CVE-2026-103314 HIGH 7.4 Red Hat Advanced Cluster Security 4 — A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). The Central SAML authentication … 2026-10-19 CVE-2026-112210 MEDIUM 6 Red Hat Enterprise Linux 10 — A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs as root an… 2026-10-19 CVE-2026-112214 MEDIUM 6.5 Red Hat Enterprise Linux 10 — A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index object, an atta… 2026-10-19 CVE-2026-112257 HIGH 7.8 Red Hat Enterprise Linux 10 — A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-… 2026-10-19 CVE-2026-112258 HIGH 7.8 Red Hat Enterprise Linux 10 — A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list when a linke… 2026-10-19 CVE-2026-112259 MEDIUM 5.5 Red Hat Enterprise Linux 10 — A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause a NULL poi… 2026-10-19 CVE-2026-112260 HIGH 7.1 Red Hat Enterprise Linux 10 — A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a heap out-of-b… 2026-10-19 CVE-2026-112261 HIGH 7.8 Red Hat Enterprise Linux 10 — A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause… 2026-10-19 CVE-2026-16460 HIGH 7.4 Red Hat Enterprise Linux 10 — A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deploy… 2026-10-19 CVE-2026-16487 HIGH 8.1 Red Hat Enterprise Linux 10 — A flaw was found in bootc when operating with the default containers signature policy. Automatic or manual upg… 2026-10-19 CVE-2026-104715 HIGH 7.8 Red Hat Enterprise Linux 10 — A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. W… 2026-10-16 CVE-2026-105958 HIGH 7.5 Red Hat Enterprise Linux 6 — A flaw was found in spice-server. Multiple migration data handlers use client-supplied offsets from SPICE_MSGC… 2026-10-16 CVE-2026-105959 HIGH 7.5 Red Hat Enterprise Linux 6 — A flaw was found in spice-server. The GLZ encoder dictionary restore path truncates a size_t allocation size t… 2026-10-16 CVE-2026-111555 MEDIUM 6 Red Hat Enterprise Linux 10 — A flaw was found in luksmeta. Improper boundary validation of metadata slots allows an attacker capable of sup… 2026-10-16 CVE-2026-111581 LOW 3.3 Red Hat Enterprise Linux 10 — A flaw was found in libblockdev. The bd_fs_ntfs_set_label() and bd_fs_vfat_set_label() functions pass caller-s… 2026-10-16 CVE-2026-111802 MEDIUM 6.6 Red Hat Enterprise Linux 10 — A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts t… 2026-10-16 CVE-2026-17591 LOW 3.6 Red Hat Hardened Images — A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information discl… 2026-10-16 CVE-2026-62438 MEDIUM 6.1 Red Hat Enterprise Linux 10 — A flaw was found in GIMP. An attacker can cause a Denial of Service (DoS) or potentially disclose sensitive me… 2026-10-16 CVE-2026-62439 HIGH 7 Red Hat Enterprise Linux 10 — A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory buffer si…● PoC 2026-10-16 CVE-2026-85231 MEDIUM 6.5 Red Hat Enterprise Linux 10 — A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending ove… 2026-10-16 CVE-2026-85977 MEDIUM 5.3 Red Hat Hardened Images — A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PM…● PoC 2026-10-16 CVE-2026-89085 MEDIUM 6.6 Red Hat Enterprise Linux 10 — A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 f…● PoC 2026-10-16 CVE-2026-89088 MEDIUM 5.5 Red Hat Enterprise Linux 10 — A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when…● PoC 2026-10-16 CVE-2026-89096 MEDIUM 5.9 Red Hat Enterprise Linux 10 — A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (DoS) by sen… 2026-10-16 CVE-2026-89098 MEDIUM 5.5 Red Hat Enterprise Linux 10 — A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket…● PoC 2026-10-16 CVE-2026-108334 HIGH 7.4 Red Hat Connectivity Link 1.4 — A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator. When generating the CE… 2026-10-15 CVE-2026-109131 MEDIUM 5.4 Red Hat Ansible Automation Platform 2 — The Hub collection module documentation renderer in the unified Ansible Automation Platform UI (built from ups… 2026-10-15 CVE-2026-110923 MEDIUM 6.5 Red Hat Hardened Images — A flaw was found in OpenSSH. During an sftp copy, a malicious server can supply an empty name, a slash-only pa… 2026-10-15 CVE-2026-110924 MEDIUM 4.8 Red Hat Enterprise Linux 10 — A flaw was found in OpenSSH. With GSSAPI authentication enabled, a failed GSSAPI attempt can leave delegated c… 2026-10-15 CVE-2026-110925 MEDIUM 5.4 Red Hat Hardened Images — A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a non-trailin… 2026-10-15 CVE-2026-110926 MEDIUM 5.3 Red Hat Hardened Images — A flaw was found in OpenSSH. When compression is negotiated, channels on the same connection share one LZ77 di… 2026-10-15 CVE-2026-110927 MEDIUM 4.3 Red Hat Hardened Images — A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand past the maximum… 2026-10-15 CVE-2026-84823 HIGH 7.1 Red Hat Enterprise Linux 8 — A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role-Based Access Co… 2026-10-15 CVE-2026-85634 HIGH 8.8 Red Hat Fuse 7 — A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which … 2026-10-15 CVE-2026-92982 HIGH 8.5 Migration Toolkit For Applications 8 — A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template i… 2026-10-15 CVE-2026-100229 MEDIUM 6.5 Red Hat Enterprise Linux 10 — A flaw was found in GStreamer's H.266 codec parser library (libgstcodecparsers). An out-of-bounds write vulner… 2026-10-14 CVE-2026-100231 MEDIUM 6.1 Red Hat Enterprise Linux 10 — A flaw was found in the GStreamer multimedia framework's ASF muxer plugin (asfmux). When writing string metada… 2026-10-14 CVE-2026-100236 HIGH 8.6 Fast Datapath For Rhel 10 — A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not… 2026-10-14 CVE-2026-104795 HIGH 8.8 Red Hat Openshift Container Platform 4 — The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans container processes… 2026-10-14 CVE-2026-109968 MEDIUM 5.5 Red Hat Enterprise Linux 10 — A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS disk encry… 2026-10-14 CVE-2026-109969 MEDIUM 4.7 Red