Red Hat vulnerabilities
2,566 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-90997Keycloak-services: keycloak: replay protection bypass leads to unauthorized access via database driver semantics mismatch
- CVE-2026-76781Libxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attribute
- CVE-2026-87742Quarkus-websockets-next: denial of service (oom) in quarkus-websockets-next via unbounded message buffering
- CVE-2026-81829Smallrye-jwt: quarkus-smallrye-jwt: smallrye-jwt: unauthenticated same-origin ssrf via unsanitized jwt kid header in awsalbkeyresolver
- CVE-2026-92904Rubygem-foreman_remote_execution: job output readable without object-level view_job_invocations check
- CVE-2026-92925Redis: redis: out-of-bounds read via crafted cluster bus packets
- CVE-2026-92893Rubygem-foreman_ansible: ansible inventory api ignores view_hosts permission filters, exposes hidden parameters
- CVE-2026-92894Rubygem-foreman_ansible: unscoped lookupvalue deletion allows cross-model override value destruction
- CVE-2026-86320Flatpak-builder: host code execution via `git am` hook execution in patch source extraction (`use-git-am`)
- CVE-2026-85469Quay-builder-qemu: quay-builder-qemu: release workflow uses third-party action pinned to mutable @master with registry credentials in scope
- CVE-2026-42784Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion
- CVE-2026-19607Keycloak-services: keycloak-services: broker-originated username collision causes account lockout
- CVE-2026-17526Keycloak-services: keycloak-services: privilege escalation via impersonation role allows takeover of realm administrator accounts
- CVE-2026-92615Flightctl: flightctl: package-global go-git https transport mutated per-repo -- cross-tenant tls-config bleed
- CVE-2026-79651Keycloak-services: keycloak-services: unauthenticated dos via unbounded locale caching
- CVE-2026-74909Keycloak-services: keycloak-services: incomplete fix for cve-2026-15573 allows policy enforcer bypass via percent-encoded uri segments
- CVE-2026-18212Keycloak-services: keycloak-services: saml redirect deflate helpers leak native zlib state
- CVE-2026-92091Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array
- CVE-2026-92358Keycloak-services: keycloak-services: residual cross-browser account-link proof allows silent re-linking
- CVE-2025-11395Podman: arbitrary file write when importing oci archive
- CVE-2026-92248Gimp: integer overflow when generating a thumbnail preview for a psd file
- CVE-2026-85234Tftp: tftp-hpa: denial of service due to out-of-bounds read/write in remap engine
- CVE-2026-79699Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory
- CVE-2026-79705Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers
- CVE-2026-85013Environment-modules: command injection in environment-modules bash completion via malicious module names containing shell metacharacters
- CVE-2026-91926Gss-ntlmssp: gss-ntlmssp: memory leak in ntlm_decode_target_info via duplicated av_pair entries in ntlm challenge
- CVE-2026-91786Gnome-shell: gnome-shell: out-of-bounds read in remote search icon rendering due to unvalidated icon-data buffer size
- CVE-2026-75092Leapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scan_mysql runs mysqld --validate-config as root and can load…
- CVE-2026-81320Hawtio-operator: hawtio-operator: tls private key written to operator log at debug level
- CVE-2026-81303Hawtio-operator: hawtio-operator: routes/custom-host confused-deputy via spec.routehostname