[ Vendor · 330 CVEs ]
Red Hat
CVEs affecting Red Hat published in the last 30 days, plus any Red Hat CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-108093 | 9 Oct 2026 | CVSS 5.5 | Red Hat Enterprise Linux 10A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite data is… | |
| CVE-2026-108119 | 9 Oct 2026 | CVSS 6.3 | Red Hat Hardened ImagesA flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsafe-looking targets does not… | |
| CVE-2026-108063 | 9 Oct 2026 | CVSS 5.5 | Red Hat Enterprise Linux 10A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its… | |
| CVE-2026-107935 | 9 Oct 2026 | CVSS 9.3 | Red Hat Build of Podman DesktopA path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated… | |
| CVE-2026-107655 | 9 Oct 2026 | CVSS 4.0 | Red Hat Hardened ImagesA flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes… | |
| CVE-2026-107889 | 9 Oct 2026 | CVSS 5.5 | Red Hat Build of KeycloakA flaw was found in the login theme rendering component of Keycloak. The issue occurs because the security filter responsible for cleaning user input… | |
| CVE-2026-107651 | 8 Oct 2026 | CVSS 5.5 | Red Hat Enterprise Linux 6A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing… | |
| CVE-2026-89091 | 8 Oct 2026 | CVSS 8.8 | Red Hat Migration Toolkit for Applications 8A flaw was found in ansible-core. When installing a collection with `ansible-galaxy collection install`, the archive extractor validates member paths… | |
| CVE-2026-93017 | 8 Oct 2026 | CVSS 7.7 | Red Hat OpenShift Container Platform 4.19The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or… | |
| CVE-2026-107623 | 8 Oct 2026 | CVSS 4.3 | Red Hat Build of KeycloakA flaw was found in the OIDC Dynamic Client Registration (DCR) component of Keycloak. A bug in the response serialization causes the backchannel… | |
| CVE-2026-107604 | 8 Oct 2026 | CVSS 4.9 | Red Hat Build of KeycloakA flaw was found in the installation provider and client registration endpoints of the Keycloak identity management service. A realm administrator… | |
| CVE-2026-107565 | 8 Oct 2026 | CVSS 5.1 | Red Hat Enterprise Linux 10A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key… | |
| CVE-2026-107466 | 8 Oct 2026 | CVSS 6.1 | Red Hat Enterprise Linux 10A flaw was found in flatpak-builder. This vulnerability allows an attacker to cause information disclosure by convincing a user or continuous… | |
| CVE-2026-107445 | 8 Oct 2026 | CVSS 5.4 | Red Hat Hardened ImagesA flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when accessing a flatpak remote… | |
| CVE-2026-107444 | 8 Oct 2026 | CVSS 4.3 | Red Hat Hardened ImagesA flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when listing repositories for a… | |
| CVE-2026-107176 | 7 Oct 2026 | CVSS 6.8 | Red Hat OpenShift Container Platform 4A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch… | |
| CVE-2026-107161 | 7 Oct 2026 | CVSS 7.5 | Red Hat Enterprise Linux 10A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin computes the size of the buffer… | |
| CVE-2026-106066 | 7 Oct 2026 | CVSS 6.3 | Red Hat Enterprise Linux 10A heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting very large images, g_malloc() sizing based on overflowing… | |
| CVE-2026-106067 | 7 Oct 2026 | CVSS 6.3 | Red Hat Enterprise Linux 10A heap-based buffer overflow was found in GIMP’s Hot color filter plug-in. For very large images, a pixel buffer is allocated using overflowing… | |
| CVE-2026-106065 | 7 Oct 2026 | CVSS 6.3 | Red Hat Enterprise Linux 10A heap-based buffer overflow was found in GIMP’s PCX export plug-in. For images with extremely large width and height, buffer allocation uses… | |
| CVE-2026-107169 | 7 Oct 2026 | CVSS 6.2 | Red Hat Enterprise Linux 10A flaw was found in m17n-lib. An attacker could provide specially crafted or truncated UTF-8 input to trigger an unhandled null pointer dereference… | |
