[ Vendor · 330 CVEs ]
Red Hat
CVEs affecting Red Hat published in the last 30 days, plus any Red Hat CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-76561 | 8 Sep 2026 | CVSS 7.2 | Red Hat Enterprise Linux 10A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully… | |
| CVE-2026-79678 | 7 Sep 2026 | CVSS 8.1 | Red Hat Enterprise Linux 10A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call… | |
| CVE-2026-76578 | 7 Sep 2026 | CVSS 9.8 | Red Hat Enterprise Linux 10A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not restrict which attributes may be added… | |
| CVE-2026-84268 | 1 Sep 2026 | CVSS 8.8 | GNOME gvfsA flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause read_reply() to process a… | |
| CVE-2026-13732 | 31 Aug 2026 | CVSS 7.0 | Red Hat Enterprise Linux 10A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in… | |
| CVE-2026-17615 | 31 Aug 2026 | CVSS 7.5 | Red Hat Build of Apache Camel 3.33.3.SP1A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read… | |
| CVE-2026-11861 | 20 Aug 2026 | CVSS 9.6 | Red Hat Enterprise Linux 10A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass… | |
| CVE-2026-73198 | 20 Aug 2026 | CVSS 7.5 | Red Hat Enterprise Linux 10A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the `/ipa/i18n_messages` endpoint by sending an… | |
| CVE-2026-13097 | 20 Aug 2026 | CVSS 8.7 | Red Hat Enterprise Linux 10A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory… | |
| CVE-2026-73197 | 20 Aug 2026 | CVSS 7.5 | Red Hat Enterprise Linux 10A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the… | |
| CVE-2026-19730 | 13 Aug 2026 | CVSS 4.2 | podman quadlet install --replace does not fully replace the old fileThe 'podman quadlet install --replace' command opens the existing destination file with O_CREATE|O_WRONLY but omits O_TRUNC. When the initial reflink… | Fix |
| CVE-2026-19550 | 11 Aug 2026 | CVSS 8.2 | Red Hat Enterprise Linux 10A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather than a… | |
| CVE-2026-11837 | 10 Jun 2026 | CVSS 7.3 | Red Hat Enterprise Linux 10.0 Extended Update SupportA local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module's keyfile() function uses os.chown()… | |
| CVE-2026-48710 | 26 May 2026 | CVSS 6.5 | Kludex Starlette HTTP Request/Response SmugglingStarlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to… | ExploitedFix |
| CVE-2026-42271 | 8 May 2026 | CVSS 8.8 | BerriAI LiteLLM Command InjectionLiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints… | ExploitedFix |
| CVE-2026-42208 | 8 May 2026 | CVSS 9.8 | BerriAI LiteLLM SQL InjectionLiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before version 1.83.7, a database query… | ExploitedFix |
| CVE-2026-31431 | 22 Apr 2026 | CVSS 7.8 | Linux Kernel Incorrect Resource Transfer Between SpheresIn the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit… | ExploitedFix |
| CVE-2026-34486 | 9 Apr 2026 | CVSS 7.5 | Apache Tomcat Missing Encryption of Sensitive DataMissing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor… | Exploited |
| CVE-2026-34197 | 7 Apr 2026 | CVSS 8.8 | Apache ActiveMQ Improper Input ValidationImproper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache… | Exploited |
| CVE-2025-31277 | 30 Jul 2025 | CVSS 8.8 | Apple Multiple Products Buffer OverflowThe issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6… | Exploited |
| CVE-2023-4911 | 3 Oct 2023 | CVSS 7.8 | GNU C Library Buffer OverflowA buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue… | ExploitedFix |
| CVE-2021-3560 | 16 Feb 2022 | CVSS 7.8 | Red Hat Polkit Incorrect AuthorizationIt was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the… | ExploitedFix |
| CVE-2021-4034 | 28 Jan 2022 | CVSS 7.8 | Red Hat Polkit Out-of-Bounds Read and WriteA local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow… | ExploitedFix |
| CVE-2018-14667 | 6 Nov 2018 | CVSS 9.8 | Red Hat JBoss RichFaces Framework Expression Language InjectionThe RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote… | Exploited |
| CVE-2017-12149 | 4 Oct 2017 | CVSS 9.8 | Red Hat JBoss Application Server Remote Code ExecutionIn Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the… | Exploited |
| CVE-2015-5287 | 7 Dec 2015 | CVSS 7.8 | Red Hat Automatic Bug Reporting Tool Privilege EscalationThe abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges… | ExploitedFix |
| CVE-2015-3246 | 11 Aug 2015 | CVSS 7.4 | Red Hat Libuser Race Conditionlibuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which… | Exploited |
| CVE-2010-1871 | 5 Aug 2010 | CVSS 8.8 | Red Hat Linux JBoss Seam 2 Remote Code ExecutionJBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss… | Exploited |
| CVE-2010-0738 | 28 Apr 2010 | CVSS 5.3 | Red Hat JBoss Authentication BypassThe JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3… | Exploited |
| CVE-2010-1428 | 28 Apr 2010 | CVSS 7.5 | Red Hat JBoss Information DisclosureThe Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3… | Exploited |
Page 4 of 4