Hat Enterprise Linux 10 — A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon creates AF_UNIX sock… 2026-10-14 CVE-2026-109970 MEDIUM 4.7 Red Hat Enterprise Linux 10 — A flaw was found in the clevis PKCS#11 pin. The clevis-luks-pkcs11-askpin script writes the PKCS#11 token PIN … 2026-10-14 CVE-2026-109971 MEDIUM 4.7 Red Hat Enterprise Linux 10 — A flaw was found in the clevis PKCS#11 pin. The clevis-decrypt-pkcs11 script passes the PKCS#11 token PIN as a…● PoC 2026-10-14 CVE-2026-110777 MEDIUM 5.7 Evolution Data Server — A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property a… 2026-10-14 CVE-2026-86476 HIGH 8.4 Red Hat Enterprise Linux 10 — A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers wh… 2026-10-14 CVE-2026-86561 MEDIUM 6.5 Fast Datapath For Rhel 10 — A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during vhost memory-re… 2026-10-14 CVE-2026-86562 HIGH 7.8 Fast Datapath For Rhel 10 — A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer ov… 2026-10-14 CVE-2026-86563 HIGH 7.8 Fast Datapath For Rhel 10 — A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to incorrect… 2026-10-14 CVE-2026-86565 HIGH 8.2 Fast Datapath For Rhel 10 — A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table si… 2026-10-14 CVE-2026-86566 MEDIUM 6.5 Fast Datapath For Rhel 10 — A flaw was found in DPDK lib/vhost. A guest with runt RX descriptors can underflow the copy length in vhost en… 2026-10-14 CVE-2026-86567 HIGH 8.8 Fast Datapath For Rhel 10 — A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is inv… 2026-10-14 CVE-2026-86845 MEDIUM 6.5 Fast Datapath For Rhel 10 — A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and… 2026-10-14 CVE-2026-86846 MEDIUM 6.5 Fast Datapath For Rhel 10 — A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is use… 2026-10-14 CVE-2026-86847 MEDIUM 6.5 Fast Datapath For Rhel 10 — A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next poi… 2026-10-14 CVE-2026-86848 HIGH 8.8 Fast Datapath For Rhel 10 — A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a guest descr… 2026-10-14 CVE-2026-86849 MEDIUM 6.5 Fast Datapath For Rhel 10 — A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missing length c… 2026-10-14 CVE-2026-86856 MEDIUM 6.5 Fast Datapath For Rhel 10 — A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be over… 2026-10-14 CVE-2026-88829 HIGH 7.2 Red Hat Hardened Images — A flaw was found in BusyBox httpd's reverse proxy feature. When the proxy is configured to forward requests ma… 2026-10-14 CVE-2026-88842 LOW 3.3 Red Hat Hardened Images — A flaw was found in BusyBox dpkg. The write_status_file() function does not reset a field cursor between packa… 2026-10-14 CVE-2026-90954 HIGH 7.8 Red Hat Hardened Images — A flaw was found in BusyBox's dpkg-deb archive extraction. The ar archive handler flushes deferred symlinks af… 2026-10-14 CVE-2026-93683 MEDIUM 6.4 Fast Datapath For Rhel 10 — A flaw was found in the DPDK vhost library. When handling a virtio indirect descriptor table, the host reads t… 2026-10-14 CVE-2026-105460 MEDIUM 5.5 Red Hat Enterprise Linux 10 — A flaw was found in BlueZ. An out-of-bounds read vulnerability exists in the btmon Bluetooth monitor tool when… 2026-10-13 CVE-2026-109832 HIGH 7.5 Red Hat Enterprise Linux 10 — A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, … 2026-10-13 CVE-2026-109833 MEDIUM 5.9 Red Hat Enterprise Linux 10 — A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS read path, par… 2026-10-13 CVE-2026-109854 LOW 2.5 Red Hat Enterprise Linux 10 — A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 enc… 2026-10-13 CVE-2026-109976 MEDIUM 4.7 Red Hat Enterprise Linux 10 — A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon crashes when an AF_U…● PoC 2026-10-13 CVE-2026-110036 LOW 3.3 Red Hat Enterprise Linux 10 — A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service (DoS) by ind…● PoC 2026-10-13 CVE-2026-88833 MEDIUM 6.5 Red Hat Hardened Images — A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the va… 2026-10-13 CVE-2026-88834 LOW 3.7 Red Hat Hardened Images — A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user ex… 2026-10-13 CVE-2026-88838 MEDIUM 5.5 Red Hat Hardened Images — A flaw was found in BusyBox's mount utility. A non-root user can bypass mount security restrictions set in /et… 2026-10-13 CVE-2026-107193 MEDIUM 6.5 Red Hat Satellite 6 — A flaw has been found in **permission filters** in the **foreman** package. The API loads a filter by its iden… 2026-10-12 CVE-2026-107203 MEDIUM 5.4 Red Hat Satellite 6 — An **incorrect authorization** flaw has been found in **network interface handling** in the **Foreman** packag… 2026-10-12 CVE-2026-108094 HIGH 7.8 Red Hat Enterprise Linux 10 — A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description path. A local … 2026-10-12 CVE-2026-109082 MEDIUM 6.8 Red Hat Build Of Keycloak — A flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-se… 2026-10-12 CVE-2026-109194 MEDIUM 6.4 Red Hat Quay 3 — A flaw was found in Red Hat Quay. The build trigger management application programming interface (API) fails t… 2026-10-12 CVE-2026-109195 LOW 3.1 Red Hat Quay 3 — A flaw was found in Quay. An authenticated attacker can access repository auto-prune configurations from other… 2026-10-12 CVE-2026-52903 HIGH 8.8 Manageiq — A deserialization of untrusted data vulnerability was found in ManageIQ. The YamlLoadAliases module overrides … 2026-10-12 CVE-2026-75888 HIGH 7.7 Red Hat Openshift Container Platform 4 — A flaw was found in the OpenShift console. An authenticated console user can exploit a Server-Side Request For… 2026-10-12 CVE-2026-83535 HIGH 7.4 Red Hat Openstack Platform 18.0 — A flaw was found in openstack-network-exporter. When an operator configures user authentication but omits or m… 2026-10-12 CVE-2026-83536 MEDIUM 5.3 Red Hat Openstack Platform 18.0 — A flaw was found in openstack-network-exporter. The HTTP server within the component is configured