| CVE-2026-107174 | 7 Oct 2026 | CVSS 6.4 | Red Hat OpenShift ServerlessA flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute… | |
| CVE-2026-107167 | 7 Oct 2026 | CVSS 6.2 | Red Hat Enterprise Linux 10A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state… | |
| CVE-2026-106064 | 7 Oct 2026 | CVSS 6.3 | Red Hat Enterprise Linux 10A heap-based buffer overflow was found in GIMP’s GIF export plug-in. Exporting an image with very large width and height can cause 32-bit overflow… | |
| CVE-2026-107168 | 7 Oct 2026 | CVSS 6.2 | Red Hat Enterprise Linux 10A flaw was found in m17n-lib. By providing crafted input containing an invalid UTF-8 character sequence, an attacker can cause the text parsing… | |
| CVE-2026-107170 | 7 Oct 2026 | CVSS 2.9 | Red Hat Enterprise Linux 10A flaw was found in m17n-lib. A partial failure during library initialization can leave an internal driver pointer uninitialized. Under specific… | |
| CVE-2026-107151 | 7 Oct 2026 | CVSS 5.9 | Red Hat Satellite 6Missing authentication has been found in remote-execution task updates in the smart_proxy_dynflow package. The progress and completion callbacks… | |
| CVE-2026-107121 | 7 Oct 2026 | CVSS 6.5 | Red Hat Build of KeycloakA flaw was found in the SMTP email configuration handling of the keycloak-services component. When the STARTTLS option is enabled, Keycloak fails to… | |
| CVE-2026-103868 | 7 Oct 2026 | CVSS 6.5 | Red Hat Ansible Automation Platform 2A flaw was found in pulp-container when it authenticates to an upstream registry. Basic and bearer credentials from one remote are reused for later… | |
| CVE-2026-103869 | 7 Oct 2026 | CVSS 6.5 | Red Hat Ansible Automation Platform 2A flaw was found in pulp-ansible's bearer-token refresh for collection remotes. The access token is kept in one module-level variable and reused for… | |
| CVE-2026-103870 | 7 Oct 2026 | CVSS 5.0 | Red Hat Satellite 6A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can… | |
| CVE-2026-106061 | 7 Oct 2026 | CVSS 5.5 | Red Hat Enterprise Linux 10A flaw was found in GIMP’s X cursor (XMC) thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it allocates a pixel buffer using… | |
| CVE-2026-106471 | 7 Oct 2026 | CVSS 8.1 | Red Hat Satellite 6A flaw was found in Candlepin. The central authorization filter incorrectly grants access when any one of multiple @Verify-annotated parameters is… | |
| CVE-2026-80048 | 7 Oct 2026 | CVSS 5.5 | Red Hat Enterprise Linux 10A flaw was found in `sssd-kcm`. A local user or process able to connect to the `sssd-kcm` UNIX socket can exploit this vulnerability. By sending a… | |
| CVE-2026-104045 | 6 Oct 2026 | CVSS 4.7 | Red Hat Enterprise Linux 10A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autofs responder between… | |
| CVE-2026-104046 | 6 Oct 2026 | CVSS 6.2 | Red Hat Enterprise Linux 10A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is enabled, pre-authentication requests… | |
| CVE-2026-106062 | 6 Oct 2026 | CVSS 7.8 | Red Hat Enterprise Linux 10A heap-based buffer overflow was found in GIMP’s DirectDraw Surface (DDS) loader. When loading a crafted DDS image, buffer sizes derived from width… | |
| CVE-2026-101258 | 6 Oct 2026 | CVSS 7.8 | Red Hat Enterprise Linux 10A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute… | |
| CVE-2026-76061 | 6 Oct 2026 | CVSS 5.5 | Red Hat OpenShift Container Platform 4A flaw was found in CRI-O's `bind_mount_prefix` handling. When configured with a non-empty `bind_mount_prefix`, a malicious container or local… | |
| CVE-2026-106063 | 6 Oct 2026 | CVSS 6.3 | Red Hat Enterprise Linux 10A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with extremely large width and height, the export path… | |
| CVE-2026-104047 | 6 Oct 2026 | CVSS 5.3 | Red Hat Enterprise Linux 10A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into… | |
