Red Hat CVEs
2,568 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-42012Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans
- CVE-2026-5260Gnutls: gnutls: information disclosure via heap overread in rsa key exchange
- CVE-2026-48864Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
- CVE-2026-4480Samba: samba: remote code execution in printing subsystem via unescaped job description
- CVE-2026-7374Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability
- CVE-2026-9149Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file
- CVE-2026-9150Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums
- CVE-2026-9087Keycloak: cross-session email verification proof not bound to upstream identity in first-broker-login
- CVE-2026-9064389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)
- CVE-2026-7571Keycloak: keycloak: access token disclosure and implicit flow bypass via forged client data
- CVE-2026-7507Org.keycloak/keycloak-services: session fixation in oidc login flow that can lead to account takeover
- CVE-2026-7504Org.keycloak/keycloak-services: open redirect when using wildcard valid redirect uris in keycloak
- CVE-2026-37982Keycloak: org.keycloak.authentication: keycloak: unauthorized account takeover via webauthn token replay
- CVE-2026-37979Keycloak: keycloak: information disclosure via oidc token introspection endpoint audience bypass
- CVE-2026-37978Keycloak: org.keycloak.services: keycloak: information disclosure via evaluate-scopes admin api
- CVE-2026-7307Keycloak: keycloak: denial of service via specially crafted saml input
- CVE-2026-37981Keycloak: org.keycloak.authorization: keycloak: information disclosure via broken access control in user lookup endpoint
- CVE-2026-4630Keycloak: keycloak: unauthorized resource access and data modification via insecure direct object reference
- CVE-2026-8922Org.keycloak/keycloak-services: keycloak: org.keycloak.protocol.oidc: security flaw in org.keycloak/keycloak-services
- CVE-2026-8830Keycloak: org.keycloak/keycloak-services: keycloak: policy bypass during webauthn credential registration via client-side javascript manipulation
- CVE-2026-42009Gnutls: gnutls: denial of service via dtls packet reordering vulnerability
- CVE-2026-4802Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui
- CVE-2026-42011Gnutls: gnutls: security bypass due to incorrect name constraint handling
- CVE-2026-42010Gnutls: gnutls: authentication bypass via nul character in username
- CVE-2026-6420Keylime: keylime: security bypass due to hardcoded tpm quote nonce
- CVE-2026-34956Openvswitch: open vswitch: denial of service via malformed ftp epasv command
- CVE-2026-34002Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling
- CVE-2026-34000Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.
- CVE-2026-6266Aap-controller: aap-gateway: account hijacking and unauthorized access via unverified email linking
- CVE-2026-33846Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly