CVEs published by Red Hat, Inc.

CVEs published by Red Hat, Inc. (CVE Numbering Authority). 88 tracked.

• CVE-2026-94422 HIGH 8.8 An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to
• CVE-2026-114406 MEDIUM 6.8 The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages,
• CVE-2026-10079 HIGH 8.5 A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS)
• CVE-2026-18157 HIGH 7.8 A flaw was found in yggdrasil-worker-package-manager
• CVE-2026-18378 HIGH 7.6 MITIGATE A flaw was found in koku-metrics-operator
• CVE-2026-18382 MEDIUM 6.8 MITIGATE A flaw was found in koku-metrics-operator
• CVE-2026-18381 HIGH 7.6 MITIGATE A flaw was found in the koku-metrics-operator for Red Hat OpenShift
• CVE-2026-68563 MEDIUM 5.5 A flaw was found in ansible-collection-redhat-leapp
• CVE-2026-110975 HIGH 7.4 A flaw was found in Kruize Autotune
• CVE-2026-10059 CRITICAL 9.1 A flaw was found in the Multicluster Engine for Kubernetes ClusterCurator controller
• CVE-2026-10090 CRITICAL 9.0 A flaw was found in the Application Subscription controller (multicluster-operators-subscription) of Red Hat A
• CVE-2026-49331 MEDIUM 6.5 A flaw was found in openshift/oauth-proxy
• CVE-2026-72526 CRITICAL 9.9 A flaw was found in the multicloud-integrations component
• CVE-2026-71467 HIGH 7.5 A flaw was found in search-v2-api
• CVE-2026-70398 CRITICAL 9.6 A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management (RHACM)
• CVE-2026-71475 MEDIUM 6.8 DOWNGRADE MITIGATE A flaw was found in insights-client
• CVE-2026-71845 MEDIUM 6.3 DOWNGRADE MITIGATE A flaw was found in insights-client
• CVE-2026-66878 HIGH 7.7 A flaw was found in multicloud-operators-subscription
• CVE-2026-73122 HIGH 7.7 A flaw was found in the multicloud-operators-channel component of Red Hat Advanced Cluster Management (RHACM)
• CVE-2026-71576 HIGH 8.5 A flaw was found in multicluster-global-hub
• CVE-2026-19278 MEDIUM 6.8 A flaw was found in StackRox/RHACS Central's Auth Machine-to-Machine (M2M) token exchange
• CVE-2026-71577 MEDIUM 6.3 A flaw was found in multicluster-global-hub
• CVE-2026-71474 HIGH 7.1 DOWNGRADE MITIGATE A flaw was found in insights-client
• CVE-2026-64927 MEDIUM 6.4 A flaw was found in the multicloud-operators-channel component
• CVE-2026-71468 MEDIUM 5.3 A flaw was found in acm-search-v2-api-rhel9
• CVE-2026-72508 CRITICAL 9.9 A flaw was found in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management (RH
• CVE-2026-73268 CRITICAL 9.9 A flaw was found in the cluster-curator-controller component of multicluster engine (MCE)
• CVE-2026-71471 CRITICAL 9.0 A flaw was found in acm-search-v2-rhel9
• CVE-2026-73269 CRITICAL 9.9 A flaw was found in the cluster-curator-controller component
• CVE-2026-71469 HIGH 7.5 A flaw was found in search-v2-api
• CVE-2026-71473 HIGH 8.5 A flaw was found in the `search-v2-operator` component
• CVE-2026-50236 HIGH 7.4 An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers
• CVE-2026-50237 HIGH 7.4 A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy
• CVE-2026-13622 HIGH 8.8 A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy
• CVE-2026-19130 MEDIUM 5.8 A flaw was found in the provider-credential-controller component of multicluster-engine (MCE)
• CVE-2026-71846 MEDIUM 6.5 DOWNGRADE MITIGATE A flaw was found in insights-client
• CVE-2026-19078 MEDIUM 4.3 A flaw was found in the oauth-server component
• CVE-2026-18963 CRITICAL 9.1 A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine fo
• CVE-2026-115484 HIGH 7.6 A flaw was found in the iscsiuio component of open-iscsi
• CVE-2026-115486 HIGH 7.1 A flaw was found in the iscsiuio component of open-iscsi
• CVE-2026-115485 MEDIUM 6.3 A flaw was found in the iscsiuio component of open-iscsi
• CVE-2026-115424 MEDIUM 5.5 A flaw was found in the OpenShift client oc
• CVE-2026-115221 MEDIUM 5.4 A flaw was found in FreeIPA
• CVE-2026-115449 LOW 3.5 A flaw was found in libslirp
• CVE-2026-111079 HIGH 7.4 A flaw was found in Goose
• CVE-2026-110744 HIGH 7.2 A flaw was found in multicluster-global-hub-operator-bundle
• CVE-2023-6915 MEDIUM 6.2 MITIGATE DOWNGRADE A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel
• CVE-2026-24330 MEDIUM 6.5 A flaw was found in wildfly-core
• CVE-2026-105949 HIGH 8.8 Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a
• CVE-2026-93017 HIGH 7.7 The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the
• CVE-2026-85518 MEDIUM 6.1 A flaw was found in OpenSCAP
• CVE-2026-83589 MEDIUM 6.1 A flaw was found in oauth-proxy
• CVE-2026-75888 HIGH 7.7 A flaw was found in the OpenShift console
• CVE-2026-75887 HIGH 7.5 A flaw was found in the OpenShift console
• CVE-2026-75885 CRITICAL 9.3 A flaw was found in the OpenShift console
• CVE-2026-49329 HIGH 7.5 A flaw was found in openshift/oauth-server
• CVE-2026-108334 HIGH 7.4 A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator
• CVE-2026-15561 HIGH 7.5 A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder
• CVE-2026-4633 LOW 3.7 MITIGATE A flaw was found in Keycloak
• CVE-2026-12080 HIGH 7.3 A flaw was found in the QEMU Guest Agent (qga)
• CVE-2026-0976 LOW 3.7 A flaw was found in Keycloak
• CVE-2024-28835 MEDIUM 5.0 A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a spe
• CVE-2024-28834 MEDIUM 5.3 A flaw was found in GnuTLS
• CVE-2024-12243 MEDIUM 5.3 A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing
• CVE-2024-12133 MEDIUM 5.3 A flaw in libtasn1 causes inefficient handling of specific certificate data
• CVE-2026-12564 CRITICAL 9.6 A flaw was found in the AAP Controller's HashiCorp Vault credential plugin
• CVE-2026-71227 MEDIUM 5.1 MITIGATE DOWNGRADE A flaw was found in libkcapi
• CVE-2026-71226 HIGH 7.3 MITIGATE DOWNGRADE Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error befor
• CVE-2026-71225 MEDIUM 6.5 MITIGATE DOWNGRADE A flaw was found in libkcapi
• CVE-2026-5260 HIGH 8.2 A flaw was found in libgnutls
• CVE-2026-58015 MEDIUM 5.9 UPGRADE MITIGATE A flaw was found in GLib
• CVE-2026-58014 HIGH 7.3 UPGRADE MITIGATE A flaw was found in GLib
• CVE-2026-4629 MEDIUM 6.5 MITIGATE A flaw was found in Keycloak
• CVE-2026-4628 MEDIUM 4.3 MITIGATE A flaw was found in Keycloak
• CVE-2026-37980 MEDIUM 6.9 MITIGATE A flaw was found in Keycloak, specifically in the organization selection login page
• CVE-2026-112259 MEDIUM 5.5 A flaw was found in GIMP
• CVE-2025-11395 MEDIUM 5.5 A flaw was found in Podman
• CVE-2024-9407 MEDIUM 4.7 A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instruction
• CVE-2024-9355 MEDIUM 6.5 A vulnerability was found in Golang FIPS OpenSSL
• CVE-2024-3727 HIGH 8.3 A flaw was found in the github.com/containers/image library
• CVE-2024-11831 MEDIUM 5.4 A flaw was found in npm-serialize-javascript
• CVE-2026-85197 HIGH 7.6 A flaw was found in libsoup
• CVE-2026-15567 HIGH 7.5 A flaw was found in Wildfly
• CVE-2026-102560 HIGH 8.6 UPGRADE MITIGATE A flaw was found in libsoup
• CVE-2016-3081 HIGH 8.1 EXPLOITED MITIGATE DOWNGRADE Apache Struts Command Injection Vulnerability
• CVE-2015-3246 HIGH 7.4 EXPLOITED MITIGATE MITIGATE Red Hat Libuser Race Condition Vulnerability
• CVE-2022-0995 HIGH 7.8 EXPLOITED UPGRADE MITIGATE Linux Kernel Out-of-Bounds Write Vulnerability
• CVE-2015-5287 HIGH 7.8 EXPLOITED UPGRADE MITIGATE Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

← Back to latest CVEs