without ess… 2026-10-12 CVE-2026-85471 MEDIUM 6.4 Mirror Registry For Red Hat Openshift — A flaw was found in Quay. An authenticated repository administrator could bypass the hostname blacklist in web… 2026-10-12 CVE-2026-87744 CRITICAL 9.1 Red Hat Build Of Quarkus 3.27.6.Redhat — A flaw was found in Quarkus REST Data Panache. This vulnerability allows unauthenticated attackers to bypass s… 2026-10-12 CVE-2026-94451 MEDIUM 6.5 Red Hat Build Of Quarkus 3.27.6.Redhat — Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities. A flaw wa… 2026-10-12 CVE-2026-107655 MEDIUM 4 Red Hat Hardened Images — A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperl…● PoC 2026-10-09 CVE-2026-107889 MEDIUM 5.5 Red Hat Build Of Keycloak — A flaw was found in the login theme rendering component of Keycloak. The issue occurs because the security fil… 2026-10-09 CVE-2026-107935 CRITICAL 9.3 Red Hat Build Of Podman Desktop — A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock pa… 2026-10-09 CVE-2026-108063 MEDIUM 5.5 Red Hat Enterprise Linux 10 — A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry … 2026-10-09 CVE-2026-108093 MEDIUM 5.5 Red Hat Enterprise Linux 10 — A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites … 2026-10-09 CVE-2026-108119 MEDIUM 6.3 Red Hat Hardened Images — A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries… 2026-10-09 CVE-2026-107444 MEDIUM 4.3 Red Hat Hardened Images — A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scop… 2026-10-08 CVE-2026-107445 MEDIUM 5.4 Red Hat Hardened Images — A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization … 2026-10-08 CVE-2026-107466 MEDIUM 6.1 Red Hat Enterprise Linux 10 — A flaw was found in flatpak-builder. This vulnerability allows an attacker to cause information disclosure by … 2026-10-08 CVE-2026-107565 MEDIUM 5.1 Red Hat Enterprise Linux 10 — A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when s… 2026-10-08 CVE-2026-107604 MEDIUM 4.9 Red Hat Build Of Keycloak — A flaw was found in the installation provider and client registration endpoints of the Keycloak identity manag… 2026-10-08 CVE-2026-107623 MEDIUM 4.3 Red Hat Build Of Keycloak — A flaw was found in the OIDC Dynamic Client Registration (DCR) component of Keycloak. A bug in the response se… 2026-10-08 CVE-2026-107651 MEDIUM 5.5 Red Hat Enterprise Linux 6 — A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata reader due to … 2026-10-08 CVE-2026-89091 HIGH 8.8 Migration Toolkit For Applications 8 — A flaw was found in ansible-core. When installing a collection with `ansible-galaxy collection install`, the a… 2026-10-08 CVE-2026-93017 HIGH 7.7 Red Hat Openshift Container Platform 4 — The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the… 2026-10-08 CVE-2026-103868 MEDIUM 6.5 Red Hat Ansible Automation Platform 2 — A flaw was found in pulp-container when it authenticates to an upstream registry. Basic and bearer credentials… 2026-10-07 CVE-2026-103869 MEDIUM 6.5 Red Hat Ansible Automation Platform 2 — A flaw was found in pulp-ansible's bearer-token refresh for collection remotes. The access token is kept in on… 2026-10-07 CVE-2026-103870 MEDIUM 5 Red Hat Satellite 6 — A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are u… 2026-10-07 CVE-2026-106061 MEDIUM 5.5 Red Hat Enterprise Linux 10 — A flaw was found in GIMP’s X cursor (XMC) thumbnail loader. When GIMP generates a thumbnail for a crafted XMC … 2026-10-07 CVE-2026-106064 MEDIUM 6.3 Red Hat Enterprise Linux 10 — A heap-based buffer overflow was found in GIMP’s GIF export plug-in. Exporting an image with very large width … 2026-10-07 CVE-2026-106065 MEDIUM 6.3 Red Hat Enterprise Linux 10 — A heap-based buffer overflow was found in GIMP’s PCX export plug-in. For images with extremely large width and… 2026-10-07 CVE-2026-106066 MEDIUM 6.3 Red Hat Enterprise Linux 10 — A heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting very large images, g_… 2026-10-07 CVE-2026-106067 MEDIUM 6.3 Red Hat Enterprise Linux 10 — A heap-based buffer overflow was found in GIMP’s Hot color filter plug-in. For very large images, a pixel buff… 2026-10-07 CVE-2026-106471 HIGH 8.1 Red Hat Satellite 6 — A flaw was found in Candlepin. The central authorization filter incorrectly grants access when any one of mult… 2026-10-07 CVE-2026-107121 MEDIUM 6.5 Red Hat Build Of Keycloak — A flaw was found in the SMTP email configuration handling of the keycloak-services component. When the STARTTL… 2026-10-07 CVE-2026-107151 MEDIUM 5.9 Red Hat Satellite 6 — Missing authentication has been found in remote-execution task updates in the smart_proxy_dynflow package. The… 2026-10-07 CVE-2026-107161 HIGH 7.5 Red Hat Enterprise Linux 10 — A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 p… 2026-10-07 CVE-2026-107167 MEDIUM 6.2 Red Hat Enterprise Linux 10 — A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free … 2026-10-07 CVE-2026-107168 MEDIUM 6.2 Red Hat Enterprise Linux 10 — A flaw was found in m17n-lib. By providing crafted input containing an invalid UTF-8 character sequence, an at… 2026-10-07 CVE-2026-107169 MEDIUM 6.2 Red Hat Enterprise Linux 10 — A flaw was found in m17n-lib. An attacker could provide specially crafted or truncated UTF-8 input to trigger … 2026-10-07 CVE-2026-107170 LOW 2.9 Red Hat Enterprise Linux 10 — A flaw was found in m17n-lib. A partial failure during library initialization can leave an internal driver poi… 2026-10-07 CVE-2026-107174 MEDIUM 6.4 Openshift Serverless — A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize … 2026-10-07 CVE-2026-107176 MEDIUM 6.8 Red Hat Openshift Container Platform 4 — A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshi… 2026-10-07 CVE-2026-101258 HIGH 7.8 Red Hat Enterprise Linux 10 — A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass … 2026-10-06 CVE-2026-104031 MEDIUM 5.5 Red Hat Enterprise Linux 10 — A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated du… 2026-10-06 