Red Hat CVEs
2,570 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-9820Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function
- CVE-2025-9615Networkmanager: networkmanager file access
- CVE-2026-1190Org.keycloak/keycloak-services: keycloak saml brokering: response delay due to unchecked notonorafter in subjectconfirmationdata
- CVE-2026-0810Gix-date: gix-date: undefined behavior due to invalid string generation
- CVE-2025-14525Kubevirt: kubevirt: vm administration denial of service via guest agent
- CVE-2025-14969Hibernate-reactive-core: hibernate reactive: denial of service due to connection leak on http client disconnect
- CVE-2025-14459Virt-cdi-controller: unauthorized pvc cloning via dataimportcron
- CVE-2025-11065Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure
- CVE-2026-0603Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection
- CVE-2025-14083Keycloak-server: keycloak: improper access control in admin rest api leads to information disclosure
- CVE-2026-0988Glib: glib: denial of service via integer overflow in g_buffered_input_stream_peek()
- CVE-2025-14559Org.keycloak/keycloak-services: keycloak keycloak-services: business logic flaw allows unauthorized token issuance for disabled users
- CVE-2026-1035Org.keycloak.protocol.oidc: keycloak refresh token reuse bypass via toctou race condition
- CVE-2026-1180Org.keycloak.protocol.oidc: blind server-side request forgery (ssrf) in keycloak oidc dynamic client registration via jwks_uri
- CVE-2026-0992Libxml2: libxml2: denial of service via crafted xml catalogs
- CVE-2026-0989Libxml2: unbounded relaxng include recursion leading to stack overflow
- CVE-2026-0990Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing
- CVE-2026-0976Org.keycloak/keycloak-quarkus-server: keycloak: proxy bypass due to improper handling of matrix parameters in url paths
- CVE-2025-14242Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing
- CVE-2026-0716Libsoup: out-of-bounds read in libsoup websocket frame processing
- CVE-2025-12548Github.com/che-incubator/che-code: eclipse che — unauthenticated rce and secret exfiltration via tcp/3333
- CVE-2025-14025Ansible-automation-platform/aap-gateway: aap-gateway: read-only personal access token (pat) bypasses write restrictions
- CVE-2026-0719Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication
- CVE-2026-0707Keycloak: keycloak authorization header parsing leading to potential security control bypass
- CVE-2025-12543Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf
- CVE-2025-11419Keycloak: keycloak tls client-initiated renegotiation denial of service
- CVE-2025-14946Libnbd: libnbd: arbitrary code execution via ssh argument injection through a malicious uri
- CVE-2025-14874Nodemailer: nodemailer: denial of service via crafted email address header
- CVE-2025-14443Ose-openshift-apiserver: openshift api server: server-side request forgery (ssrf) vulnerability in imagestreamimport mechanism
- CVE-2025-14777Keycloak: keycloak idor in realm client creating/deleting