Red Hat 厂商相关 1443 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
Red Hat 主要提供企业级 Linux 操作系统及中间件解决方案,其开源生态广泛支撑全球关键业务。历史漏洞多集中于远程代码执行、权限提升及信息泄露,部分源于底层组件集成缺陷。值得关注的是,其通过 Red Hat Security Response 团队提供长期安全支持,并集成 SELinux 强制访问控制机制以增强系统隔离性。尽管漏洞数量较多,但官方响应迅速,持续推动补丁更新以保障企业环境稳定性。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-95512 | FreeType CID字体加载器拒绝服务漏洞 — Red Hat build of OpenJDK 11 ELS CWE-400 | 5.5 | Medium | 2026-10-02 |
| CVE-2026-86345 | 389-ds-base StartTLS明文缓冲区保留导致LDAP认证伪造漏洞 — Red Hat Directory Server 11 CWE-923 | 9.0 | Critical | 2026-10-01 |
| CVE-2026-86344 | 389-ds-base 未授权工作线程池耗尽漏洞 — Red Hat Directory Server 11 CWE-400 | 7.5 | High | 2026-10-01 |
| CVE-2026-103884 | Keycloak x.509 CRL路径遍历致本地文件读取漏洞 — Red Hat Build of Keycloak CWE-22 | 6.5 | Medium | 2026-10-01 |
| CVE-2026-56098 | Rubygem-katello 资源枚举漏洞 — Red Hat Satellite 6.16 for RHEL 8 CWE-203 | 4.3 | Medium | 2026-10-01 |
| CVE-2026-56097 | Katello注册代理标签SQL注入漏洞 — Red Hat Satellite 6.16 for RHEL 8 CWE-89 | 6.5 | Medium | 2026-10-01 |
| CVE-2026-12542 | Foreman 远程命令执行漏洞 — Red Hat Satellite 6.16 for RHEL 8 CWE-78 | 5.3 | Medium | 2026-10-01 |
| CVE-2026-12545 | Rubygem-hammer_cli 命令注入漏洞 — Red Hat Satellite 6.16 for RHEL 8 CWE-78 | 6.7 | Medium | 2026-10-01 |
| CVE-2026-96658 | Foreman 安全模式绕过致远程代码执行漏洞 — Red Hat Satellite 6.16 for RHEL 8 | 9.9 | Critical | 2026-10-01 |
| CVE-2026-96659 | Foreman预览功能查看者角色权限过大漏洞 — Red Hat Satellite 6.16 for RHEL 8 CWE-267 | 9.1 | Critical | 2026-10-01 |
| CVE-2026-12544 | Foreman 模板注入与不安全反序列化漏洞 — Red Hat Satellite 6.16 for RHEL 8 CWE-502 | 7.7 | High | 2026-10-01 |
| CVE-2026-12541 | Foreman 数据库任务命令注入漏洞 — Red Hat Satellite 6.16 for RHEL 8 CWE-78 | 8.2 | High | 2026-10-01 |
| CVE-2026-12540 | Foreman 通过request_id参数命令注入漏洞 — Red Hat Satellite 6.16 for RHEL 8 CWE-78 | 8.2 | High | 2026-10-01 |
| CVE-2026-12423 | Foreman 未认证信息泄露漏洞 — Red Hat Satellite 6.16 for RHEL 8 CWE-306 | 7.5 | High | 2026-10-01 |
| CVE-2026-12405 | Foreman远程执行命令注入漏洞 — Red Hat Satellite 6.16 for RHEL 8 CWE-78 | 8.8 | High | 2026-10-01 |
| CVE-2026-103754 | Ansible-runner 路径遍历与符号链接逃逸漏洞 — Red Hat Ansible Automation Platform 2 CWE-22 | 5.9 | Medium | 2026-10-01 |
| CVE-2026-96577 | Oc-mirror 4.21 缓存注册表未授权访问漏洞 — Assisted Installer for Red Hat OpenShift Container Platform 2 CWE-306 | 7.1 | High | 2026-10-01 |
| CVE-2026-83589 | Oauth-proxy 登录后重定向开放重定向漏洞 — Red Hat OpenShift Container Platform 4 CWE-601 | 6.1 | Medium | 2026-10-01 |
| CVE-2026-103641 | Gegl 0.4 辐射HDR解码器越界读取漏洞 — Red Hat Enterprise Linux 10 CWE-125 | 5.5 | Medium | 2026-10-01 |
| CVE-2026-103399 | Libsoup HTTP请求走私漏洞 — Red Hat Enterprise Linux 10 CWE-444 | 5.3 | Medium | 2026-09-30 |
| CVE-2026-101295 | Oc-mirror 路径遍历及任意文件写入漏洞 — Assisted Installer for Red Hat OpenShift Container Platform 2 CWE-22 | 7.3 | High | 2026-09-30 |
| CVE-2026-103242 | RPM hex2binv堆溢出漏洞 — Red Hat Enterprise Linux 10 CWE-122 | 7.1 | High | 2026-09-30 |
| CVE-2026-62146 | Cri-o Pod注解污染致运行时套接字暴露漏洞 — Red Hat OpenShift Container Platform 4 CWE-501 | 7.8 | High | 2026-09-30 |
| CVE-2026-102560 | Libsoup 发送缓冲扩展堆溢出漏洞 — Red Hat Enterprise Linux 10 CWE-125 | 8.6 | High | 2026-09-29 |
| CVE-2026-102559 | libsoup websocket掩码堆缓冲区溢出漏洞 — Red Hat Enterprise Linux 10 CWE-125 | 8.6 | High | 2026-09-29 |
| CVE-2026-102558 | Libsoup 接收缓冲区增长堆溢出漏洞 — Red Hat Enterprise Linux 10 CWE-125 | 8.6 | High | 2026-09-29 |
| CVE-2026-102555 | Libsoup 数据URI Base64解码堆溢出 — Red Hat Enterprise Linux 10 CWE-125 | 8.2 | High | 2026-09-29 |
| CVE-2026-102623 | Kubevirt virt-controller 空指针解引用漏洞 — Red Hat OpenShift Virtualization 4 CWE-476 | 6.5 | Medium | 2026-09-29 |
| CVE-2026-102557 | Libsoup WebSocket消息重组堆缓冲区溢出漏洞 — Red Hat Enterprise Linux 10 CWE-125 | 8.6 | High | 2026-09-29 |
| CVE-2026-102556 | Libsoup websocket类型混淆堆溢出漏洞 — Red Hat Enterprise Linux 10 CWE-843 | 8.6 | High | 2026-09-29 |
本页汇总了 Red Hat 厂商截至目前公开的全部 1443 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。