RED HAT 厂商相关 1138 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
Red Hat 主要提供企业级 Linux 操作系统及中间件解决方案，其开源生态广泛支撑全球关键业务。历史漏洞多集中于远程代码执行、权限提升及信息泄露，部分源于底层组件集成缺陷。值得关注的是，其通过 Red Hat Security Response 团队提供长期安全支持，并集成 SELinux 强制访问控制机制以增强系统隔离性。尽管漏洞数量较多，但官方响应迅速，持续推动补丁更新以保障企业环境稳定性。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-74247 | Quay 构建API ssrf漏洞 — Red Hat OpenShift Update ServiceCWE-918 | 4.2 | Medium | 2026-08-14 |
| CVE-2026-74245 | Quay 未认证日志下载漏洞 — Red Hat OpenShift Update ServiceCWE-306 | 5.9 | Medium | 2026-08-14 |
| CVE-2026-74243 | Quay 未认证的安全扫描通知端点漏洞 — Red Hat OpenShift Update ServiceCWE-306 | 6.5 | Medium | 2026-08-14 |
| CVE-2026-74244 | Quay Stripe Webhook 漏洞 — Red Hat OpenShift Update ServiceCWE-347 | 5.9 | Medium | 2026-08-14 |
| CVE-2026-74242 | Quay API仓库通知UUID IDOR漏洞 — Red Hat OpenShift Update ServiceCWE-639 | 5.3 | Medium | 2026-08-14 |
| CVE-2026-74241 | Quay外部LDAP认证LDAP注入漏洞 — Red Hat OpenShift Update ServiceCWE-90 | 4.8 | Medium | 2026-08-14 |
| CVE-2026-74240 | Quay 联合机器人及SSO认证JWT验证绕过漏洞 — Red Hat OpenShift Update ServiceCWE-287 | 5.4 | Medium | 2026-08-14 |
| CVE-2026-13002 | Dnsmasq DNSSEC NSEC/NSEC3位图解析无限循环拒绝服务漏洞 — Red Hat Enterprise Linux 10CWE-835 | 4.4 | Medium | 2026-08-14 |
| CVE-2026-19879 | Undertow HTTP响应头完整性漏洞 — Red Hat build of Apache Camel for Spring Boot 4CWE-681 | 5.3 | Medium | 2026-08-14 |
| CVE-2026-58224 | Samba ctdb接收包完整性检查漏洞 — Red Hat Enterprise Linux 10CWE-353 | 6.5 | Medium | 2026-08-14 |
| CVE-2026-19617 | libdm（lvm2）配置解析器拒绝服务漏洞 — Red Hat Enterprise Linux 10CWE-770 | 5.5 | Medium | 2026-08-14 |
| CVE-2026-19730 | Podman quadlet安装非截断写入保留已移除主机访问指令漏洞 — Red Hat Ansible Automation Platform 2CWE-459 | 4.2 | Medium | 2026-08-13 |
| CVE-2026-73266 | Clusterclaims-controller 租户控制标签传播导致跨租户集群集合加入漏洞 — Multicluster Engine for KubernetesCWE-441 | 7.1 | High | 2026-08-13 |
| CVE-2026-73584 | Red Hat sblim-sfcb 资源管理错误漏洞 — Red Hat Enterprise Linux 10CWE-377 | 6.3 | Medium | 2026-08-13 |
| CVE-2026-73583 | Red Hat sblim-sfcb 缓冲区错误漏洞 — Red Hat Enterprise Linux 10CWE-125 | 6.6 | Medium | 2026-08-13 |
| CVE-2026-73585 | Red Hat sblim-cmpi-base 资源管理错误漏洞 — Red Hat Enterprise Linux 10CWE-377 | 6.3 | Medium | 2026-08-13 |
| CVE-2026-18728 | Open-iSCSI 数字错误漏洞 — Red Hat Enterprise Linux 10CWE-191 | 6.5 | Medium | 2026-08-13 |
| CVE-2026-71846 | Red Hat Insights Client 权限许可和访问控制问题漏洞 — Red Hat Advanced Cluster Management for Kubernetes 2CWE-250 | 6.5 | Medium | 2026-08-12 |
| CVE-2026-71469 | Stolostron search-v2-operator 资源管理错误漏洞 — Red Hat Advanced Cluster Management for Kubernetes 2CWE-770 | 7.5 | High | 2026-08-12 |
| CVE-2026-71471 | Red Hat acm-search-v2-api 软件供应链问题漏洞 — Red Hat Advanced Cluster Management for Kubernetes 2CWE-829 | 9.0 | Critical | 2026-08-12 |
| CVE-2026-71473 | Stolostron search-v2-operator 输入验证错误漏洞 — Red Hat Advanced Cluster Management for Kubernetes 2CWE-915 | 8.5 | High | 2026-08-12 |
| CVE-2026-18727 | Open-iSCSI 数字错误漏洞 — Red Hat Enterprise Linux 10CWE-191 | 6.5 | Medium | 2026-08-12 |
| CVE-2026-18726 | Open-iSCSI 资源管理错误漏洞 — Red Hat Enterprise Linux 10CWE-835 | 6.5 | Medium | 2026-08-12 |
| CVE-2026-19654 | Rsyslog 缓冲区错误漏洞 — Red Hat Enterprise Linux 10CWE-125 | 7.5 | High | 2026-08-12 |
| CVE-2026-19130 | Red Hat provider-credential-controller 授权问题漏洞 — Multicluster Engine for KubernetesCWE-639 | 5.8 | Medium | 2026-08-12 |
| CVE-2026-13622 | KubeVirt 路径遍历漏洞 — Red Hat Container Native Virtualization 4.12CWE-22 | 8.8 | High | 2026-08-12 |
| CVE-2026-72508 | Red Hat Advanced Cluster Management for Kubernetes 权限许可和访问控制问题漏洞 — Red Hat Advanced Cluster Management for Kubernetes 2CWE-250 | 9.9 | Critical | 2026-08-12 |
| CVE-2026-73268 | Stolostron Cluster-Curator-Controller 代码注入漏洞 — Multicluster Engine for KubernetesCWE-94 | 9.9 | Critical | 2026-08-12 |
| CVE-2026-73269 | Stolostron Cluster-Curator-Controller 权限许可和访问控制问题漏洞 — Multicluster Engine for KubernetesCWE-269 | 9.9 | Critical | 2026-08-12 |
| CVE-2026-19548 | GNU linker 资源管理错误漏洞 — Red Hat Enterprise Linux 10CWE-416 | 5.5 | Medium | 2026-08-12 |
本页汇总了 RED HAT 厂商截至目前公开的全部 1138 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。