Red Hat CVEs
2,570 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-4111Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive
- CVE-2026-4105Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method
- CVE-2025-57849Fuse: privilege escalation via excessive /etc/passwd permissions
- CVE-2025-8766Noobaa-core: excessive permissions of /etc could lead to escalation of privilege in the noobaa-core container
- CVE-2026-2376Mirror-registry: quay: quay: server-side request forgery via open redirect vulnerability in web interface
- CVE-2026-3099Libsoup: libsoup: authentication bypass via digest authentication replay attack
- CVE-2026-2366Keycloak: keycloak: information disclosure via authorization bypass in admin api
- CVE-2026-3234Mod_proxy_cluster: mod_proxy_cluster: response body corruption via crlf injection
- CVE-2026-3429Org.keycloak.services.resources.account: improper access control leading to mfa deletion and account takeover in keycloak account rest api
- CVE-2026-3911Org.keycloak.services.resources.admin.userresource: keycloak: information disclosure of disabled user attributes via administrative endpoint
- CVE-2026-3047Org.keycloak.broker.saml: keycloak saml broker: authentication bypass due to disabled saml client completing idp-initiated login
- CVE-2026-3009Org.keycloak/keycloak-services: improper enforcement of disabled identity provider in identitybrokerservice (authentication bypass)
- CVE-2025-12801Nfs-utils: rpc.mountd in the nfs-utils privilege escalation
- CVE-2025-10990Rexml: rexml: denial of service via inefficient regex parsing
- CVE-2025-12150Org.keycloak/keycloak-services: webauthn attestation statement verification bypass
- CVE-2026-0980Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username
- CVE-2026-0871Org.keycloak/keycloak-services: keycloak: unauthorized modification of unmanaged user attributes by administrators
- CVE-2025-13327Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials
- CVE-2025-9909Aap-gateway: improper path validation in gateway allows credential exfiltration
- CVE-2025-9908Event-driven-ansible: sensitive internal headers disclosure in aap eda event streams
- CVE-2025-9907Event-driven-ansible: event stream test mode exposes sensitive headers in aap eda
- CVE-2025-9572Foreman: satellite: graphql api permission bypass leads to information disclosure
- CVE-2026-28295Gvfs: gvfs ftp backend: information disclosure via untrusted pasv responses
- CVE-2026-28296Gvfs: ftp gvfs backend: arbitrary ftp command injection via crlf sequences in file paths
- CVE-2026-3118Rhdh: graphql injection leading to platform-wide denial of service (dos) in rh developer hub orchestrator plugin
- CVE-2026-26104Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus api
- CVE-2026-26103Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api
- CVE-2025-14905389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow
- CVE-2026-2243Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing
- CVE-2026-2733Org.keycloak/keycloak-services: keycloak: missing check on disabled client for docker registry protocol