Red Hat vulnerabilities
2,566 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-123084Python-pulpcore: pulpcore: header content guard jq filter exposes the content-app environment
- CVE-2026-121885Podman: untrusted image labels allow auto-update to restart arbitrary systemd units
- CVE-2026-120399Flightctl-api: flightctl-remote-access: flightctl: unbounded tls handshake in conncontext can block accepting connections
- CVE-2026-124747Busybox: heap buffer overflow in wget ftp resume when the resume offset exceeds the reported file size
- CVE-2026-125709Libstdc++: overflow leaves streambuf in inconsistent state on i/o error.
- CVE-2026-125707Gst-plugins-bad: gst-plugins-bad: off-by-one write in mxf demuxer temporal offset table
- CVE-2026-125706Gst-plugins-bad: gst-plugins-bad: missing bounds checks in mpeg ps pes header parsing
- CVE-2026-125712Gst-plugins-base: gst-plugins-base: missing bounds checks in rtcp sdes packet parsing
- CVE-2026-125703Gst-plugins-bad: gst-plugins-bad: bounds check errors in mxf vanc packet handling
- CVE-2026-125672Cockpit: cockpit-storaged: tang keyserver address from an untrusted luks header clevis token reaches curl's argument vector as an option
- CVE-2026-125704Gstreamer: gstreamer: use-after-free in gstreamer core buffer value deserialization
- CVE-2026-125652Keycloak-services: keycloak-services: client-level mandatory pkce bypass via login-actions entry point
- CVE-2026-122056Openscap: one-byte heap buffer overflow in sds-compose may lead to denial-of-service
- CVE-2026-112314Krb5: mit krb5 gss-rpc client memory leak on xid mismatch retries
- CVE-2026-112321Krb5: mit krb5 kadmind unauthenticated memory leak dos via auth_gssapi_init error paths
- CVE-2026-112320Krb5: mit krb5 kadmind unauthenticated memory leak dos via gss-rpc auth flavor switching
- CVE-2026-112319Krb5: mit krb5 kadmind authenticated memory exhaustion dos via unbounded rpc xdr allocation
- CVE-2026-112318Krb5: mit krb5 kadmind authenticated dos exploiting dereference of null policy name pointers
- CVE-2026-112316Krb5: mit krb5 kadmind authenticated memory leak dos in xdr_krb5_tl_data() decode failure
- CVE-2026-112317Krb5: mit krb5 kdc unauthenticated memory leak dos in kdb keytab key decryption error path
- CVE-2026-112315Krb5: mit krb5 kadmind unauthenticated memory leak dos in rpcsec_gss buffer decode failure
- CVE-2026-12977Org.wildfly.core/wildfly-server: wildfly: rbac bypass in wildfly deployment-operation handlers leads to privilege escalation
- CVE-2026-119079Krb5: mit krb5 kdc unauthenticated cpu dos via quadratic asn.1 sequence of decoding
- CVE-2026-112323Krb5: mit krb5 kadmind unauthenticated memory exhaustion via failed auth_gssapi_init requests
- CVE-2026-112322Krb5: mit krb5 kadmind unauthenticated cpu dos via auth_gssapi client states cleanup
- CVE-2026-125041Gst-plugins-good: gst-plugins-good: qtdemux out-of-bounds heap read from invalid uncompressed video layout
- CVE-2026-125040Gst-plugins-base: gst-plugins-base: quadratic regex processing in srt/webvtt subtitle parser causes denial of service
- CVE-2026-84503Ansible-core: ansible-core: ansible.builtin.git invokes git without a `--` separator, allowing argument injection via a `-`-leading…
- CVE-2026-125063Automation-controller: automation-controller: quadratic regex in schedule rrule validation allows an authenticated user to exhaust api web…
- CVE-2026-19706Openshift/installer: openshift installer: unconditional csr approval during agent-based installation (abi) bootstrap