Red Hat vulnerabilities
2,566 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-93433Libstoragemgmt: libstoragemgmt: denial of service via stack buffer overflow in scsi vpd page parsing
- CVE-2026-92382Usbredir: usbredir: unbounded iso_packet_desc[] index in usbredirhost_iso_packet() leads to heap out-of-bounds write
- CVE-2026-94449Quarkus-smallrye-fault-tolerance: quarkus-smallrye-fault-tolerance: memory leak in @applyguard leads to denial of service
- CVE-2026-94184Fetchmail: fetchmail: stack-based buffer overflow in ntlm authentication (fetchmail-sa-2026-01)
- CVE-2026-80110Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation…
- CVE-2026-75939Openshift/oc-mirror: release signature verification: openpgp signatureerror checked before signed body is consumed
- CVE-2026-94368Noobaa-core: noobaa-core: presigned put url escalation to copyobject via unsigned x-amz-copy-source header
- CVE-2026-92574Cri-o: cri-o checkpoint restore bypasses destination security context
- CVE-2026-15801Cri-o: cri-o: insufficient validation during container checkpoint restore
- CVE-2026-94218Keycloak-services: keycloak-services: 2fa setup enforcement bypass via authentication session restart endpoint
- CVE-2026-94217Keycloak-services: keycloak-services: uma scope merge across resource owners via resource name collision
- CVE-2026-94215Keycloak-services: keycloak-services: cross-realm client read/write via request-level cache missing realm ownership check
- CVE-2026-94213Keycloak-services: keycloak-services: authorization services policy evaluation endpoint leaks user identity
- CVE-2026-94001Keycloak-services: keycloak-services: admin credential delete bypasses denied reset-password permission
- CVE-2026-94000Keycloak-services: keycloak-services: delegated admin with manage-users can escalate to realm-admin via group membership
- CVE-2026-93999Keycloak-services: keycloak-services: token refresh continues issuing tokens for disabled audience clients
- CVE-2026-75885Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint
- CVE-2026-93562Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smuggling
- CVE-2026-93574Io.netty/netty-codec-http: netty: http request smuggling via post-digit whitespace in chunk-size parsing
- CVE-2026-91202Cockpit-files: cockpit-files: arbitrary file ownership change via symlink following in privileged paste
- CVE-2026-91203Cockpit-files: cockpit-files: arbitrary file ownership and permission modification via symlink race condition
- CVE-2026-91205Cockpit-files: cockpit-files: local attacker can hijack file ownership via symlink race
- CVE-2026-92768Cockpit-machines: cockpit-machines: sensitive data exposure via command-line arguments
- CVE-2026-92747Cockpit-machines: cockpit-machines: sensitive data exposure of guest credentials via json argument in process list
- CVE-2026-92745Cockpit-machines: cockpit-machines: information disclosure of rhsm offline token via process arguments
- CVE-2026-93432Io.quarkus.qute:quarkus-core: cross-site scripting (xss) and json injection via qute {#eval} section in quarkus
- CVE-2026-91142Cockpit: cockpit: unauthorized modification of login records via integer overflow
- CVE-2026-91147Cockpit: cockpit: denial of service in `cockpit-ws` due to url-root handling without a trailing slash
- CVE-2026-91149Cockpit: cockpit: denial of service via unbounded connection thread spawning
- CVE-2026-93579Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough)