CyberSIXT Search
Vendor

Red Hat

CVEs tracked · all time
44
in CISA KEV · all time
3
articles · since 11 Sep
8
articles · all time
36

8 articles since 11 Sep; 1 CISA notice, marked below the bars.

Show as table
Red Hat: articles per day
Day (UTC)Articles
Fri 18 Sep1
Tue 22 Sep1
Thu 24 Sep1
Fri 25 Sep1
Fri 2 Oct1
Thu 15 Oct3
See the full timeline
Products: Automatic Bug Reporting Tool, Libuser, Logging Subsystem for Red Hat OpenShift, Multicluster Engine for Kubernetes and 107 more
Automatic Bug Reporting ToolLibuserLogging Subsystem for Red Hat OpenShiftMulticluster Engine for Kubernetesmulticluster engine for Kubernetes 2.10multicluster engine for Kubernetes 2.11multicluster engine for Kubernetes 2.17multicluster engine for Kubernetes 2.6multicluster engine for Kubernetes 2.8multicluster engine for Kubernetes 2.9Multicluster Global HubOpenShift API for Data ProtectionPolkitRed Hat Advanced Cluster Management for Kubernetes 2Red Hat Advanced Cluster Management for Kubernetes 2.11Red Hat Advanced Cluster Management for Kubernetes 2.13Red Hat Advanced Cluster Management for Kubernetes 2.14Red Hat Advanced Cluster Management for Kubernetes 2.15Red Hat Advanced Cluster Management for Kubernetes 2.16Red Hat Advanced Cluster Management for Kubernetes 2.17Red Hat Advanced Cluster Security 4.2Red Hat Ansible Automation Platform 2Red Hat Ansible Automation Platform 2.4 for RHEL 8Red Hat Ansible Automation Platform 2.4 for RHEL 9Red Hat Ansible Automation Platform 2.5Red Hat Ansible Automation Platform 2.5 for RHEL 8Red Hat Ansible Automation Platform 2.5 for RHEL 9Red Hat Ansible Automation Platform 2.6Red Hat Ansible Automation Platform 2.6 for RHEL 9Red Hat Ansible Automation Platform 2.7Red Hat build of Apache Camel - HawtIO 4Red Hat build of Keycloak 26.4Red Hat build of Keycloak 26.4.15Red Hat build of Keycloak 26.6Red Hat build of Keycloak 26.6.6Red Hat Container Native Virtualization 4.12Red Hat Container Native Virtualization 4.13Red Hat Container Native Virtualization 4.14Red Hat Container Native Virtualization 4.15Red Hat Container Native Virtualization 4.16Red Hat Container Native Virtualization 4.17Red Hat Container Native Virtualization 4.18Red Hat Container Native Virtualization 4.19Red Hat Container Native Virtualization 4.20Red Hat Container Native Virtualization 4.21Red Hat Data Grid 8Red Hat Directory Server 11Red Hat Directory Server 11.7 E4S for RHEL 8Red Hat Directory Server 11.9 for RHEL 8Red Hat Directory Server 12Red Hat Directory Server 12.2 E4S for RHEL 9Red Hat Directory Server 12.4 E4S for RHEL 9Red Hat Directory Server 13Red Hat Discovery 2Red Hat Enterprise Linux 10Red Hat Enterprise Linux 10.0 Extended Update SupportRed Hat Enterprise Linux 6Red Hat Enterprise Linux 7Red Hat Enterprise Linux 7 Extended Lifecycle SupportRed Hat Enterprise Linux 8Red Hat Enterprise Linux 8.1 Update Services for SAP SolutionsRed Hat Enterprise Linux 8.2 Advanced Update SupportRed Hat Enterprise Linux 8.2 Telecommunications Update ServiceRed Hat Enterprise Linux 8.2 Update Services for SAP SolutionsRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnRed Hat Enterprise Linux 8.4 Telecommunications Update ServiceRed Hat Enterprise Linux 8.4 Update Services for SAP SolutionsRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportRed Hat Enterprise Linux 8.6 Extended Update SupportRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-OnRed Hat Enterprise Linux 8.6 Telecommunications Update ServiceRed Hat Enterprise Linux 8.6 Update Services for SAP SolutionsRed Hat Enterprise Linux 8.8 Extended Update SupportRed Hat Enterprise Linux 8.8 Telecommunications Update ServiceRed Hat Enterprise Linux 8.8 Update Services for SAP SolutionsRed Hat Enterprise Linux 9Red Hat Enterprise Linux 9.0 Extended Update SupportRed Hat Enterprise Linux 9.0 Update Services for SAP SolutionsRed Hat Enterprise Linux 9.2 Extended Update SupportRed Hat Enterprise Linux 9.2 Update Services for SAP SolutionsRed Hat Enterprise Linux 9.4 Extended Update SupportRed Hat Enterprise Linux 9.4 Update Services for SAP SolutionsRed Hat Enterprise Linux 9.6 Extended Update SupportRed Hat Hardened ImagesRed Hat Insights proxy 1.5Red Hat JBoss Core Services 2.4.62.SP2Red Hat JBoss Enterprise Application Platform Expansion PackRed Hat OpenShift AI 3.4Red Hat OpenShift Container Platform 4Red Hat OpenShift Container Platform 4.12Red Hat OpenShift Container Platform 4.13Red Hat OpenShift Container Platform 4.14Red Hat OpenShift Container Platform 4.15Red Hat OpenShift Container Platform 4.16Red Hat OpenShift Container Platform 4.17Red Hat OpenShift Container Platform 4.18Red Hat OpenShift Container Platform 4.19Red Hat OpenShift Container Platform 4.20Red Hat OpenShift Container Platform 4.21Red Hat OpenShift Container Platform 4.22Red Hat Openshift Data Foundation 4Red Hat Satellite 6.16 for RHEL 8Red Hat Satellite 6.16 for RHEL 9Red Hat Satellite 6.18 for RHEL 9Red Hat Satellite 6.19 for RHEL 9Red Hat Single Sign-On 7Red Hat Software CollectionsRed Hat Software Collections for Red Hat Enterprise Linux 7RHACS-3.74-RHEL-8RHACS-4.1-RHEL-8

