Red Hat vulnerabilities
2,566 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-110036Device-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indices
- CVE-2026-88834Busybox: busybox: httpd user existence oracle in non-default shadow-disabled builds
- CVE-2026-88838Busybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictions
- CVE-2026-88833Busybox: busybox: udhcpc integer underflow in dhcp packet length calculation causes denial of service
- CVE-2026-105460Bluez: bluez: stack-based out-of-bounds read in btmon via unvalidated num_keys in return_link_keys_evt()
- CVE-2026-109976Clevis: clevis: integer underflow in pkcs#11 data socket handler crashes daemon on unbound client connection
- CVE-2026-109833Gnome-remote-desktop: heap buffer overflow in gnome-remote-desktop vnc tls peek buffer handling allows remote denial of service
- CVE-2026-109832Gnome-remote-desktop: busy-wait dos in vnc tls i/o handlers (gnutls_e_again / gnutls_e_interrupted)
- CVE-2026-109854M17n-lib: uninitialized stack read in iso-2022 compound text utf-8 decoding
- CVE-2026-83535Openstack-network-exporter: basic-auth uses plaintext password storage and non-constant-time comparison
- CVE-2026-83536Openstack-network-exporter: http.server has no readheadertimeout / readtimeout (slowloris)
- CVE-2026-85471Quay: quay: webhook notification ssrf -- hostname-string blocklist trivially bypassable
- CVE-2026-87744Io.quarkus:quarkus-hibernate-orm-rest-data-panache: missing authorization in quarkus rest data panache via dropped security annotations
- CVE-2026-75888Openshift/console: openshift/console: authenticated ssrf via helm chart url fetch
- CVE-2026-94451Quarkus-hibernate-orm-rest-data-panache: quarkus-hibernate-orm-rest-data-panache: information disclosure and dos via unvalidated sort parameter in rest data panache
- CVE-2026-109195Quay: repository auto-prune policy uuid idor in quay api
- CVE-2026-109194Quay: build trigger uuid idor in quay api
- CVE-2026-108094Mutter: mutter: client-triggered use-after-free in wayland color-management icc image description path
- CVE-2026-52903YAML safe_load production fallback to unsafe_load enables RCE via deserialization
- CVE-2026-109082Keycloak-services: keycloak-services: ciba confidential-only contract not enforced for public clients
- CVE-2026-107203Foreman: domain and subnet interface api skips host search filters
- CVE-2026-107193Foreman: api filter lookup ignores a search-limited filter permission
- CVE-2026-108119Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix
- CVE-2026-108093Gimp: gimp: denial of service via null pointer dereference in xcf simulation parasite loading
- CVE-2026-108063Libhangul: null pointer dereference in hanja_new() when looking up a malformed hanja dictionary entry
- CVE-2026-107935Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose
- CVE-2026-107655Cups: null pointer dereference via embedded job ticket comments allows remote denial of service
- CVE-2026-107889Keycloak-services: keycloak-services: stored xss on login page via kcsanitize bypass
- CVE-2026-107651Eog: eog: arbitrary code execution via heap buffer overflow in png metadata reader
- CVE-2026-89091Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution