Red Hat vulnerabilities
2,567 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-16461Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting
- CVE-2026-59844Libssh: libssh: denial of service via oversized sftp read length
- CVE-2026-59845Libssh: libssh: denial of service via unchecked proxycommand fork() failure
- CVE-2026-59843Libssh: libssh: denial of service via zero advertised channel packet size
- CVE-2026-59842Libssh: libssh: information disclosure via short gssapi curve25519 public key
- CVE-2026-15370Libssh: libssh: stack buffer overflow in sftp server longname construction
- CVE-2026-15811Kronosnet: kronosnet: encryption key exposure in memory after cryptographic configuration changes
- CVE-2026-15812Kronosnet: kronosnet: access control list bypass via link id spoofing on unencrypted dynamic links
- CVE-2026-15927Quay: mirror-registry: ssrf: repo-level mirror accepts external_reference without url validation
- CVE-2026-64612Libcupsfilters: cups-filters: libcupsfilters: cups image filter process abort via malformed png
- CVE-2026-12701Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport
- CVE-2026-16277Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist()
- CVE-2026-12080Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys
- CVE-2026-15588Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering
- CVE-2026-16254Claircore: claircore: denial of service via out-of-bounds slice in claircore's apk installed-database parser
- CVE-2026-15813Kronosnet: kronosnet: memory corruption and out-of-bounds access via malformed network packet defragmentation
- CVE-2026-16242Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates
- CVE-2026-16118Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c
- CVE-2026-16104Keycloak-services: keycloak-services: authenticator config endpoint exposes raw recaptcha secrets to view-only admins
- CVE-2026-16103Keycloak-services: keycloak-services: incomplete fix for ciba brute-force lockout bypass at token redemption
- CVE-2026-16106Keycloak-services: keycloak-services: incorrect authorization in admin role-composite deletion allows delegated admin to remove privileged child roles
- CVE-2026-16108Keycloak-services: keycloak-services: realm default-group reads disclose hidden groups under fgap v2
- CVE-2026-16093Keycloak-services: keycloak-services: required signed-jwt assertion policy can be bypassed with unsigned assertion headers
- CVE-2026-16089Keycloak-services: keycloak-services: authorization codes can be retargeted to another client session
- CVE-2026-16072Keycloak-services: keycloak-services: organization invitation link exposure allows unauthorized member creation
- CVE-2026-15943Keycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url change
- CVE-2026-15945Keycloak-services: keycloak-services: group hierarchy search discloses hidden parent groups under fgap v2
- CVE-2026-5674Pipewire: pipewire: sandbox escape and arbitrary code execution via malicious library loading
- CVE-2026-48863Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service
- CVE-2026-1609Org.keycloak/keycloak-quarkus-server: keycloak: unauthorized access via jwt authorization grant with disabled users