Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Red Hat — Vulnerabilities & Security Advisories 1440

Browse all 1440 CVE security advisories affecting Red Hat. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Red Hat operates primarily as a provider of open-source enterprise software solutions, most notably its Linux operating system and container platforms. With 688 recorded Common Vulnerabilities and Exposures, the organization’s historical attack surface frequently involves remote code execution, cross-site scripting, and privilege escalation flaws within its middleware and management tools. These vulnerabilities often stem from complex codebases and third-party dependencies integrated into its distribution. Security characteristics are defined by a rigorous patching lifecycle and the Red Hat Security Response Team, which issues timely advisories for critical issues. While major public breaches directly attributed to Red Hat core infrastructure are rare, individual component flaws have occasionally allowed attackers to gain unauthorized access or execute arbitrary commands. The company maintains a strong reputation for transparency, providing detailed technical guidance to help administrators mitigate risks associated with its widely deployed enterprise technologies.

CVE ID Title CVSS Severity Published
CVE-2026-16445 Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module — Red Hat Enterprise Linux 8 CWE-78 7.5 High 2026-07-21
CVE-2026-16461 Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting — Red Hat Enterprise Linux 10 CWE-121 6.5 Medium 2026-07-21
CVE-2026-59844 Libssh: libssh: denial of service via oversized sftp read length — Red Hat Enterprise Linux 10 CWE-789 6.5 Medium 2026-07-21
CVE-2026-59845 Libssh: libssh: denial of service via unchecked proxycommand fork() failure — Red Hat Enterprise Linux 10 CWE-390 5.3 Medium 2026-07-21
CVE-2026-59843 Libssh: libssh: denial of service via zero advertised channel packet size — Red Hat Enterprise Linux 10 CWE-835 6.5 Medium 2026-07-21
CVE-2026-59842 Libssh: libssh: information disclosure via short gssapi curve25519 public key — Red Hat Enterprise Linux 10 CWE-125 3.7 Low 2026-07-21
CVE-2026-15370 Libssh: libssh: stack buffer overflow in sftp server longname construction — Red Hat Enterprise Linux 10 CWE-121 6.7 Medium 2026-07-21
CVE-2026-15811 Kronosnet: kronosnet: encryption key exposure in memory after cryptographic configuration changes — Red Hat Enterprise Linux 10 CWE-212 5.8 Medium 2026-07-21
CVE-2026-15812 Kronosnet: kronosnet: access control list bypass via link id spoofing on unencrypted dynamic links — Red Hat Enterprise Linux 10 CWE-290 4.8 Medium 2026-07-21
CVE-2026-15927 Quay: mirror-registry: ssrf: repo-level mirror accepts external_reference without url validation — Red Hat Quay 3.10 CWE-918 6.8 Medium 2026-07-21
CVE-2026-64612 Libcupsfilters: cups-filters: libcupsfilters: cups image filter process abort via malformed png — Red Hat Enterprise Linux 10 CWE-248 7.5 High 2026-07-20
CVE-2026-12701 Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport — Red Hat Ansible Automation Platform 2.5 for RHEL 8 CWE-22 9.0 Critical 2026-07-20
CVE-2026-16277 Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist() — Red Hat Enterprise Linux 10 CWE-121 6.5 Medium 2026-07-20
CVE-2026-12080 Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys — Red Hat Enterprise Linux 10 CWE-61 7.3 High 2026-07-20
CVE-2026-15588 Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering — Red Hat Enterprise Linux 10 CWE-770 5.3 Medium 2026-07-20
CVE-2026-16254 Claircore: claircore: denial of service via out-of-bounds slice in claircore's apk installed-database parser — Red Hat Advanced Cluster Security 4 CWE-125 4.3 Medium 2026-07-20
CVE-2026-15813 Kronosnet: kronosnet: memory corruption and out-of-bounds access via malformed network packet defragmentation — Red Hat Enterprise Linux 10 CWE-787 6.5 Medium 2026-07-20
CVE-2026-16242 Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates — multicluster engine for Kubernetes 2.1 CWE-306 9.4 Critical 2026-07-20
CVE-2026-16104 Keycloak-services: keycloak-services: authenticator config endpoint exposes raw recaptcha secrets to view-only admins — Red Hat build of Keycloak 26.6 CWE-212 4.3 Medium 2026-07-17
CVE-2026-16103 Keycloak-services: keycloak-services: incomplete fix for ciba brute-force lockout bypass at token redemption — Red Hat Build of Keycloak CWE-305 4.3 Medium 2026-07-17
CVE-2026-16106 Keycloak-services: keycloak-services: incorrect authorization in admin role-composite deletion allows delegated admin to remove privileged child roles — Red Hat build of Keycloak 26.6 CWE-1220 4.9 Medium 2026-07-17
CVE-2026-16108 Keycloak-services: keycloak-services: realm default-group reads disclose hidden groups under fgap v2 — Red Hat build of Keycloak 26.6 CWE-1220 4.3 Medium 2026-07-17
CVE-2026-16093 Keycloak-services: keycloak-services: required signed-jwt assertion policy can be bypassed with unsigned assertion headers — Red Hat build of Keycloak 26.6 CWE-807 5.4 Medium 2026-07-17
CVE-2026-16089 Keycloak-services: keycloak-services: authorization codes can be retargeted to another client session — Red Hat build of Keycloak 26.6 CWE-472 5.4 Medium 2026-07-17
CVE-2026-16072 Keycloak-services: keycloak-services: organization invitation link exposure allows unauthorized member creation — Red Hat build of Keycloak 26.6 CWE-497 4.9 Medium 2026-07-17
CVE-2026-15943 Keycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url change — Red Hat Build of Keycloak CWE-1288 5.5 Medium 2026-07-17
CVE-2026-15945 Keycloak-services: keycloak-services: group hierarchy search discloses hidden parent groups under fgap v2 — Red Hat build of Keycloak 26.6 CWE-639 4.3 Medium 2026-07-16
CVE-2026-12382 Aap-gateway: missing requestheaderstoremove allows mtls bypass via subject header spoofing — Red Hat Ansible Automation Platform 2.5 for RHEL 8 CWE-290 8.2 High 2026-07-15
CVE-2026-15779 Samba-winbind: samba: pam_winbind mkhomedir chowns critical system paths without validation — Red Hat Enterprise Linux 10 CWE-732 6.1 Medium 2026-07-15
CVE-2026-15809 Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env — Red Hat OpenShift Container Platform 4.12 CWE-134 7.8 High 2026-07-15

This page lists every published CVE security advisory associated with Red Hat. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.