Red Hat vulnerabilities
2,566 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-121611Gstreamer1-plugins-bad-free: gst-plugins-bad: use of uninitialized gsth265hrdparams in gst_h265_parse_vps() multi-hrd workaround loop
- CVE-2026-121601Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds read in mxfdemux via unchecked delta_id and slice index
- CVE-2026-119610Gstreamer1-plugins-good: gstreamer1-plugins-good: out-of-bounds heap read in mtap16/mtap24 h.264 rtp depayloader via signed/unsigned…
- CVE-2026-121629Gst-plugins-good: gst-plugins-good: local file disclosure via unvalidated file:// uris in adaptivedemux2 manifest handling
- CVE-2026-120984Keycloak-services: keycloak-services: manage-clients to arbitrary code execution through inline javascript policy import
- CVE-2026-83495Trainer: trainer: trainjob env passthrough enables valuefrom.secretkeyref injection for namespace secret exfiltration
- CVE-2026-50240Pipelines-as-code: openshift-pipelines-operator-rh: pipelines-as-code: repository users can trigger namespace edit-equivalent execution…
- CVE-2026-123876Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation
- CVE-2026-120749Dbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored bus
- CVE-2026-83494Training-operator: pytorchjob validateupdate casts oldjob from newobj, bypassing managedby immutability (asvs v5.1.3; upstream bug)
- CVE-2026-83493Distributed-workloads: github actions pinned by mutable tag/branch, including third-party snyk/actions/setup@master
- CVE-2026-9797Keycloak: keycloak: privilege escalation via client authentication manipulation by an authenticated administrator
- CVE-2026-97848Keycloak-services: keycloak-services: protocol mapper with jsontype=json bypasses token sanitization
- CVE-2026-97367Keycloak-services: keycloak-services: dcr azp and sid claim substitution allows account rest session takeover
- CVE-2026-96547Keycloak-services: keycloak-services: dcr registration-time claim-path gap allows forging realm_access.roles
- CVE-2026-96460Keycloak-services: keycloak-services: indefinite access token renewal via standard token exchange v2
- CVE-2026-92856Keycloak-services: keycloak-services: saml broker ignores proxyrestriction delegation constraints
- CVE-2026-19688Keycloak-services: keycloak-services: admin api missing audience check
- CVE-2026-96447Keycloak-services: keycloak-services: stateless token preferred_username fallback enables identity rebinding
- CVE-2026-109081Keycloak-services: keycloak-services: injection of roles into realm default-roles via dcr endpoint
- CVE-2026-107124Keycloak-services: keycloak-services: oidc logout endpoint session fixation via id_token_hint leading to account takeover
- CVE-2026-121837Quarkus-rest-data-panache: quarkus-rest-data-panache: getter-level @securefield ignored for filter and sort
- CVE-2026-123037Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)
- CVE-2026-97847Keycloak-services: keycloak-services: client manager can substitute sessionless token principal via hardcoded-claim mappers to obtain…
- CVE-2026-97175Keycloak-services: keycloak-services: unverified idp email auto-linking enables account takeover
- CVE-2026-97174Keycloak-services: keycloak-services: ciba sub parameter injection causes attacker authentication to issue victim tokens
- CVE-2026-96453Org.keycloak/keycloak-admin-cli: keycloak-admin-cli: kcadm custom truststore accepts arbitrary self-signed certificates
- CVE-2026-93998Keycloak-core: keycloak-core: saml adapter does not bind signed assertions to the configured identity provider issuer
- CVE-2026-92857Keycloak-services: keycloak-services: dcr protocol mapper config not validated, allowing iat holders to forge sub and aud claims in signed…
- CVE-2026-92855Keycloak-services: keycloak-services: saml broker accepts holder-of-key assertions without proof of key possession