Red Hat

Records7414All Threatist records

Exploited (KEV)98In CISA KEV

CVSS critical793CVSS 9.0–10.0

CVSS high2681CVSS 7.0–8.9

Exploited now

Red Hat records in CISA KEV

TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability CRITICAL 93KEV 2026-10-28 TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2026-35991 Kludex Starlette HTTP Request/Response Smuggling Vulnerability CRITICAL 86KEV 2026-09-02 TI-2015-02874 Red Hat Libuser Race Condition Vulnerability CRITICAL 92KEV 2026-08-26 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-26741 Apache Tomcat Missing Encryption of Sensitive Data Vulnerability CRITICAL 90KEV 2026-08-04

Components

Products in the NVD configurations · select one to filter the records

Enterprise Linux 1956 records CRITICAL Enterprise Linux Desktop 1928 records CRITICAL Enterprise Linux Server 1891 records CRITICAL Enterprise Linux Workstation 1845 records CRITICAL Enterprise Linux Server Aus 1061 records CRITICAL Enterprise Linux Eus 796 records CRITICAL Enterprise Linux Server Tus 770 records CRITICAL Enterprise Linux Server Eus 622 records CRITICAL

Records

50 records in Hardened Images · all components

TI-2026-03321 CVE-2026-3833 · GHSA-6rgh-57xm-37v8

Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison

HIGH 72

A flaw was found in gnutls.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00565 Published 2026-04-30 Partial fix · 3.8.13, 3.8.10-4.el10_2 +42 CWE-178

TI-2026-28834 CVE-2026-39979

jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers

HIGH 70

jq is a command-line JSON processor.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0056 Published 2026-04-13 Partial fix · 2f09060afab23fe9390cce7cb860b10416e1bf5f CWE-125

TI-2026-08044 CVE-2026-9149 · GHSA-9q56-xf64-q987

Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file

MEDIUM 62

A flaw was found in libsolv.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00312 Published 2026-05-20 Partial fix · 0.7.33-5.el10_2, 0.7.29-8.el10_0.1 +1 CWE-122

TI-2026-08132 CVE-2026-9256 · GHSA-h78r-86c6-jgp4

NGINX ngx_http_rewrite_module vulnerability

MEDIUM 55

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.10856 Published 2026-05-22 Partial fix · 37.0.1.1, R36 P5 +3 CWE-122

TI-2026-30432 CVE-2026-42055 · GHSA-78jw-ww3g-9wp7

NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability

MEDIUM 51

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.06537 Published 2026-06-17 Fixed in 1.31.2, 1.30.3 +2 CWE-122

TI-2026-04471 CVE-2026-5121 · GHSA-2vwv-vqpv-v8vc

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

MEDIUM 51

A flaw was found in libarchive.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01092 Published 2026-03-30 Partial fix · 3.1.2-14.el7_9.2, 3.3.3-7.el8_10 +51 CWE-190

TI-2026-03320 CVE-2026-3832 · GHSA-3rqj-4qqw-jgwr

Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response

MEDIUM 51

A flaw was found in gnutls.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00804 Published 2026-04-30 Partial fix · 3.8.13, 3.8.10-4.el10_2 +22 CWE-179

TI-2026-30398 CVE-2026-42010 · GHSA-m3r7-xjq8-gc4r

Gnutls: gnutls: authentication bypass via nul character in username

MEDIUM 44

A flaw was found in gnutls.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0105 Published 2026-05-07 Partial fix · 3.8.13, 3.8.10-4.el10_2 +47 CWE-170

TI-2026-00732 CVE-2026-0966 · GHSA-wcqf-w94x-4wg2

Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()

MEDIUM 43

A flaw was found in libssh.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00604 Published 2026-03-26 Partial fix · 0.12.0-2.el10, 0.10.4-18.el9 +1 CWE-124

TI-2026-30397 CVE-2026-42009 · GHSA-9gx7-g5hv-xjjj

Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

MEDIUM 42

A flaw was found in gnutls.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01335 Published 2026-05-18 Partial fix · 3.8.13, 3.8.10-4.el10_2 +48 CWE-475