CVE-2026-104032 MEDIUM 5.5 Red Hat Enterprise Linux 10 — A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates throu… 2026-10-06 CVE-2026-104033 MEDIUM 5.4 Red Hat Enterprise Linux 10 — A flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightweight Directory Acce…● PoC 2026-10-06 CVE-2026-104034 MEDIUM 4.7 Red Hat Enterprise Linux 10 — A flaw was found in SSSD. A use-after-free vulnerability exists in the Kerberos Credential Manager (KCM) respo… 2026-10-06 CVE-2026-104035 MEDIUM 5.5 Red Hat Enterprise Linux 10 — A flaw was found in SSSD. An issue in the Kerberos Credential Manager (KCM) responder allows a local user to c… 2026-10-06 CVE-2026-104036 MEDIUM 5.8 Red Hat Enterprise Linux 10 — A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if… 2026-10-06 CVE-2026-104037 MEDIUM 5.5 Red Hat Enterprise Linux 10 — A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with …● PoC 2026-10-06 CVE-2026-104038 MEDIUM 5.9 Red Hat Enterprise Linux 10 — A flaw was found in sssd. A remote attacker can cause a denial of service (DoS) by submitting a certificate th…● PoC 2026-10-06 CVE-2026-104039 MEDIUM 4.7 Red Hat Enterprise Linux 10 — A flaw was found in SSSD. A local user can cause a denial of service (DoS) by disrupting system authentication… 2026-10-06 CVE-2026-104040 MEDIUM 4.4 Red Hat Enterprise Linux 10 — A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing s… 2026-10-06 CVE-2026-104041 MEDIUM 5.5 Red Hat Enterprise Linux 10 — A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries th…● PoC 2026-10-06 CVE-2026-104042 MEDIUM 5.5 Red Hat Enterprise Linux 10 — A flaw was found in sssd. A local attacker can cause a Denial of Service (DoS) by sending a crafted Pluggable …● PoC 2026-10-06 CVE-2026-104043 MEDIUM 5.5 Red Hat Enterprise Linux 10 — A flaw was found in SSSD. A local attacker with access to the Name Service Switch (NSS) responder UNIX socket … 2026-10-06 CVE-2026-104044 MEDIUM 6.2 Red Hat Enterprise Linux 10 — A flaw was found in sssd. A local attacker can trigger a Denial of Service (DoS) by sending a specially crafte… 2026-10-06 CVE-2026-104045 MEDIUM 4.7 Red Hat Enterprise Linux 10 — A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in…● PoC 2026-10-06 CVE-2026-104046 MEDIUM 6.2 Red Hat Enterprise Linux 10 — A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is ena… 2026-10-06 CVE-2026-104047 MEDIUM 5.3 Red Hat Enterprise Linux 10 — A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized … 2026-10-06 CVE-2026-104048 MEDIUM 6.8 Red Hat Enterprise Linux 10 — A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access …● PoC 2026-10-06 CVE-2026-105305 MEDIUM 5.4 Red Hat Build Of Keycloak — A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant fl… 2026-10-06 CVE-2026-106033 MEDIUM 5.4 Red Hat Ansible Automation Platform 2 — A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the Ansible Platform UI due to unvalidated inpu… 2026-10-06 CVE-2026-106062 HIGH 7.8 Red Hat Enterprise Linux 10 — A heap-based buffer overflow was found in GIMP’s DirectDraw Surface (DDS) loader. When loading a crafted DDS i… 2026-10-06 CVE-2026-106063 MEDIUM 6.3 Red Hat Enterprise Linux 10 — A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with extremely … 2026-10-06 CVE-2026-76061 MEDIUM 5.5 Red Hat Openshift Container Platform 4 — A flaw was found in CRI-O's `bind_mount_prefix` handling. When configured with a non-empty `bind_mount_prefix`… 2026-10-06 CVE-2026-80048 MEDIUM 5.5 Red Hat Enterprise Linux 10 — A flaw was found in `sssd-kcm`. A local user or process able to connect to the `sssd-kcm` UNIX socket can expl…● PoC 2026-10-06 CVE-2026-83550 HIGH 7.1 Multicluster Global Hub — A flaw was found in postgres-exporter. Due to the blank import of `net/http/pprof`, debug endpoints are expose… 2026-10-06 CVE-2026-88252 MEDIUM 4.7 Red Hat Enterprise Linux 10 — A flaw was found in sssd. A local user can cause a Denial of Service (DoS) by exhausting the responder service…● PoC 2026-10-06 CVE-2026-92821 MEDIUM 6.8 Red Hat Enterprise Linux 10 — A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access r… 2026-10-06 CVE-2026-101919 HIGH 8.8 Multicluster Engine For Kubernetes — A flaw was found in the HyperShift operator. The operator copies user-provided Kubernetes configuration (kubec… 2026-10-05 CVE-2026-102295 MEDIUM 5.4 Red Hat Quay 3 — A flaw was found in Quay. A cross-site scripting (XSS) vulnerability in the OAuth callback handler allows a re… 2026-10-05 CVE-2026-102576 MEDIUM 4.2 Red Hat Quay 3 — A flaw was found in Quay. A remote attacker could trick a user into logging in through a crafted link, resulti… 2026-10-05 CVE-2026-104029 LOW 3.3 Red Hat Enterprise Linux 10 — A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted reque… 2026-10-05 CVE-2026-104030 MEDIUM 5.5 Red Hat Enterprise Linux 10 — A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitt… 2026-10-05 CVE-2026-105301 MEDIUM 4 Red Hat Build Of Keycloak — A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access… 2026-10-05 CVE-2026-105302 MEDIUM 5.7 Red Hat Build Of Keycloak — A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The … 2026-10-05 CVE-2026-105306 MEDIUM 6.5 Red Hat Build Of Keycloak — A flaw was found in the Dynamic Client Registration flow of the Keycloak identity and access management server… 2026-10-05 CVE-2026-105326 LOW 2.5 Red Hat Hardened Images — An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accept… 2026-10-05 CVE-2026-105447 MEDIUM 5.5 Red Hat Quay 3 — A flaw was found in Quay. When handling build trigger requests, the application incorrectly exposes trigger co… 2026-10-05 CVE-2026-71297 MEDIUM 5.4 Multicluster Engine For Kubernetes — A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client … 2026-10-05 CVE-2026-71298 MEDIUM 6.4 Multicluster Engine For Kubernetes — A flaw was found in maestro. A remote attacker could exploit a SQL injection vulnerability in the `orderBy` qu… 2026-10-05 CVE-2026-71299 MEDIUM 6.5 Multicluster Engine