Red Hat CVEs
2,570 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-3121Keycloak: org.keycloak/keycloak-services: keycloak: privilege escalation via manage-clients permission
- CVE-2026-3190Keycloak: keycloak: information disclosure via improper role enforcement in uma 2.0 protection api
- CVE-2026-4897Polkit: polkit: denial of service via unbounded input processing through standard input
- CVE-2026-1961Forman: foreman: remote code execution via command injection in websocket proxy
- CVE-2026-4887Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image
- CVE-2026-4874Org.keycloak.protocol.oidc.grants: org.keycloak.services.managers: keycloak: server-side request forgery via oidc token endpoint manipulation
- CVE-2026-4775Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing
- CVE-2026-1940Gstreamer: incomplete fix of cve-2026-1940
- CVE-2026-4647Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library
- CVE-2026-4633Keycloak: keycloak: user enumeration via differential error messages
- CVE-2026-4628Keycloak: org.keycloak.authorization: keycloak: unauthorized resource modification due to improper access control
- CVE-2026-23536Feast: unauthenticated arbitrary file read
- CVE-2026-2369Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources
- CVE-2026-4426Libarchive: libarchive: denial of service via malformed iso file processing
- CVE-2026-4424Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing
- CVE-2026-4366Keycloak-services: blind server-side request forgery (ssrf) via http redirect handling in keycloak
- CVE-2026-2575Keycloak: keycloak: denial of service due to excessive samlrequest decompression
- CVE-2026-2603Keycloak: keycloak: unauthorized authentication via disabled saml identity provider
- CVE-2026-2092Keycloak-services: keycloak: unauthorized access via improper validation of encrypted saml assertions
- CVE-2026-4324Rubygem-katello: katello: denial of service and potential information disclosure via sql injection
- CVE-2026-4271Libsoup: libsoup: denial of service via use-after-free in http/2 server
- CVE-2026-3633Libsoup: libsoup: header and http request injection via crlf injection
- CVE-2026-3632Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames
- CVE-2026-3634Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header
- CVE-2026-3441Binutils: gnu binutils: information disclosure via specially crafted xcoff object file
- CVE-2026-3442Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker
- CVE-2026-4111Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive
- CVE-2026-4105Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method
- CVE-2025-57849Fuse: privilege escalation via excessive /etc/passwd permissions
- CVE-2025-8766Noobaa-core: excessive permissions of /etc could lead to escalation of privilege in the noobaa-core container