redhat vulnerabilities

Recent CVEs affecting redhat products. 23 tracked.

redhat has 23 tracked vulnerabilities, 0 critical and 4 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 18. Most recent: 2026-09-29. Highest priority: CVE-2015-5477 (score 91/100).

CVE-2023-30549 HIGH 7.1 UPGRADE MITIGATE Apptainer is an open source container platform for Linux
CVE-2026-18378 HIGH 7.6 MITIGATE A flaw was found in koku-metrics-operator
CVE-2026-18382 MEDIUM 6.8 MITIGATE A flaw was found in koku-metrics-operator
CVE-2026-18381 HIGH 7.6 MITIGATE A flaw was found in the koku-metrics-operator for Red Hat OpenShift
CVE-2026-71475 MEDIUM 6.8 DOWNGRADE MITIGATE A flaw was found in insights-client
CVE-2026-71845 MEDIUM 6.3 DOWNGRADE MITIGATE A flaw was found in insights-client
CVE-2026-71474 HIGH 7.1 DOWNGRADE MITIGATE A flaw was found in insights-client
CVE-2026-71846 MEDIUM 6.5 DOWNGRADE MITIGATE A flaw was found in insights-client
CVE-2023-6915 MEDIUM 6.2 MITIGATE DOWNGRADE A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel
CVE-2026-4633 LOW 3.7 MITIGATE A flaw was found in Keycloak
CVE-2026-71227 MEDIUM 5.1 MITIGATE DOWNGRADE A flaw was found in libkcapi
CVE-2026-71226 HIGH 7.3 MITIGATE DOWNGRADE Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error befor
CVE-2026-71225 MEDIUM 6.5 MITIGATE DOWNGRADE A flaw was found in libkcapi
CVE-2026-58015 MEDIUM 5.9 UPGRADE MITIGATE A flaw was found in GLib
CVE-2026-58014 HIGH 7.3 UPGRADE MITIGATE A flaw was found in GLib
CVE-2026-4629 MEDIUM 6.5 MITIGATE A flaw was found in Keycloak
CVE-2026-4628 MEDIUM 4.3 MITIGATE A flaw was found in Keycloak
CVE-2026-37980 MEDIUM 6.9 MITIGATE A flaw was found in Keycloak, specifically in the organization selection login page
CVE-2026-102560 HIGH 8.6 UPGRADE MITIGATE A flaw was found in libsoup
CVE-2015-5477 HIGH 7.5 EXPLOITED UPGRADE MITIGATE ISC BIND Data Processing Errors Vulnerability
CVE-2015-3246 HIGH 7.4 EXPLOITED MITIGATE MITIGATE Red Hat Libuser Race Condition Vulnerability
CVE-2026-48710 MEDIUM 6.5 EXPLOITED UPGRADE UPGRADE Kludex Starlette HTTP Request/Response Smuggling Vulnerability
CVE-2015-5287 HIGH 7.8 EXPLOITED UPGRADE MITIGATE Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

FAQ

How do I fix redhat vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is redhat being exploited right now?

Yes: 4 redhat CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.

Which redhat CVE should I patch first?

CVE-2015-5477 currently ranks highest (91/100): ISC BIND Data Processing Errors Vulnerability.

Products

← Back to latest CVEs