For Kubernetes — A flaw was found in Maestro. Its REST API write endpoints were registered without proper authentication middle… 2026-10-05 CVE-2026-104988 HIGH 8.1 Red Hat Certificate System 10 — A flaw was found in Dogtag PKI (pki-core). The CMCAuthForEST authentication plugin fails open when an EST full… 2026-10-02 CVE-2026-94422 HIGH 8.7 Fedora — An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to… 2026-10-02 CVE-2026-95512 MEDIUM 5.5 Red Hat Hardened Images — A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vu… 2026-10-02 CVE-2026-103641 MEDIUM 5.5 Red Hat Enterprise Linux 10 — A flaw was found in GEGL. The Radiance HDR loader reads past the end of a memory-mapped image when an uncompre… 2026-10-01 CVE-2026-103754 MEDIUM 5.9 Red Hat Ansible Automation Platform 2 — A flaw was found in ansible-runner. The unstream_dir() function, which receives and extracts a streamed zip ar… 2026-10-01 CVE-2026-103884 MEDIUM 6.5 Red Hat Build Of Keycloak — A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checki… 2026-10-01 CVE-2026-12405 HIGH 8.8 Red Hat Satellite 6.16 For Rhel 8 — A flaw was found in rubygem-foreman_remote_execution. A command injection vulnerability exists in the Red Hat … 2026-10-01 CVE-2026-12423 HIGH 7.5 Red Hat Satellite 6.16 For Rhel 8 — A flaw was found in Foreman. The Red Hat Satellite /unattended/provision API endpoint is vulnerable to an auth… 2026-10-01 CVE-2026-12540 HIGH 8.2 Red Hat Satellite 6.16 For Rhel 8 — A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake errors:fetch_log tas… 2026-10-01 CVE-2026-12541 HIGH 8.2 Red Hat Satellite 6.16 For Rhel 8 — A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:imp… 2026-10-01 CVE-2026-12542 MEDIUM 5.3 Red Hat Satellite 6.16 For Rhel 8 — A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe … 2026-10-01 CVE-2026-12544 HIGH 7.7 Red Hat Satellite 6.16 For Rhel 8 — A flaw was found in Foreman. The foreman-rake initialization logic in /usr/share/foreman/config/settings.rb co… 2026-10-01 CVE-2026-12545 MEDIUM 6.7 Red Hat Satellite 6.16 For Rhel 8 — A flaw was found in rubygem-hammer_cli. A command injection vulnerability exists in Hammer CLI and the Railtie… 2026-10-01 CVE-2026-56097 MEDIUM 6.5 Red Hat Satellite 6.16 For Rhel 8 — A flaw was found in rubygem-katello. An SQL injection vulnerability exists in the Red Hat Satellite Katello Re… 2026-10-01 CVE-2026-56098 MEDIUM 4.3 Red Hat Satellite 6.16 For Rhel 8 — A flaw was found in rubygem-katello. The RegistryProxiesController in Katello contains an authorization bypass… 2026-10-01 CVE-2026-83589 MEDIUM 6.1 Red Hat Openshift Container Platform 4.18 — A flaw was found in oauth-proxy. The application fails to properly validate the destination redirect parameter… 2026-10-01 CVE-2026-86344 HIGH 7.5 Red Hat Directory Server 11 — A flaw was found in 389-ds-base. An unauthenticated remote attacker can send a complete LDAP operation followe… 2026-10-01 CVE-2026-86345 CRITICAL 9 Red Hat Directory Server 11 — A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client co… 2026-10-01 CVE-2026-96577 HIGH 7.1 Red Hat Openshift Container Platform 4.18 — A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all net… 2026-10-01 CVE-2026-96658 HIGH 8.8 Red Hat Satellite 6.16 For Rhel 8 — A flaw was found in Foreman. This vulnerability allows an authenticated remote attacker with low-level read pe… 2026-10-01 CVE-2026-96659 CRITICAL 9.1 Red Hat Satellite 6.16 For Rhel 8 — A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions… 2026-10-01 CVE-2026-101295 HIGH 7.3 Assisted Installer For Red Hat Openshift Container Platform 2 — Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirroring operato… 2026-09-30 CVE-2026-103242 HIGH 7.1 Red Hat Enterprise Linux 10 — A heap-based buffer overflow flaw was found in rpm. RPMTAG_FILESIGNATURES in a crafted, unsigned RPM package's… 2026-09-30 CVE-2026-103399 MEDIUM 5.3 Red Hat Enterprise Linux 10 — A flaw was found in SoupServer (libsoup). When an HTTP/1.x client sends a request with Expect: 100-continue an… 2026-09-30 CVE-2026-62146 HIGH 7.8 Red Hat Openshift Container Platform 4 — A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrit… 2026-09-30 CVE-2026-102473 MEDIUM 5.5 Red Hat Enterprise Linux 6 — A flaw was found in dash. When built without libc fnmatch, the internal pmatch() matcher implements * by unbou… 2026-09-29 CVE-2026-102474 MEDIUM 4 Red Hat Enterprise Linux 6 — A flaw was found in dash. The printf builtin reserves four bytes before converting a Unicode \u or \U escape, … 2026-09-29 CVE-2026-102555 HIGH 8.2 Red Hat Enterprise Linux 10 — A flaw was found in libsoup. The soup_uri_decode_data_uri() function incorrectly treated base64 data-URI paylo… 2026-09-29 CVE-2026-102556 HIGH 8.6 Red Hat Enterprise Linux 10 — A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted t… 2026-09-29 CVE-2026-102557 HIGH 8.6 Red Hat Enterprise Linux 10 — A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did no… 2026-09-29 CVE-2026-102558 HIGH 8.6 Red Hat Enterprise Linux 10 — A flaw was found in libsoup. When max-incoming-payload-size is unlimited (0), SoupWebsocketConnection could gr… 2026-09-29 CVE-2026-102559 HIGH 8.6 Red Hat Enterprise Linux 10 — A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing paylo… 2026-09-29 CVE-2026-102560 HIGH 8.6 Red Hat Enterprise Linux 10 — A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing … 2026-09-29 CVE-2026-102623 MEDIUM 6.5 Red Hat Openshift Virtualization 4 — A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances (VMIs)… 2026-09-29 CVE-2026-95520 HIGH 7.1 Red Hat Enterprise Linux 10 — A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose … 2026-09-29 CVE-2026-97024 HIGH 7.1 Red Hat Enterprise Linux 10 — A path traversal vulnerability in Flatpak's handling of the files/etc directory during app deployment allows a… 2026-09-29 CVE-2026-97029 MEDIUM 5.7 Red Hat Enterprise Linux 10 — Flatpak's process ID namespace separation does not prevent a sandboxed app's kill(0, signal) or killpg(0, sign… 2026-09-29 CVE-2026-101292 HIGH 8.2 Red Hat Jboss Enterprise Application Platform 7.4.25 — Apache ActiveMQ Artemis before 2.34.0 contains an unsafe reflection vulnerability in FederationStreamConnectMe… 2026-09-28 CVE-2026-101333 LOW 3.7 Red Hat Build Of Keycloak — A flaw was found in the Micrometer user-event metrics listener of Keycloak, a solution for integrated identity… 2026-09-28 CVE-2026-102010 HIGH 7 Red Hat Hardened Images — A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in li… 2026-09-28 CVE-2026-86330 HIGH 7.2 Red Hat Openshift Data Foundation 4 — An OS command injection flaw was found in the set_hostname_internal function of NooBaa's cluster_internal_api.