CVEs

44 CVEs, the 40 listed known exploited first
CVE-2021-4034Red Hat Polkit Out-of-Bounds Read and Write VulnerabilityCVSSUnratedExploited95%EPSS2articles
CVE-2015-5287Red Hat Automatic Bug Reporting Tool Privilege Escalation VulnerabilityCVSS7.8HighExploited5.0%EPSS5articles
CVE-2015-3246Red Hat Libuser Race Condition VulnerabilityCVSS5.1MediumExploited8.5%EPSS5articles
CVE-2026-96889Librsvg: use-after-free when xml includes have duplicated entitiesCVSS7.8High–Not in KEV0.5%EPSS2articles
CVE-2026-96658Foreman: foreman: arbitrary code execution via safemode sandbox bypassCVSS9.9Critical–Not in KEV0.7%EPSS1article
CVE-2026-96659Foreman: excessive permissions for viewer role on previewCVSS9.1Critical–Not in KEV0.3%EPSS1article
CVE-2026-86345389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication resultCVSS9.0Critical–Not in KEV0.4%EPSS1article
CVE-2026-96512Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorizationCVSS7.8High–Not in KEV0.3%EPSS1article
CVE-2026-84719Automation-controller: automation-controller: workflowjobtemplate /copy/ deep-copy sanitizer omits instance_groups authorization (instancegroup use_role bypass to control-plane)CVSS9.9Critical–Not in KEV0.5%EPSS1article
CVE-2026-75884Awx: awx: privilege escalation to openshift namespace via pod_spec_override injection in container groupsCVSS9.1Critical–Not in KEV0.4%EPSS1article
CVE-2026-18963Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypassCVSS9.1Critical–Not in KEV6.4%EPSS4articles
CVE-2026-78234Hawtio-operator: hawtio-operator: service-ca signing oracle allows arbitrary-cn certificate issuance to namespace edit usersCVSS9.9Critical–Not in KEV0.4%EPSS1article
28 more CVEs
CVE-2026-76578Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aciCVSS9.8Critical–Not in KEV1.2%EPSS2articles
CVE-2026-79678Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of serviceCVSS8.1High–Not in KEV0.9%EPSS1article
CVE-2026-76560389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dnCVSS7.5High–Not in KEV0.6%EPSS1article
CVE-2026-13097Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastoreCVSS9.1Critical–Not in KEV0.6%EPSS2articles
CVE-2026-15571Keycloak-services: keycloak-services: predictable account-linking hash enables account takeover via malicious oidc clientCVSS7.3High–Not in KEV0.4%EPSS1article
CVE-2026-67567Multicloud-operators-subscription: multicloud-operators-subscription: helmrelease chart applied with controller sa without gvk or namespace restrictionCVSS9.9Critical–Not in KEV0.6%EPSS1article
CVE-2026-11861Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationshipsCVSS9.6Critical–Not in KEV0.3%EPSS1article
CVE-2026-77176Kata-containers: insufficient validation of createcontainer mount and storage rules in genpolicyCVSS8.1High–Not in KEV0.5%EPSS1article
CVE-2026-66780Submariner-operator: broker serviceaccount secret (token + ca) logged in full at trace verbosityCVSS9.9Critical–Not in KEV0.6%EPSS1article
