Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Red Hat — Vulnerabilities & Security Advisories 1481

Browse all 1481 CVE security advisories affecting Red Hat. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Red Hat operates primarily as a provider of open-source enterprise software solutions, most notably its Linux operating system and container platforms. With 688 recorded Common Vulnerabilities and Exposures, the organization’s historical attack surface frequently involves remote code execution, cross-site scripting, and privilege escalation flaws within its middleware and management tools. These vulnerabilities often stem from complex codebases and third-party dependencies integrated into its distribution. Security characteristics are defined by a rigorous patching lifecycle and the Red Hat Security Response Team, which issues timely advisories for critical issues. While major public breaches directly attributed to Red Hat core infrastructure are rare, individual component flaws have occasionally allowed attackers to gain unauthorized access or execute arbitrary commands. The company maintains a strong reputation for transparency, providing detailed technical guidance to help administrators mitigate risks associated with its widely deployed enterprise technologies.

CVE ID Title CVSS Severity Published
CVE-2026-104046 Sssd: sssd: denial of service via incomplete identity provider authentication requests — Red Hat Enterprise Linux 10 CWE-770 6.2 Medium 2026-10-06
CVE-2026-106062 Gimp: gimp: heap buffer overflow in dds loader on crafted directdraw surface file — Red Hat Enterprise Linux 10 CWE-119 7.8 High 2026-10-06
CVE-2026-101258 Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-free — Red Hat Enterprise Linux 10 CWE-787 7.8 High 2026-10-06
CVE-2026-106063 Gimp: gimp: heap buffer overflow in dicom export on oversized image dimensions — Red Hat Enterprise Linux 10 CWE-119 6.3 Medium 2026-10-06
CVE-2026-104048 Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation — Red Hat Enterprise Linux 10 CWE-1025 6.8 Medium 2026-10-06
CVE-2026-104047 Sssd: sssd: information disclosure via query injection in entra id lookups — Red Hat Enterprise Linux 10 CWE-140 5.3 Medium 2026-10-06
CVE-2026-106033 Ansible: ansible-ui: ansible ui dom xss in /redirect next parameter — Red Hat Ansible Automation Platform 2 CWE-79 5.4 Medium 2026-10-06
CVE-2026-83550 Postgres-exporter: net/http/pprof exposed on metrics listener — Multicluster Global Hub CWE-489 7.1 High 2026-10-06
CVE-2026-88252 Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion — Red Hat Enterprise Linux 10 CWE-835 4.7 Medium 2026-10-06
CVE-2026-105305 Keycloak-services: keycloak-services: device authorization grant bypasses per-client minimum.acr.value enforcement — Red Hat Build of Keycloak CWE-287 5.4 Medium 2026-10-06
CVE-2026-104044 Sssd: sssd: denial of service via crafted passkey kerberos authentication request — Red Hat Enterprise Linux 10 CWE-476 6.2 Medium 2026-10-06
CVE-2026-104043 Sssd: sssd: denial of service via undersized packet parsing in nss responder — Red Hat Enterprise Linux 10 CWE-125 5.5 Medium 2026-10-06
CVE-2026-104042 Sssd: sssd: denial of service via out-of-bounds read in pam responder — Red Hat Enterprise Linux 10 CWE-125 5.5 Medium 2026-10-06
CVE-2026-104041 Sssd: sssd: denial of service via unbounded negative cache growth — Red Hat Enterprise Linux 10 CWE-770 5.5 Medium 2026-10-06
CVE-2026-104040 Sssd: sssd: information disclosure via odata injection in entra id lookups — Red Hat Enterprise Linux 10 CWE-140 4.4 Medium 2026-10-06
CVE-2026-104039 Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder — Red Hat Enterprise Linux 10 CWE-825 4.7 Medium 2026-10-06
CVE-2026-104038 Sssd: sssd: denial of service via missing sid extension in certificate mapping — Red Hat Enterprise Linux 10 CWE-476 5.9 Medium 2026-10-06
CVE-2026-104037 Sssd: sssd: denial of service via packet length underflow in autofs responder — Red Hat Enterprise Linux 10 CWE-125 5.5 Medium 2026-10-06
CVE-2026-92821 Sssd: sssd: access control bypass via premature ldap access rule evaluation — Red Hat Enterprise Linux 10 CWE-393 6.8 Medium 2026-10-06
CVE-2026-104036 Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin — Red Hat Enterprise Linux 10 CWE-787 5.8 Medium 2026-10-06
CVE-2026-104035 Sssd: sssd: denial of service via memory exhaustion in kcm responder — Red Hat Enterprise Linux 10 CWE-772 5.5 Medium 2026-10-06
CVE-2026-104034 Sssd: sssd: denial of service via use-after-free in kcm ticket renewal — Red Hat Enterprise Linux 10 CWE-825 4.7 Medium 2026-10-06
CVE-2026-104033 Sssd: sssd: access control bypass via improper ldap shadow expiration check — Red Hat Enterprise Linux 10 CWE-193 5.4 Medium 2026-10-06
CVE-2026-104032 Sssd: sssd: denial of service via unprivileged autofs cache invalidation — Red Hat Enterprise Linux 10 CWE-408 5.5 Medium 2026-10-06
CVE-2026-104031 Sssd: sssd: denial of service via memory exhaustion in autofs responder — Red Hat Enterprise Linux 10 CWE-772 5.5 Medium 2026-10-06
CVE-2026-105447 Quay: quay: global read-only superuser can access build trigger write credentials — Red Hat Quay 3 CWE-863 5.5 Medium 2026-10-05
CVE-2026-71297 Maestro: maestro: grpc broker has no auth interceptor and client mtls is optional — Multicluster Engine for Kubernetes CWE-306 5.4 Medium 2026-10-05
CVE-2026-104029 Sssd: sssd: denial of service via out-of-bounds read in autofs responder — Red Hat Enterprise Linux 10 CWE-125 3.3 Low 2026-10-05
CVE-2026-104030 Sssd: sssd: denial of service via out-of-bounds read during passkey parsing — Red Hat Enterprise Linux 10 CWE-125 5.5 Medium 2026-10-05
CVE-2026-71299 Maestro: maestro: rest api write endpoints registered without authentication middleware — Multicluster Engine for Kubernetes CWE-306 6.5 Medium 2026-10-05

This page lists every published CVE security advisory associated with Red Hat. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.