Red Hat vulnerabilities
2,566 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-106063Gimp: gimp: heap buffer overflow in dicom export on oversized image dimensions
- CVE-2026-104048Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation
- CVE-2026-104047Sssd: sssd: information disclosure via query injection in entra id lookups
- CVE-2026-76061Cri-o: cri-o: bind_mount_prefix intermediate-symlink prefix bypass
- CVE-2026-106033Ansible: ansible-ui: ansible ui dom xss in /redirect next parameter
- CVE-2026-83550Postgres-exporter: net/http/pprof exposed on metrics listener
- CVE-2026-88252Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion
- CVE-2026-105305Keycloak-services: keycloak-services: device authorization grant bypasses per-client minimum.acr.value enforcement
- CVE-2026-104044Sssd: sssd: denial of service via crafted passkey kerberos authentication request
- CVE-2026-104043Sssd: sssd: denial of service via undersized packet parsing in nss responder
- CVE-2026-104042Sssd: sssd: denial of service via out-of-bounds read in pam responder
- CVE-2026-104041Sssd: sssd: denial of service via unbounded negative cache growth
- CVE-2026-104039Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder
- CVE-2026-104038Sssd: sssd: denial of service via missing sid extension in certificate mapping
- CVE-2026-104037Sssd: sssd: denial of service via packet length underflow in autofs responder
- CVE-2026-92821Sssd: sssd: access control bypass via premature ldap access rule evaluation
- CVE-2026-104036Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin
- CVE-2026-104035Sssd: sssd: denial of service via memory exhaustion in kcm responder
- CVE-2026-104034Sssd: sssd: denial of service via use-after-free in kcm ticket renewal
- CVE-2026-104033Sssd: sssd: access control bypass via improper ldap shadow expiration check
- CVE-2026-104032Sssd: sssd: denial of service via unprivileged autofs cache invalidation
- CVE-2026-104031Sssd: sssd: denial of service via memory exhaustion in autofs responder
- CVE-2026-105447Quay: quay: global read-only superuser can access build trigger write credentials
- CVE-2026-71297Maestro: maestro: grpc broker has no auth interceptor and client mtls is optional
- CVE-2026-104029Sssd: sssd: denial of service via out-of-bounds read in autofs responder
- CVE-2026-104030Sssd: sssd: denial of service via out-of-bounds read during passkey parsing
- CVE-2026-71299Maestro: maestro: rest api write endpoints registered without authentication middleware
- CVE-2026-71298Maestro: sql identifier injection via properties.* search filter and orderby field
- CVE-2026-105326Cups: cups: argument injection in mailto notifier via notify-recipient-uri
- CVE-2026-101919Hypershift: hypershift: unsanitized kubeconfig passthrough from tenant namespace to control plane