CVE-2026-12564Automation-controller: automation-controller: kubernetes service account token exfiltration via hashicorp vault credential ssrfCVSS9.6Critical–Not in KEV0.3%EPSS1article
CVE-2026-70496Search-v2-operator: search-v2-operator: operator clusterrole is cluster-admin equivalent via impersonate, rbac write, csr approve, and manifestworkCVSS9.9Critical–Not in KEV0.6%EPSS1article
CVE-2026-66794Cluster-proxy-addon: cluster-proxy-addon: unauthenticated ssrf to arbitrary managed-cluster services via public routeCVSS9.3Critical–Not in KEV0.6%EPSS1article
CVE-2026-71470Acm-search-v2-rhel9: search-v2-operator: search cr imageoverride/arguments/envvar flow unsanitized into pods running impersonating saCVSS9.1Critical–Not in KEV0.7%EPSS1article
CVE-2026-66792Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clustersCVSS9.9Critical–Not in KEV0.7%EPSS1article
CVE-2026-66795Managedcluster-import-controller: csr auto-approver does not validate certificate subject or signername (spoke→hub cluster-admin)CVSS9.1Critical–Not in KEV0.5%EPSS1article
CVE-2026-71472Acm-search-v2-rhel9: search-v2-operator: shell-command and sql injection in postgresql-start.sh via cr-supplied work_memCVSS9.1Critical–Not in KEV0.9%EPSS1article
CVE-2026-73269Cluster-curator-controller: cluster-curator-controller: tenant-controllable trigger creates clusterrolebinding granting cluster-wide secrets access to namespace-local saCVSS9.9Critical–Not in KEV0.6%EPSS1article
CVE-2026-72526Multicloud-integrations: multicloud-integrations: pull-model propagation allows hub tenant to target arbitrary spoke cluster via unvalidated ocm-managed-cluster annotationCVSS9.9Critical–Not in KEV0.7%EPSS1article
CVE-2026-10090Multicluster-operators-subscription: multicluster-operators-subscription: namespace edit user can deploy cluster-scoped clusterrolebinding and become cluster-admin via application subscriptionCVSS9.9Critical–Not in KEV0.6%EPSS1article
CVE-2026-16242Hypershift: konnectivity proxy-server accepts agent connections without validating client certificatesCVSS9.4Critical–Not in KEV0.9%EPSS1article
CVE-2026-15378Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)CVSS9.3Critical–Not in KEV0.5%EPSS1article
CVE-2026-11807Eda-server: websocket missing authorization allows credential theft via activation_id spoofingCVSS9.6Critical–Not in KEV0.5%EPSS1article
CVE-2026-7374Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerabilityCVSS9.9Critical–Not in KEV0.7%EPSS1article
CVE-2026-4408Samba: remote code execution in samrCVSS9.0Critical–Not in KEV2.5%EPSS1article
CVE-2026-4480Red Hat Enterprise Linux 10 vulnerabilityCVSS8.5High–Not in KEV14%EPSS1article
CVE-2026-3012Samba: group policy certificate enrollment uses http:// without validationCVSS8.0High–Not in KEV0.3%EPSS1article
CVE-2026-3238Samba: denial of service against ad dc wins serverCVSS7.5High–Not in KEV2.7%EPSS1article
CVE-2026-1933Samba: missing access check on reparse point operationsCVSS7.1High–Not in KEV0.9%EPSS1article