… 2026-09-28 CVE-2026-87114 HIGH 7.1 Red Hat Openshift Container Platform 4.19 — A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly execut… 2026-09-28 CVE-2026-96740 MEDIUM 6.5 Streamshub Console For Apache Kafka® — A flaw was found in the StreamsHub Console for Apache Kafka. Tenant-supplied Kafka client properties from the … 2026-09-28 CVE-2026-97023 HIGH 7.1 Red Hat Enterprise Linux 10 — A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows … 2026-09-28 CVE-2026-97025 LOW 3.2 Red Hat Enterprise Linux 10 — Flatpak writes the OCI repository authentication token with world-readable permissions (0644) in the system-he… 2026-09-28 CVE-2026-97026 LOW 3.9 Red Hat Enterprise Linux 10 — Flatpak creates temporary child repository directories under the user cache with world-writable permissions (0… 2026-09-28 CVE-2026-97027 LOW 3.6 Red Hat Enterprise Linux 10 — Flatpak passes through arbitrary vendor-extension keys unmodified when exporting an application's Desktop Entr… 2026-09-28 CVE-2026-96279 MEDIUM 6.5 Red Hat Enterprise Linux 10 — A malicious OCI registry can hardlink arbitrary host files into the extraction directory when a user installs … 2026-09-27 CVE-2026-96280 HIGH 7.5 Red Hat Enterprise Linux 10 — The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecti… 2026-09-27 CVE-2026-96281 MEDIUM 6.2 Red Hat Enterprise Linux 10 — On a multi-user system, a user with an active local login session could downgrade a system-wide Flatpak app to… 2026-09-27 CVE-2026-96282 LOW 3.1 Red Hat Enterprise Linux 10 — A malicious Flatpak extension can probe the host filesystem to determine what files and directories exist at a… 2026-09-27 CVE-2026-96283 LOW 3.3 Red Hat Enterprise Linux 10 — By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull, the pull is not actually ca… 2026-09-27 CVE-2026-96284 LOW 2.5 Red Hat Enterprise Linux 10 — A malicious user can get read-access to files in the flatpak-system-helper context if a system OCI repository … 2026-09-27 CVE-2026-93834 HIGH 8.8 Red Hat Enterprise Linux 10 — A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread an…● PoC 2026-09-25 CVE-2026-96448 MEDIUM 6.6 Red Hat Build Of Keycloak — A flaw was found in the Fine-Grained Admin Permissions (FGAP v2) feature of Keycloak, an identity and access m… 2026-09-25 CVE-2026-97846 MEDIUM 6.8 Red Hat Build Of Keycloak — Keycloak provides a feature called mTLS holder-of-key binding which ensures that a token can only be used by t… 2026-09-25 CVE-2026-90959 HIGH 8.1 Red Hat Ansible Automation Platform 2 — A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'file_url' parameter th… 2026-09-24 CVE-2026-94416 MEDIUM 6.8 Red Hat Ansible Automation Platform 2 — An authorization bypass was found in the Ansible Automation Platform (AAP) gateway. The gateway API allows an … 2026-09-24 CVE-2026-95519 HIGH 7.8 Red Hat Enterprise Linux 10 — A flaw was found in rpm. An attacker can supply a crafted manifest file that, when processed by a user or auto… 2026-09-24 CVE-2026-95521 HIGH 7.8 Red Hat Enterprise Linux 10 — A command injection flaw was found in rpm. Installing or rebuilding a source RPM whose source or spec file bas… 2026-09-24 CVE-2026-97176 MEDIUM 4.2 Red Hat Build Of Keycloak — A flaw was found in the Level of Authentication enforcement mechanism of Keycloak, an identity and access mana… 2026-09-24 CVE-2026-97177 MEDIUM 6.6 Red Hat Build Of Keycloak — A flaw was found in the user update mechanism of the Keycloak Admin REST API. When Fine-Grained Admin Permissi… 2026-09-24 CVE-2026-97185 HIGH 7.8 Red Hat Enterprise Linux 8 — A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not… 2026-09-24 CVE-2026-97311 MEDIUM 4.3 Red Hat Build Of Keycloak — A flaw was found in the Admin REST API of Keycloak, an identity and access management solution. The endpoints … 2026-09-24 CVE-2026-71458 MEDIUM 5 Red Hat Ansible Automation Platform 2.5 For Rhel 8 — URLModificationMiddleware resolves named-URL lookups against unfiltered Model.objects before RBA… 2026-09-23 CVE-2026-71459 MEDIUM 5 Red Hat Ansible Automation Platform 2.5 For Rhel 8 — JobJobEventsChildrenSummary view has no model/parent_model. ModelAccessPermission.check_get_perm… 2026-09-23 CVE-2026-71460 MEDIUM 4.3 Red Hat Ansible Automation Platform 2.5 For Rhel 8 — /api/v2/config/ is protected only by IsAuthenticated. license_info (account_number, subscription… 2026-09-23 CVE-2026-71461 MEDIUM 4.3 Red Hat Ansible Automation Platform 2.7 — HostList.list() catches bare Exception and returns str(e) verbatim. Via host_filter, any authent… 2026-09-23 CVE-2026-71462 MEDIUM 4.1 Red Hat Ansible Automation Platform 2.5 For Rhel 8 — StringListPathField.to_internal_value() calls os.path.exists() on unbounded user-supplied paths.