. When a user opens a…● PoC
2026-09-23
CVE-2026-96889
HIGH 7.8
Red Hat Enterprise Linux 10 — A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with…● PoC
2026-09-23
CVE-2026-90462
MEDIUM 5.4
Red Hat Enterprise Linux 10 — A flaw was found in SSSD. When configured with the LDAP access provider and `ldap_access_order` including `ppo…● PoC
2026-09-22
CVE-2026-94640
HIGH 7.5
Red Hat Enterprise Linux 10 — A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of…
2026-09-22
CVE-2026-95503
MEDIUM 6.8
Red Hat Build Of Keycloak — A flaw was found in the Kerberos federation provider of Keycloak, an open-source identity and access managemen…
2026-09-22
CVE-2026-95508
HIGH 7.4
Red Hat Enterprise Linux 10 — A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is …
2026-09-22
CVE-2026-95619
HIGH 7.7
Red Hat Hardened Images — A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned opera…
2026-09-22
CVE-2026-15801
HIGH 8
Red Hat Openshift Container Platform 4 — A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CRI-O is conf…
2026-09-21
CVE-2026-75939
HIGH 7.4
Red Hat Openshift Container Platform 4.18 — A flaw was found in openshift/oc-mirror. The tool incorrectly verifies PGP (Pretty Good Privacy) release image…
2026-09-21
CVE-2026-80110
HIGH 8.1
Red Hat Enterprise Linux 10 — A flaw was found in pki-core. The v2 REST ACL filter selects a tie-breaking permission for colliding literal a…
2026-09-21
CVE-2026-92382
MEDIUM 4.1
Red Hat Enterprise Linux 10 — An out-of-bounds write flaw was found in usbredir. Starting an isochronous OUT stream with a transfer count of…
2026-09-21
CVE-2026-92574
HIGH 8.8
Confidential Compute Attestation — A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a malicious checkpointed c…
2026-09-21
CVE-2026-93433
MEDIUM 5.5
Red Hat Enterprise Linux 10 — A flaw was found in libstoragemgmt. An attacker with control over a local or virtual storage device could prov…
2026-09-21
CVE-2026-94184
MEDIUM 5.3
Red Hat Enterprise Linux 10 — A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or comprom…
2026-09-21
CVE-2026-94213
MEDIUM 4.9
Red Hat Build Of Keycloak — A flaw was found in the Authorization Services component of Keycloak, an open-source identity and access manag…
2026-09-21
CVE-2026-94215
MEDIUM 5.5
Red Hat Build Of Keycloak — A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. Th…
2026-09-21
CVE-2026-94217
LOW 3.5
Red Hat Build Of Keycloak — A flaw was found in the User-Managed Access (UMA) implementation of Keycloak. The issue occurs in the authoriz…
2026-09-21
CVE-2026-94218
LOW 3.1
Red Hat Build Of Keycloak — A flaw was found in the authentication session management of Keycloak, an identity and access management solut…
2026-09-21
CVE-2026-94368
HIGH 7.1
Red Hat Openshift Data Foundation 4 — A flaw was found in the signature verification logic of noobaa-core, the core component of the NooBaa Multiclo…
2026-09-21
CVE-2026-94449
HIGH 7.5
Red Hat Build Of Quarkus 3.27.6.Redhat — A flaw was found in the SmallRye Fault Tolerance library, which is used by Quarkus to provide strategies like …
2026-09-21
CVE-2026-93999
MEDIUM 4.2
Red Hat Build Of Keycloak — A flaw was found in the OIDC protocol implementation of Keycloak, an open-source identity and access managemen…
2026-09-19
CVE-2026-94000
MEDIUM 6.6
Red Hat Build Of Keycloak — A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. Th…
2026-09-19
CVE-2026-94001
MEDIUM 6.5
Red Hat Build Of Keycloak — A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. Th…
2026-09-19
CVE-2026-10832
MEDIUM 5.9
Red Hat Jboss Enterprise Application Platform 8.1.8.Ga — A flaw was found in the DERDecoder class within wildfly-elytron-asn1. A remote attacker can exploit this resou…
2026-09-18
CVE-2026-75885
CRITICAL 9.3
Red Hat Openshift Container Platform 4.12 — A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/devfile/sam…
2026-09-18
CVE-2026-81627
HIGH 8.2
Red Hat Enterprise Linux 10 — A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM…● PoC
2026-09-18
CVE-2026-85511
MEDIUM 4.2
Red Hat Jboss Enterprise Application Platform 8.1.8.Ga — A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-real…
2026-09-18
CVE-2026-87743
HIGH 7.5
Red Hat Build Of Quarkus 3.27.5.Sp2 — A flaw was found in Quarkus HTTP security. An unauthenticated attacker can exploit a discrepancy in how paths …
2026-09-18
CVE-2026-89058
HIGH 7.4
Red Hat Build Of Quarkus 3.27.6.Redhat — A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the req…● PoC
2026-09-18