| CVE-2026-104048 | 6 Oct 2026 | CVSS 8.1 | Red Hat Enterprise Linux 10A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control (HBAC) rules by stripping… | |
| CVE-2026-83550 | 6 Oct 2026 | CVSS 7.1 | Red Hat Multicluster Global HubA flaw was found in postgres-exporter. Due to the blank import of `net/http/pprof`, debug endpoints are exposed on the unauthenticated metrics… | |
| CVE-2026-106033 | 6 Oct 2026 | CVSS 5.4 | Red Hat Ansible Automation Platform 2A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the Ansible Platform UI due to unvalidated input handling within the application's… | |
| CVE-2026-88252 | 6 Oct 2026 | CVSS 5.5 | Red Hat Enterprise Linux 10A flaw was found in sssd. A local user can cause a Denial of Service (DoS) by exhausting the responder service's available file descriptors (system… | |
| CVE-2026-105305 | 6 Oct 2026 | CVSS 5.4 | Red Hat Build of KeycloakA flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow. This component allows devices with… | |
| CVE-2026-104039 | 6 Oct 2026 | CVSS 4.7 | Red Hat Enterprise Linux 10A flaw was found in SSSD. A local user can cause a denial of service (DoS) by disrupting system authentication services. When handling Generic… | |
| CVE-2026-104040 | 6 Oct 2026 | CVSS 6.1 | Red Hat Enterprise Linux 10A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quotes are not properly escaped… | |
| CVE-2026-104041 | 6 Oct 2026 | CVSS 5.5 | Red Hat Enterprise Linux 10A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the Name Service Switch (NSS)… | |
| CVE-2026-104042 | 6 Oct 2026 | CVSS 5.5 | Red Hat Enterprise Linux 10A flaw was found in sssd. A local attacker can cause a Denial of Service (DoS) by sending a crafted Pluggable Authentication Module (PAM) request… | |
| CVE-2026-104043 | 6 Oct 2026 | CVSS 5.5 | Red Hat Enterprise Linux 10A flaw was found in SSSD. A local attacker with access to the Name Service Switch (NSS) responder UNIX socket can trigger an integer underflow by… | |
| CVE-2026-104044 | 6 Oct 2026 | CVSS 6.2 | Red Hat Enterprise Linux 10A flaw was found in sssd. A local attacker can trigger a Denial of Service (DoS) by sending a specially crafted Pluggable Authentication Module (PAM)… | |
| CVE-2026-92821 | 6 Oct 2026 | CVSS 6.8 | Red Hat Enterprise Linux 10A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP (Lightweight Directory… | |
| CVE-2026-104033 | 6 Oct 2026 | CVSS 5.4 | Red Hat Enterprise Linux 10A flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightweight Directory Access Protocol) shadow attributes, SSSD… | |
| CVE-2026-104034 | 6 Oct 2026 | CVSS 4.7 | Red Hat Enterprise Linux 10A flaw was found in SSSD. A use-after-free vulnerability exists in the Kerberos Credential Manager (KCM) responder during Kerberos ticket-granting… | |
| CVE-2026-104035 | 6 Oct 2026 | CVSS 5.5 | Red Hat Enterprise Linux 10A flaw was found in SSSD. An issue in the Kerberos Credential Manager (KCM) responder allows a local user to cause a Denial of Service (DoS) by… | |
| CVE-2026-104036 | 6 Oct 2026 | CVSS 5.8 | Red Hat Enterprise Linux 10A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination… | |
| CVE-2026-104037 | 6 Oct 2026 | CVSS 5.5 | Red Hat Enterprise Linux 10A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid packet length to the autofs… | |
| CVE-2026-104038 | 6 Oct 2026 | CVSS 5.9 | Red Hat Enterprise Linux 10A flaw was found in sssd. A remote attacker can cause a denial of service (DoS) by submitting a certificate that lacks an expected Security… | |
| CVE-2026-104031 | 6 Oct 2026 | CVSS 5.5 | Red Hat Enterprise Linux 10A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated during successful request processing is… | |
| CVE-2026-104032 | 6 Oct 2026 | CVSS 5.5 | Red Hat Enterprise Linux 10A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing… | |