Coverage

36 articles, all timeFull timeline RSS feed
  1. AI-Enabled Espionage Campaign Targets Government Linux SystemsUnit 42
  2. Next.js Patches Critical Flaws That Could Let Attackers Run CodeThe Hacker News
  3. Vercel patches critical Next.js flaws that let attackers run code remotelySecurityOnline
  4. Critical Foreman Flaws Put Red Hat Satellite Deployments at RiskSecurityOnline
  5. Sudo Flaw Lets Local Users Bypass Time Restricted Rules via TZSecurityOnline
  6. Red Hat Fixes Critical Ansible Flaws Enabling Control Plane TakeoverSecurityOnline
  7. CISA Warns of Critical Siemens Industrial Edge Account Takeover FlawCISA · official notice
  8. HCL BigFix flaws expose tenant data and admin accountsSecurityOnline
  9. Siemens Flaws Let Attackers Hijack Accounts and Gain Root AccessSecurityOnline
  10. Critical Hawtio Operator Flaw Enables Cross Tenant Impersonation and RCESecurityOnline
  11. FreeIPA Flaws Let Anonymous Attackers Create Administrator CredentialsThe Hacker News
  12. Critical FreeIPA Flaw Lets Attackers Seize Identity ServersSecurityOnline
  13. CISA adds critical Red Hat, SQL Server, Citrix flaws to KEV list.Security Affairs
  14. uBlock Origin v1.74.0 Chrome release to be delisted amid CVEsSecurityOnline
  15. WeedHack malware steals data from over 116,000 Minecraft gamersSecurityOnline
  16. CISA KEV Catalogue Spotlights Red Hat libuser Flaw CVE-2015-3246CISA · official notice
  17. CVE-2015-5287 Flaw in Red Hat ABRT Enables Privilege EscalationCISA · official notice
  18. CISA flags Red Hat ABRT flaw CVE-2015-5287 as actively exploitedCISA · official notice
  19. CISA Adds CVE-2015-3246 to Known Exploited Vulnerabilities CatalogueCISA · official notice
  20. Keycloak fixes critical CVE-2026-18963 password reset bypass flawSecurityOnline
  21. CVE-2026-67567 (CVSS 9.9): Red Hat Flaws Enable Privilege Escalation in ACM and FreeIPASecurityOnline
  22. CVE-2026-77176 Lets Attackers Break Kata Containers IsolationSecurityOnline
  23. Red Hat patches CVE-2026-66780, blocking Kubernetes MITM riskSecurityOnline
  24. CVE-2026-70496 & CVE-2026-66794: Privilege Escalation in Red Hat ACM Hits CVSS 9.9SecurityOnline
  25. Red Hat fixes Kubernetes bug that gives cluster-admin rightsSecurityOnline
  26. Red Hat fixes critical RCE flaws in Advanced Cluster ManagementSecurityOnline
  27. Red Hat ACM Flaw (CVE-2026-10090) Lets Users Gain Cluster AdminSecurityOnline
  28. Unauthenticated Flaw Lets Attackers Hijack OpenShift Control PlaneSecurityOnline
  29. Red Hat OpenShift AI flaw lets attackers read local filesSecurityOnline
  30. Red Hat Ansible flaw leaks credentials via websocket APISecurityOnline
  31. CVE-2026-7374 flaw lets attackers escape KubeVirt namespacesSecurityOnline
  32. Samba Fixes Multiple Flaws with Maximum 10.0 CVSS ScoresSecurityOnline
  33. Siemens SIMATIC CN 4100 hit by CVE-2024-47704, urges V5.0 updateCISA · official notice
  34. ABB Symphony Plus PostgreSQL bug enables remote code executionCISA · official notice
  35. Darktrace FAI links cloud breach to perfctl using CVE-2021-4034Darktrace
  36. Trust Broken: Critical Keylime Flaw (CVSS 9.4) Disables mTLS AuthenticationSecurityOnline · first in our coverage

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device