Red Hat CVEs
2,568 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-10533Openshift: openshift: non-admin user can bypass resourcequota and flood etcd with events causing cluster-wide api degradation
- CVE-2026-10101Assisted-service: assisted-service: infraenv status leaks referenced pull-secret contents to namespace view users
- CVE-2026-42965Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation
- CVE-2026-46579Openshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontend
- CVE-2026-10078Quay/config-tool: quay/config-tool: gitlab oauth client_secret exposed in url querystring
- CVE-2026-10052Quay/config-tool: quay/config-tool: ssrf via unfiltered ldap and smtp config validation endpoints
- CVE-2026-6324Libsoup: libsoup: http request smuggling via unsigned to signed conversion error
- CVE-2026-10028Glib-networking: infinite loop in glib-networking gnutls backend allows remote denial of service via circular certificate chain
- CVE-2026-9804Kubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file read
- CVE-2026-4408Samba: remote code execution in samr
- CVE-2026-44604Rpm: command injection in rpmuncompress dountar() via unescaped archive top-level directory name in popen() shell command
- CVE-2026-9802Keycloak: keycloak: unauthorized account access via replayed refresh tokens after cluster restart
- CVE-2026-9803Keycloak: keycloak: denial of service via malformed authorization header
- CVE-2026-9801Keycloak: keycloak: denial of service via malformed ldap password policy response
- CVE-2026-9798Keycloak: keycloak: brute-force protection bypass in ciba flow
- CVE-2026-9796Keycloak: keycloak: privilege escalation via time-of-check to time-of-use (toctou) vulnerability
- CVE-2026-9795Keycloak: keycloak: privilege escalation via improper scope mapping enforcement
- CVE-2026-9794Keycloak: keycloak: information disclosure via saml ecp endpoint
- CVE-2026-9792Keycloak: keycloak: security restriction bypass allows unauthorized ropc token acquisition
- CVE-2026-9793Keycloak: keycloak: security policy bypass in jwe-encrypted request object processing
- CVE-2026-9791Keycloak-rhel9: organization data leak after feature disabled in keycloak
- CVE-2026-9704Keycloak: keycloak: privilege escalation due to oversized subject_token jwt
- CVE-2026-1933Samba: missing access check on reparse point operations
- CVE-2026-2340Samba: vfs_worm does not block directory modification
- CVE-2026-9689Keycloak: org.keycloak.protocol.oidc: http parameter pollution in oidc redirect uri allows response parameter duplication - #ghi-604
- CVE-2026-3012Samba: group policy certificate enrollment uses http:// without validation
- CVE-2026-42015Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling
- CVE-2026-42013Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name
- CVE-2026-42012Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans
- CVE-2026-5260Gnutls: gnutls: information disclosure via heap overread in rsa key exchange