| CVE-2026-105447 | 5 Oct 2026 | CVSS 5.5 | Red Hat Quay 3A flaw was found in Quay. When handling build trigger requests, the application incorrectly exposes trigger configuration details containing… | |
| CVE-2026-71297 | 5 Oct 2026 | CVSS 5.4 | Red Hat Multicluster Engine for KubernetesA flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client certificate, to bypass authentication… | |
| CVE-2026-71298 | 5 Oct 2026 | CVSS 6.4 | Red Hat Multicluster Engine for KubernetesA flaw was found in maestro. A remote attacker could exploit a SQL injection vulnerability in the `orderBy` query parameter of its REST API list… | |
| CVE-2026-71299 | 5 Oct 2026 | CVSS 6.5 | Red Hat Multicluster Engine for KubernetesA flaw was found in Maestro. Its REST API write endpoints were registered without proper authentication middleware. This allows a remote attacker to… | |
| CVE-2026-104029 | 5 Oct 2026 | CVSS 3.3 | Red Hat Enterprise Linux 10A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the autofs responder UNIX socket… | |
| CVE-2026-104030 | 5 Oct 2026 | CVSS 5.5 | Red Hat Enterprise Linux 10A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a specially crafted passkey… | |
| CVE-2026-105326 | 5 Oct 2026 | CVSS 2.5 | Red Hat Hardened ImagesAn argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that… | |
| CVE-2026-102295 | 5 Oct 2026 | CVSS 5.4 | Red Hat Quay 3A flaw was found in Quay. A cross-site scripting (XSS) vulnerability in the OAuth callback handler allows a remote attacker to execute arbitrary… | |
| CVE-2026-102576 | 5 Oct 2026 | CVSS 4.2 | Red Hat Quay 3A flaw was found in Quay. A remote attacker could trick a user into logging in through a crafted link, resulting in cross-site scripting (XSS)… | |
| CVE-2026-101919 | 5 Oct 2026 | CVSS 8.8 | Red Hat Multicluster Engine for KubernetesA flaw was found in the HyperShift operator. The operator copies user-provided Kubernetes configuration (kubeconfig) secrets directly into the… | |
| CVE-2026-105302 | 5 Oct 2026 | CVSS 5.7 | Red Hat Build of KeycloakA flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does… | |
| CVE-2026-105306 | 5 Oct 2026 | CVSS 6.5 | Red Hat Build of KeycloakA flaw was found in the Dynamic Client Registration flow of the Keycloak identity and access management server. The issue occurs because the… | |
| CVE-2026-104988 | 2 Oct 2026 | CVSS 8.1 | Red Hat Certificate System 10A flaw was found in Dogtag PKI (pki-core). The CMCAuthForEST authentication plugin fails open when an EST fullcmc enrollment request is submitted via… | |
| CVE-2026-94422 | 2 Oct 2026 | CVSS 8.8 | FedoraAn incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering… | |
| CVE-2026-95512 | 2 Oct 2026 | CVSS 5.5 | Red Hat Hardened ImagesA flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into… | |
| CVE-2026-86345 | 2 Oct 2026 | CVSS 9.0 | Red Hat Directory Server 11A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client connection when negotiating StartTLS… | |
| CVE-2026-86344 | 1 Oct 2026 | CVSS 7.5 | Red Hat Directory Server 11A flaw was found in 389-ds-base. An unauthenticated remote attacker can send a complete LDAP operation followed by the first bytes of an incomplete… | |
| CVE-2026-56097 | 1 Oct 2026 | CVSS 6.5 | Red Hat Satellite 6.16 for RHEL 8A flaw was found in rubygem-katello. An SQL injection vulnerability exists in the Red Hat Satellite Katello Registry Proxy. The application fails to… | |
| CVE-2026-56098 | 1 Oct 2026 | CVSS 4.3 | Red Hat Satellite 6.16 for RHEL 8A flaw was found in rubygem-katello. The RegistryProxiesController in Katello contains an authorization bypass vulnerability due to an execution… | |
| CVE-2026-12542 | 1 Oct 2026 | CVSS 7.8 | Red Hat Satellite 6.16 for RHEL 8A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script… | Fix |