… 2026-09-23 CVE-2026-71463 LOW 2.7 Red Hat Ansible Automation Platform 2.5 For Rhel 8 — Notification template Jinja AST whitelist only inspects static Getattr nodes. Dynamic subscripts… 2026-09-23 CVE-2026-71464 LOW 3.1 Red Hat Ansible Automation Platform 2.5 For Rhel 8 — LaunchConfigurationBaseSerializer.scm_branch has no validate_scm_branch() leading-dash check, un… 2026-09-23 CVE-2026-71465 LOW 3.1 Red Hat Ansible Automation Platform 2.5 For Rhel 8 — RunAdHocCommand.build_args() appends limit as bare positional (args.append(limit)) instead of us… 2026-09-23 CVE-2026-75884 CRITICAL 9.1 Red Hat Ansible Automation Platform 2.4 For Rhel 8 — A flaw was found in AWX. The container group pod_spec_override field uses an incomplete blocklist that only re… 2026-09-23 CVE-2026-75886 HIGH 7.2 Red Hat Openshift Container Platform 4.17 — A flaw was found in openshift/console. An unauthenticated remote attacker can exploit a misconfiguration in th… 2026-09-23 CVE-2026-75887 HIGH 7.5 Red Hat Openshift Container Platform 4.12 — A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerabil… 2026-09-23 CVE-2026-76648 HIGH 8.5 Red Hat Ansible Automation Platform 2.7 — CopyAPIView (awx/awx/api/generics.py:873) sets permission_classes = (IsAuthenticated,), so DRF's get_object() … 2026-09-23 CVE-2026-84474 CRITICAL 9.9 Red Hat Ansible Automation Platform 2.4 For Rhel 8 — A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The provisioning-callback se… 2026-09-23 CVE-2026-84486 HIGH 8.2 Red Hat Ansible Automation Platform 2.6 For Rhel 9 — A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Four debug views that trigge… 2026-09-23 CVE-2026-84499 HIGH 7.7 Red Hat Ansible Automation Platform 2.5 For Rhel 8 — A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Survey questions of type pas… 2026-09-23 CVE-2026-84502 CRITICAL 9.9 Red Hat Ansible Automation Platform 2.4 For Rhel 8 — A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The Project scm_url field is… 2026-09-23 CVE-2026-84683 HIGH 8.7 Red Hat Ansible Automation Platform 2.5 For Rhel 8 — A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The HTML view of job, ad hoc… 2026-09-23 CVE-2026-84691 HIGH 8.7 Red Hat Ansible Automation Platform 2.5 For Rhel 8 — A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The setting that formats the… 2026-09-23 CVE-2026-84706 HIGH 7.6 Red Hat Ansible Automation Platform 2.5 For Rhel 8 — A flaw was found in Ansible Automation Platform's automation-controller. The custom Credential Type environmen… 2026-09-23 CVE-2026-84712 MEDIUM 5.3 Red Hat Ansible Automation Platform 2.5 For Rhel 8 — A flaw was found in the automation-controller API. The unauthenticated health-check endpoint… 2026-09-23 CVE-2026-84713 MEDIUM 6.5 Red Hat Ansible Automation Platform 2.7 — A flaw was found in the automation-controller notification subsystem. Although NotificationT… 2026-09-23 CVE-2026-84714 HIGH 7.1 Red Hat Ansible Automation Platform 2.5 For Rhel 8 — A flaw was found in the automation-controller input-validation guard sanitize_jinja(). The f… 2026-09-23 CVE-2026-84716 MEDIUM 6.6 Red Hat Ansible Automation Platform 2.5 For Rhel 8 — A flaw was found in the automation-controller instance install-bundle endpoint. When a Syste… 2026-09-23 CVE-2026-84717 MEDIUM 5.3 Red Hat Ansible Automation Platform 2.5 For Rhel 8 — A flaw was found in the Ansible Automation Platform automation-controller. The unauthenticated Bitbucket Data … 2026-09-23 CVE-2026-84718 MEDIUM 4.3 Red Hat Ansible Automation Platform 2.5 For Rhel 8 — A flaw was found in the Ansible Automation Platform automation-controller. In the shipped production configura… 2026-09-23 CVE-2026-84719 CRITICAL 9.9 Red Hat Ansible Automation Platform 2.4 For Rhel 8 — A flaw was found in the Ansible Automation Platform automation-controller. When a WorkflowJobTemplate is copie… 2026-09-23 CVE-2026-84720 MEDIUM 6.5 Red Hat Ansible Automation Platform 2.5 For Rhel 8 — A flaw was found in the Ansible Automation Platform automation-controller. The WorkflowJobNode.ancestor_artifa… 2026-09-23 CVE-2026-84721 MEDIUM 6.4 Red Hat Ansible Automation Platform 2.7 — A server-side request forgery flaw was found in the Ansible Automation Platform automation-controller email no… 2026-09-23 CVE-2026-84724 MEDIUM 6.6 Red Hat Ansible Automation Platform 2.5 For Rhel 8 — An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsy… 2026-09-23 CVE-2026-85475 HIGH 7.2 Red Hat Ansible Automation Platform 2.7 — A flaw was found in the Ansible Automation Platform automation controller. The external logging (rsyslog) conf… 2026-09-23 CVE-2026-88830 HIGH 7.5 Red Hat Hardened Images — A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer… 2026-09-23 CVE-2026-88831 MEDIUM 5.3 Red Hat Hardened Images — BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask… 2026-09-23 CVE-2026-88832 HIGH 7.3 Red Hat Hardened Images — BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer o… 2026-09-23 CVE-2026-88835 MEDIUM 6.1 Red Hat Hardened Images — BusyBox dpkg read_package_field() steps past a NUL terminator on malformed .deb packages, causing an out-of-bo… 2026-09-23 CVE-2026-88837 MEDIUM 6.5 Red Hat Hardened Images — BusyBox httpd treats yescrypt ($y$) password hashes as plaintext during Basic Authentication, inverting the au… 2026-09-23 CVE-2026-88839 MEDIUM 6.7 Red Hat Hardened Images — BusyBox passwd/group tokenize() references a stale endpoint pointer after trimming, causing an out-of-bounds w… 2026-09-23 CVE-2026-88840 MEDIUM 5.3 Red Hat Hardened Images — BusyBox TLS get_client_hello() reads past the end of the input buffer when parsing a truncated ClientHello mes… 2026-09-23 CVE-2026-96275 HIGH 8.8 Red Hat Enterprise Linux 10 — A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on … 2026-09-23 CVE-2026-96276 MEDIUM 6.5 Red Hat Enterprise Linux 10 — If a malicious SDK container declares an extension point with a crafted `directory` path, and a developer runs… 2026-09-23 CVE-2026-96442 HIGH 7.8 Gnu Emacs — A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language ba… 2026-09-23 CVE-2026-96445 MEDIUM 6.8 Red Hat Build Of Keycloak — A flaw was found in the Conditional OTP authenticator of Keycloak, an identity and access management solution.