Red Hat

Records7413All Threatist records

Exploited (KEV)98In CISA KEV

CVSS critical792CVSS 9.0–10.0

CVSS high2681CVSS 7.0–8.9

Exploited now

Red Hat records in CISA KEV

TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability CRITICAL 93KEV 2026-10-28 TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2026-35991 Kludex Starlette HTTP Request/Response Smuggling Vulnerability CRITICAL 86KEV 2026-09-02 TI-2015-02874 Red Hat Libuser Race Condition Vulnerability CRITICAL 92KEV 2026-08-26 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-26741 Apache Tomcat Missing Encryption of Sensitive Data Vulnerability CRITICAL 90KEV 2026-08-04

Components

Products in the NVD configurations · select one to filter the records

Enterprise Linux 1956 records CRITICAL Enterprise Linux Desktop 1928 records CRITICAL Enterprise Linux Server 1891 records CRITICAL Enterprise Linux Workstation 1845 records CRITICAL Enterprise Linux Server Aus 1061 records CRITICAL Enterprise Linux Eus 796 records CRITICAL Enterprise Linux Server Tus 770 records CRITICAL Enterprise Linux Server Eus 622 records CRITICAL

Records

8 records in Openshift Update Service · all components

TI-2026-52030 CVE-2026-74243 · GHSA-vxqv-j38r-6jmm

Quay: unauthenticated secscan notification endpoint in quay when psk is unset

MEDIUM 42

A flaw was found in Red Hat Quay.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00463 Published 2026-08-14 Fix deferred CWE-306

TI-2026-52032 CVE-2026-74245 · GHSA-jr6g-vw27-98vc

Quay: unauthenticated exported logs download in quay

LOW 33

A flaw was found in Red Hat Quay's exported logs feature.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00418 Published 2026-08-14 No fix listed CWE-306

TI-2026-52031 CVE-2026-74244 · GHSA-fgq8-mwjv-6335

Quay: stripe webhook accepts forged events without signature verification in quay

LOW 32

A flaw was found in Red Hat Quay's Stripe billing webhook handler.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0023 Published 2026-08-14 Fix deferred CWE-347

TI-2026-52033 CVE-2026-74247 · GHSA-rg7f-fcx2-cjw3

Quay: ssrf via build archive_url in quay build api

LOW 31

A flaw was found in Red Hat Quay.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00245 Published 2026-08-14 Fix deferred CWE-918

TI-2026-52028 CVE-2026-74241 · GHSA-x5cw-v6mp-3p93

Quay: ldap referral filter injection in quay external ldap authentication

LOW 29

A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP) authentication handling.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0031 Published 2026-08-14 Fix deferred CWE-90

TI-2025-35723 CVE-2025-57854 · GHSA-28p4-crp9-2q2x

Osus-operator: privilege escalation via excessive /etc/passwd permissions

LOW 29

A container privilege escalation flaw was found in certain OpenShift Update Service (OSUS) images.

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.00151 Published 2026-04-08 No fix listed CWE-276

TI-2026-52029 CVE-2026-74242 · GHSA-9hvx-vhh3-2359

Quay: repository notification uuid idor in quay api

LOW 24

A flaw was found in Red Hat Quay.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00334 Published 2026-08-14 Fix deferred CWE-639

TI-2026-52027 CVE-2026-74240 · GHSA-3vf7-35c7-wgcv

Quay: jwt claim validation bypasses in quay federated robot and sso authentication

LOW 24

A flaw was found in Red Hat Quay's JWT (JSON Web Token) validation for federated robot accounts and single sign-on (SSO) authentication.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00292 Published 2026-08-14 No fix listed CWE-287

Open these records in search →

Critical	792
High	2681
Medium	3429
Low	509
No CVSS	2