| CVE-2026-2377 | Mirror-registry: quay: quay: server-side request forgery via log export functionality | Red Hat | mirror registry for Red Hat OpenShift | Medium | 6.5 | 2026-04-08 16:26:08 | Deep Dive |
| CVE-2025-14821 | Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows | Red Hat | Red Hat Hardened Images | High | 7.8 | 2026-04-07 16:34:11 | Deep Dive |
| CVE-2026-4631 | Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection | Red Hat | Red Hat Enterprise Linux 10 | Critical | 9.8 | 2026-04-07 16:30:28 | Deep Dive |
| CVE-2026-5745 | Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive | Red Hat | Red Hat Enterprise Linux 10 | Medium | 5.5 | 2026-04-07 14:57:32 | Deep Dive |
| CVE-2026-4740 | Rhacm: open cluster management (ocm): cross-cluster privilege escalation via improper kubernetes client certificate renewal validation | Red Hat | Multicluster Engine for Kubernetes | High | 8.2 | 2026-04-07 14:30:36 | Deep Dive |
| CVE-2026-5704 | Tar: tar: hidden file injection via crafted archives | Red Hat | Red Hat Enterprise Linux 10 | Medium | 5.0 | 2026-04-06 15:17:28 | Deep Dive |
| CVE-2026-5673 | Libtheora: libtheora: denial of service or information disclosure via malformed avi file processing | Red Hat | Red Hat Enterprise Linux 10 | Medium | 5.6 | 2026-04-06 09:22:36 | Deep Dive |
| CVE-2026-37977 | Keycloak: org.keycloak.protocol.oidc.grants.ciba: keycloak: information disclosure via cors header injection due to unvalidated jwt azp claim | Red Hat | Red Hat Build of Keycloak | Low | 3.7 | 2026-04-06 08:38:37 | Deep Dive |
| CVE-2026-3184 | Util-linux: util-linux: access control bypass due to improper hostname canonicalization | Red Hat | Red Hat Hardened Images | Low | 3.7 | 2026-04-03 18:43:46 | Deep Dive |
| CVE-2026-2625 | Rust-rpm-sequoia: rust-rpm-sequoia: denial of service via crafted rpm file during signature verification | Red Hat | Red Hat Enterprise Linux 10 | Medium | 4.0 | 2026-04-03 18:38:10 | Deep Dive |
| CVE-2026-4636 | Keycloak: keycloak: uma policy bypass allows authenticated users to gain unauthorized access to victim-owned resources. | Red Hat | Red Hat build of Keycloak 26.2 | High | 8.1 | 2026-04-02 12:45:02 | Deep Dive |
| CVE-2026-4282 | Keycloak: keycloak: privilege escalation via forged authorization codes due to singleuseobjectprovider isolation flaw | Red Hat | Red Hat build of Keycloak 26.2 | High | 7.4 | 2026-04-02 12:44:53 | Deep Dive |
| CVE-2026-4634 | Keycloak: keycloak: denial of service via excessive processing of openid connect scope parameters | Red Hat | Red Hat build of Keycloak 26.2 | High | 7.5 | 2026-04-02 12:44:53 | Deep Dive |
| CVE-2026-4325 | Keycloak: keycloak: replay of action tokens via improper handling of single-use entries | Red Hat | Red Hat build of Keycloak 26.2 | Medium | 5.3 | 2026-04-02 12:44:53 | Deep Dive |
| CVE-2026-3872 | Keycloak: keycloak: information disclosure due to redirect_uri validation bypass | Red Hat | Red Hat build of Keycloak 26.2 | High | 7.3 | 2026-04-02 12:37:31 | Deep Dive |
| CVE-2026-35094 | Libinput: libinput: information disclosure via dangling pointer in lua plugin handling | Red Hat | Red Hat Enterprise Linux 10 | Low | 3.3 | 2026-04-01 13:54:01 | Deep Dive |
| CVE-2026-35093 | Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins | Red Hat | Red Hat Enterprise Linux 10 | High | 8.8 | 2026-04-01 13:54:00 | Deep Dive |
| CVE-2026-35092 | Corosync: corosync: denial of service via integer overflow in join message validation | Red Hat | Red Hat Enterprise Linux 10 | High | 7.5 | 2026-04-01 13:18:56 | Deep Dive |
| CVE-2026-35091 | Corosync: corosync: denial of service and information disclosure via crafted udp packet | Red Hat | Red Hat Enterprise Linux 10 | High | 8.2 | 2026-04-01 13:18:54 | Deep Dive |
| CVE-2026-5201 | Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image | Red Hat | Red Hat Enterprise Linux 10 | High | 7.5 | 2026-03-31 08:32:58 | Deep Dive |