… 2026-09-23 CVE-2026-96446 MEDIUM 4.2 Red Hat Build Of Keycloak — A flaw was found in the Pushed Authorization Request PAR implementation of Keycloak. The issue occurs when the… 2026-09-23 CVE-2026-96512 HIGH 7.8 Red Hat Enterprise Linux 10 — A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with tim… 2026-09-23 CVE-2026-96541 HIGH 7.5 Red Hat Enterprise Linux 10 — A denial-of-service flaw was found in gnome-remote-desktop. An unauthenticated remote attacker can open RDP co…● PoC 2026-09-23 CVE-2026-96545 MEDIUM 4.4 Red Hat Enterprise Linux 10 — An out-of-bounds heap read flaw was found in GIMP's TIM image loader. When a user opens a crafted 4bpp TIM ima…● PoC 2026-09-23 CVE-2026-96546 LOW 2.5 Red Hat Enterprise Linux 10 — A one-byte out-of-bounds heap read flaw was found in GIMP's uncompressed DDS image loader. When a user opens a…● PoC 2026-09-23 CVE-2026-96889 HIGH 7.8 Red Hat Enterprise Linux 10 — A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with…● PoC 2026-09-23 CVE-2026-90462 MEDIUM 5.4 Red Hat Enterprise Linux 10 — A flaw was found in SSSD. When configured with the LDAP access provider and `ldap_access_order` including `ppo…● PoC 2026-09-22 CVE-2026-94640 HIGH 7.5 Red Hat Enterprise Linux 10 — A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of… 2026-09-22 CVE-2026-95503 MEDIUM 6.8 Red Hat Build Of Keycloak — A flaw was found in the Kerberos federation provider of Keycloak, an open-source identity and access managemen… 2026-09-22 CVE-2026-95508 HIGH 7.4 Red Hat Enterprise Linux 10 — A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is … 2026-09-22 CVE-2026-95619 HIGH 7.7 Red Hat Hardened Images — A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned opera… 2026-09-22 CVE-2026-15801 HIGH 8 Red Hat Openshift Container Platform 4 — A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CRI-O is conf… 2026-09-21 CVE-2026-75939 HIGH 7.4 Red Hat Openshift Container Platform 4.18 — A flaw was found in openshift/oc-mirror. The tool incorrectly verifies PGP (Pretty Good Privacy) release image… 2026-09-21 CVE-2026-80110 HIGH 8.1 Red Hat Enterprise Linux 10 — A flaw was found in pki-core. The v2 REST ACL filter selects a tie-breaking permission for colliding literal a… 2026-09-21 CVE-2026-92382 MEDIUM 4.1 Red Hat Enterprise Linux 10 — An out-of-bounds write flaw was found in usbredir. Starting an isochronous OUT stream with a transfer count of… 2026-09-21 CVE-2026-92574 HIGH 8.8 Confidential Compute Attestation — A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a malicious checkpointed c… 2026-09-21 CVE-2026-93433 MEDIUM 5.5 Red Hat Enterprise Linux 10 — A flaw was found in libstoragemgmt. An attacker with control over a local or virtual storage device could prov… 2026-09-21 CVE-2026-94184 MEDIUM 5.3 Red Hat Enterprise Linux 10 — A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or comprom… 2026-09-21 CVE-2026-94213 MEDIUM 4.9 Red Hat Build Of Keycloak — A flaw was found in the Authorization Services component of Keycloak, an open-source identity and access manag… 2026-09-21 CVE-2026-94215 MEDIUM 5.5 Red Hat Build Of Keycloak — A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. Th… 2026-09-21 CVE-2026-94217 LOW 3.5 Red Hat Build Of Keycloak — A flaw was found in the User-Managed Access (UMA) implementation of Keycloak. The issue occurs in the authoriz… 2026-09-21 CVE-2026-94218 LOW 3.1 Red Hat Build Of Keycloak — A flaw was found in the authentication session management of Keycloak, an identity and access management solut… 2026-09-21 CVE-2026-94368 HIGH 7.1 Red Hat Openshift Data Foundation 4 — A flaw was found in the signature verification logic of noobaa-core, the core component of the NooBaa Multiclo… 2026-09-21 CVE-2026-94449 HIGH 7.5 Red Hat Build Of Quarkus 3.27.6.Redhat — A flaw was found in the SmallRye Fault Tolerance library, which is used by Quarkus to provide strategies like … 2026-09-21 CVE-2026-93999 MEDIUM 4.2 Red Hat Build Of Keycloak — A flaw was found in the OIDC protocol implementation of Keycloak, an open-source identity and access managemen… 2026-09-19 CVE-2026-94000 MEDIUM 6.6 Red Hat Build Of Keycloak — A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. Th… 2026-09-19 CVE-2026-94001 MEDIUM 6.5 Red Hat Build Of Keycloak — A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. Th… 2026-09-19 CVE-2026-10832 MEDIUM 5.9 Red Hat Jboss Enterprise Application Platform 8.1 — A flaw was found in the DERDecoder class within wildfly-elytron-asn1. A remote attacker can exploit this resou… 2026-09-18 CVE-2026-75885 CRITICAL 9.3 Red Hat Openshift Container Platform 4.12 — A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/devfile/sam… 2026-09-18 CVE-2026-81627 HIGH 8.2 Red Hat Enterprise Linux 10 — A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM…● PoC 2026-09-18 CVE-2026-85511 MEDIUM 4.2 Red Hat Jboss Enterprise Application Platform 8.1 For Rhel 10 — A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-real… 2026-09-18 CVE-2026-87743 HIGH 7.5 Red Hat Build Of Quarkus 3.27.5.Sp2 — A flaw was found in Quarkus HTTP security. An unauthenticated attacker can exploit a discrepancy in how paths … 2026-09-18 CVE-2026-89058 HIGH 7.4 Red Hat Build Of Quarkus 3.27.6.Redhat — A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the req…● PoC 2026-09-18 CVE-2026-89059 HIGH 7.5 Red Hat Build Of Quarkus 3.27.6.Redhat — A flaw was found in RESTEasy's IIOImageProvider, which decodes attacker-supplied image request bodies without …● PoC 2026-09-18 CVE-2026-91142 LOW 3.6 Red Hat Enterprise Linux 10 — A flaw was found in Cockpit. An authenticated local user with a large user identifier (UID) can cause unauthor… 2026-09-18 CVE-2026-91147 MEDIUM 5.9 Red Hat Enterprise Linux 10 — A flaw was found in `cockpit-ws`. This vulnerability allows a remote, unauthenticated attacker to cause a Deni…● PoC 2026-09-18 CVE-2026-91149 HIGH 7.5 Red Hat Enterprise Linux 10 — A flaw was found in Cockpit. An unauthenticated remote attacker can exploit this vulnerability by initiating a… 2026-09-18 CVE-2026-91202 MEDIUM 6.1 Red Hat Enterprise Linux 9 — A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a di… 2026-09-18