TI-2026-01271 CVE-2026-1584 · GHSA-92xv-mw29-x4px

Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder

MEDIUM 42

A flaw was found in gnutls.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01374 Published 2026-04-09 Fixed in 3.8.12-1.1.hum1 CWE-476

TI-2026-42667 CVE-2026-59851 · GHSA-x5cr-v39m-53gw

Libssh: libssh: authentication bypass via missing gssapi principal check

MEDIUM 41

A flaw was found in libssh.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00489 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.12.1-4.hum1 CWE-863

TI-2026-03838 CVE-2026-4424 · GHSA-c75f-55f6-f63q

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

MEDIUM 41

A flaw was found in libarchive.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01287 Published 2026-03-19 Partial fix · 3.7.7-8.el10_1, 3.7.7-5.el10_0 +54 CWE-125

TI-2026-01754 CVE-2026-2100 · GHSA-hq85-3f6c-jx84

P11-kit: null dereference via c_derivekey with specific null parameters

MEDIUM 41

A flaw was found in p11-kit.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01311 Published 2026-03-26 Partial fix · 0.26.2, 0.26.2-1.el10 +21 CWE-824

TI-2026-42663 CVE-2026-59847 · GHSA-mq2j-7vq4-77m8

Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification

LOW 39

A flaw was found in libssh.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00332 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.9.6-17.el8_10 +2 CWE-253

TI-2026-04164 CVE-2026-4775 · GHSA-cm99-m826-vgg7

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

LOW 37

A flaw was found in the libtiff library.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0057 Published 2026-03-24 Partial fix · 4.6.0-6.el10_1.3, 4.6.0-8.el10_2.1 +26 CWE-190

TI-2026-36128 CVE-2026-48864 · GHSA-2927-mfhv-37vh

Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

LOW 35

A flaw was found in libsolv.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2026-05-26 Fixed in 0.7.33-5.el10_2, 0.7.29-8.el10_0.1 +60 CWE-787

TI-2026-06005 CVE-2026-6846 · GHSA-c64w-hpm6-xx8w

Binutils: binutils: arbitrary code execution via malformed xcoff object file processing

LOW 35

A flaw was found in binutils.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00171 Published 2026-04-22 Partial fix · 2.47, 2.45.1-5.1.hum1 +1 CWE-122

TI-2025-13523 CVE-2025-14821 · GHSA-5jf9-8f86-jhvw

Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows

LOW 35

A flaw was found in libssh.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00135 Published 2026-04-07 Fixed in 0.12.0-1.1.hum1 CWE-427

TI-2026-05898 CVE-2026-6732 · GHSA-6rf6-xrp6-223m

Libxml2: libxml2: denial of service via crafted xsd-validated document

LOW 34

A flaw was found in libxml2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00632 Published 2026-04-23 Partial fix · 2.15.3-0.1.hum1 CWE-843

TI-2026-42666 CVE-2026-59850 · GHSA-cr6p-6527-344m

Libssh: libssh: use-after-free via data callbacks on closed channels

LOW 33

A flaw was found in libssh.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00346 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.9.6-17.el8_10 +2 CWE-416

TI-2026-42665 CVE-2026-59849 · GHSA-jp6g-7mqj-wj53

Libssh: libssh: denial of service via automatic certificate authentication loop

LOW 33

A flaw was found in libssh.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00438 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.12.1-4.hum1 CWE-835

TI-2026-12931 CVE-2026-15370 · GHSA-6j7f-8jjp-mm8c

Libssh: libssh: stack buffer overflow in sftp server longname construction

LOW 33

A flaw was found in libssh.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00168 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.12.2-1.hum1 CWE-121

TI-2026-49900 CVE-2026-71226 · GHSA-rg4h-x337-qh8m

Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path

LOW 31

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers.

CVSS 3.1HIGH 7.3 Local No auth No interaction EPSS 0.00147 Published 2026-08-05 Partial fix · 1.5.1, 1.5.1-1.el10_2 +7 CWE-416

TI-2026-42664 CVE-2026-59848 · GHSA-4h4r-q9xg-gfmm

Libssh: libssh: denial of service via sftp responses with unknown request ids

LOW 30

A flaw was found in libssh.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00341 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.9.6-17.el8_10 +2 CWE-770

Open these records in search →

Critical	793
High	2681
Medium	3429
Low	509
No CVSS	2