| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-0988 | Glib: glib: denial of service via integer overflow in g_buffered_input_stream_peek() | Red Hat | Red Hat Hardened Images | Low | 3.7 | 2026-01-21 11:38:39 | Deep Dive |
| CVE-2025-14559 | Org.keycloak/keycloak-services: keycloak keycloak-services: business logic flaw allows unauthorized token issuance for disabled users | Red Hat | Red Hat build of Keycloak 26.4 | Medium | 6.5 | 2026-01-21 06:13:31 | Deep Dive |
| CVE-2026-1035 | Org.keycloak.protocol.oidc: keycloak refresh token reuse bypass via toctou race condition | Red Hat | Red Hat build of Keycloak 26.4 | Low | 3.1 | 2026-01-21 05:52:22 | Deep Dive |
| CVE-2026-1180 | Org.keycloak.protocol.oidc: blind server-side request forgery (ssrf) in keycloak oidc dynamic client registration via jwks_uri | Red Hat | Red Hat build of Keycloak 26.4 | Medium | 5.8 | 2026-01-20 12:33:01 | Deep Dive |
| CVE-2026-0992 | Libxml2: libxml2: denial of service via crafted xml catalogs | Red Hat | Red Hat Hardened Images | Low | 2.9 | 2026-01-15 14:20:25 | Deep Dive |
| CVE-2026-0989 | Libxml2: unbounded relaxng include recursion leading to stack overflow | Red Hat | Red Hat Hardened Images | Low | 3.7 | 2026-01-15 14:20:23 | Deep Dive |
| CVE-2026-0990 | Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing | Red Hat | Red Hat Hardened Images | Medium | 5.9 | 2026-01-15 14:20:07 | Deep Dive |
| CVE-2026-0976 | Org.keycloak/keycloak-quarkus-server: keycloak: proxy bypass due to improper handling of matrix parameters in url paths | Red Hat | Red Hat Build of Keycloak | Low | 3.7 | 2026-01-15 12:06:21 | Deep Dive |
| CVE-2025-14242 | Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing | Red Hat | Red Hat Enterprise Linux 10 | Medium | 6.5 | 2026-01-14 15:23:04 | Deep Dive |
| CVE-2026-0716 | Libsoup: out-of-bounds read in libsoup websocket frame processing | Red Hat | Red Hat Enterprise Linux 10 | Medium | 4.8 | 2026-01-13 23:07:06 | Deep Dive |
| CVE-2025-12548 | Github.com/che-incubator/che-code: eclipse che — unauthenticated rce and secret exfiltration via tcp/3333 | Red Hat | Red Hat OpenShift Dev Spaces (RHOSDS) 3.22 | Critical | 9.0 | 2026-01-13 15:35:01 | Deep Dive |
| CVE-2025-14025 | Ansible-automation-platform/aap-gateway: aap-gateway: read-only personal access token (pat) bypasses write restrictions | Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 | High | 8.5 | 2026-01-08 13:44:05 | Deep Dive |
| CVE-2026-0719 | Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication | Red Hat | Red Hat Enterprise Linux 10 | High | 8.6 | 2026-01-08 12:38:31 | Deep Dive |
| CVE-2026-0707 | Keycloak: keycloak authorization header parsing leading to potential security control bypass | Red Hat | Red Hat build of Keycloak 26.4 | Medium | 5.3 | 2026-01-08 03:41:28 | Deep Dive |
| CVE-2025-12543 | Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf | Red Hat | Red Hat build of Apache Camel 4.14.4 for Spring Boot 3.5.11 | Critical | 9.6 | 2026-01-07 16:04:22 | Deep Dive |
| CVE-2020-36921 | RED-V Super Digital Signage System 5.1.1 Log Information Disclosure Vulnerability | RED | RED-V Super Digital Signage System RXV-A740R | High | 7.5 | 2026-01-06 15:52:27 | Deep Dive |
| CVE-2025-11419 | Keycloak: keycloak tls client-initiated renegotiation denial of service | - | - | High | 7.5 | 2025-12-23 20:42:39 | Deep Dive |
| CVE-2025-14946 | Libnbd: libnbd: arbitrary code execution via ssh argument injection through a malicious uri | Red Hat | libnbd | Medium | 4.8 | 2025-12-19 13:02:38 | Deep Dive |
| CVE-2025-14874 | Nodemailer: nodemailer: denial of service via crafted email address header | nodemailer | nodemailer | High | 7.5 | 2025-12-18 08:40:32 | Deep Dive |
| CVE-2025-14443 | Ose-openshift-apiserver: openshift api server: server-side request forgery (ssrf) vulnerability in imagestreamimport mechanism | Red Hat | Red Hat OpenShift Container Platform 4 | Medium | 6.4 | 2025-12-16 12:14:48 | Deep Dive |