| CVE-2026-12545 | 1 Oct 2026 | CVSS 6.7 | Red Hat Satellite 6.16 for RHEL 8A flaw was found in rubygem-hammer_cli. A command injection vulnerability exists in Hammer CLI and the Railties (Ruby on Rails) component distributed… | |
| CVE-2026-103884 | 1 Oct 2026 | CVSS 6.5 | Red Hat Build of KeycloakA flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to… | |
| CVE-2026-96659 | 1 Oct 2026 | CVSS 9.1 | Red Hat Satellite 6.16 for RHEL 8A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information… | Fix |
| CVE-2026-96658 | 1 Oct 2026 | CVSS 8.8 | Red Hat Satellite 6.16 for RHEL 8A flaw was found in Foreman. This vulnerability allows an authenticated remote attacker with low-level read permissions to achieve arbitrary code… | Fix |
| CVE-2026-12540 | 1 Oct 2026 | CVSS 8.2 | Red Hat Satellite 6.16 for RHEL 8A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake errors:fetch_log task. The request_id parameter is passed… | |
| CVE-2026-12541 | 1 Oct 2026 | CVSS 8.2 | Red Hat Satellite 6.16 for RHEL 8A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:import_dump tasks. The application fails… | |
| CVE-2026-12544 | 1 Oct 2026 | CVSS 7.7 | Red Hat Satellite 6.16 for RHEL 8A flaw was found in Foreman. The foreman-rake initialization logic in /usr/share/foreman/config/settings.rb contains a vulnerable code pattern where… | |
| CVE-2026-12405 | 1 Oct 2026 | CVSS 8.8 | Red Hat Satellite 6.16 for RHEL 8A flaw was found in rubygem-foreman_remote_execution. A command injection vulnerability exists in the Red Hat Satellite API… | |
| CVE-2026-12423 | 1 Oct 2026 | CVSS 7.5 | Red Hat Satellite 6.16 for RHEL 8A flaw was found in Foreman. The Red Hat Satellite /unattended/provision API endpoint is vulnerable to an authentication bypass due to a semantic… | |
| CVE-2026-103754 | 1 Oct 2026 | CVSS 5.9 | Red Hat Ansible Automation Platform 2A flaw was found in ansible-runner. The unstream_dir() function, which receives and extracts a streamed zip archive on the worker side of the… | |
| CVE-2026-83589 | 1 Oct 2026 | CVSS 6.1 | Red Hat OpenShift Container Platform 4.18A flaw was found in oauth-proxy. The application fails to properly validate the destination redirect parameter (`rd`) during post-login redirection… | |
| CVE-2026-96577 | 1 Oct 2026 | CVSS 7.1 | Red Hat OpenShift Container Platform 4.18A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all network interfaces without authentication… | |
| CVE-2026-103641 | 1 Oct 2026 | CVSS 5.5 | Red Hat Enterprise Linux 10A flaw was found in GEGL. The Radiance HDR loader reads past the end of a memory-mapped image when an uncompressed scanline is shorter than the width… | |
| CVE-2026-103399 | 30 Sep 2026 | CVSS 5.3 | Red Hat Enterprise Linux 10A flaw was found in SoupServer (libsoup). When an HTTP/1.x client sends a request with Expect: 100-continue and a request body, and SoupServer… | |
| CVE-2026-101295 | 30 Sep 2026 | CVSS 7.3 | Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirroring operator catalogs using either the legacy v1… | |
| CVE-2026-62146 | 30 Sep 2026 | CVSS 7.8 | Red Hat OpenShift Container Platform 4A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrite CRI-O's own reserved sandbox… | |
| CVE-2026-103242 | 30 Sep 2026 | CVSS 7.1 | Red Hat Enterprise Linux 10A heap-based buffer overflow flaw was found in rpm. RPMTAG_FILESIGNATURES in a crafted, unsigned RPM package's main header is declared with the wrong… | |
| CVE-2026-102558 | 29 Sep 2026 | CVSS 8.6 | Red Hat Enterprise Linux 10A flaw was found in libsoup. When max-incoming-payload-size is unlimited (0), SoupWebsocketConnection could grow its incoming GByteArray based on an… | |
| CVE-2026-102559 | 29 Sep 2026 | CVSS 8.6 | Red Hat Enterprise Linux 10A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray… | Fix |
Page 2 of 4