TI-2026-38567 CVE-2026-53488 · GHSA-xhf5-7wjv-pqxp
Improper input validation in backstage containerd
Priority MEDIUM 42
containerd is an open-source container runtime.
RHSA-2026:94562
Red Hat OpenShift for Windows Containers 11.0 product release
Released 2026-11-03 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat OpenShift for Windows Containers 11.0 registry.redhat.io/openshift4-wincw/windows-machine-config-rhel9-operator
Fixes 5 records
TI-2026-39026 CVE-2026-54099 · GHSA-x82v-328r-gf3h
Improper privilege management in Red Hat OpenShift for Windows Containers 10.19
Priority LOW 39
A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform.
TI-2026-79000 CVE-2026-114406 · GHSA-jrx5-4fv3-4mcq
Red Hat system CA store trusts weak eMudhra intermediate certificates
Priority LOW 32
The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak pr…
Priority LOW 32
On most platforms, Go uses the given system root certificates.
TI-2026-80961 CVE-2026-76654 · GHSA-fvcc-576m-9wv4
NTLM coercion via subPath symlinks on Windows Kubernetes nodes
Priority LOW 26
An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a symbolic link that points to an attacker-controlled network share.