Red Hat vulnerabilities
2,566 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-109131Ansible-ui: ansible-ui: stored xss via unsafe javascript url scheme in hub collection module documentation (formatparturl)
- CVE-2026-108334Github.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-management/rhcl-operator-product-build/kuadrant-operator…
- CVE-2026-85634Wildfly-core: wildfly-core: deployer rbac role privilege escalation via path traversal in deployment name
- CVE-2026-92982Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection
- CVE-2026-110777Evolution-data-server: local file disclosure via attach file:// uris
- CVE-2026-86849Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto
- CVE-2026-86856Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver
- CVE-2026-86847Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup
- CVE-2026-86846Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto
- CVE-2026-86845Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup
- CVE-2026-86566Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings)
- CVE-2026-86848Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto
- CVE-2026-86567Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap
- CVE-2026-100236Dpdk: dpdk: heap out-of-bounds read/write in gso header copy
- CVE-2026-86565Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write
- CVE-2026-86563Dpdk: dpdk: double offset bug in vhost log mapping calculation
- CVE-2026-86562Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)
- CVE-2026-86561Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup
- CVE-2026-93683Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou
- CVE-2026-109968Clevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable file
- CVE-2026-104795Insights-runtime-extractor: insights-runtime-extractor: container escape via privileged binary execution
- CVE-2026-100229Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds write in gst_h266_parser_parse_dci() due to off-by-one array bound…
- CVE-2026-88842Busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruption
- CVE-2026-109971Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-tool
- CVE-2026-109970Clevis: clevis: pkcs#11 token pin written to world-readable file
- CVE-2026-109969Clevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umask
- CVE-2026-100231Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect utf-16 size calculation for…
- CVE-2026-88829Busybox: busybox: http request smuggling via pipelined requests in httpd reverse proxy
- CVE-2026-90954Busybox: busybox: dpkg-deb extraction-root escape via per-ar-member deferred symlink flush
- CVE-2026-86476Gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and…