Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Red Hat — Vulnerabilities & Security Advisories 1440

Browse all 1440 CVE security advisories affecting Red Hat. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Red Hat operates primarily as a provider of open-source enterprise software solutions, most notably its Linux operating system and container platforms. With 688 recorded Common Vulnerabilities and Exposures, the organization’s historical attack surface frequently involves remote code execution, cross-site scripting, and privilege escalation flaws within its middleware and management tools. These vulnerabilities often stem from complex codebases and third-party dependencies integrated into its distribution. Security characteristics are defined by a rigorous patching lifecycle and the Red Hat Security Response Team, which issues timely advisories for critical issues. While major public breaches directly attributed to Red Hat core infrastructure are rare, individual component flaws have occasionally allowed attackers to gain unauthorized access or execute arbitrary commands. The company maintains a strong reputation for transparency, providing detailed technical guidance to help administrators mitigate risks associated with its widely deployed enterprise technologies.

Found 323 results / 1440 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-77680 Libsoup3: libsoup: quadratic cpu denial of service in http range coalescing after cve-2025-32907 fix — Red Hat Enterprise Linux 10 CWE-407 5.3 Medium 2026-08-25
CVE-2026-79992 Emacs: emacs: command injection via crafted filenames in tramp — Red Hat Enterprise Linux 10 CWE-78 7.8 High 2026-08-25
CVE-2026-79655 Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write — Red Hat Enterprise Linux 10 CWE-59 7.8 High 2026-08-25
CVE-2026-78701 389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos — Red Hat Enterprise Linux 10 CWE-787 6.5 Medium 2026-08-25
CVE-2026-19685 Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615) — Red Hat Enterprise Linux 10 CWE-863 7.1 High 2026-08-24
CVE-2026-78367 Rpm: rpmbuild gettarspec() crafted tar member name → macro injection — Red Hat Enterprise Linux 10 CWE-94 7.0 High 2026-08-24
CVE-2026-73199 Ipa: freeipa: null pointer dereference in `ipa-enrollment` extended operation (`join_oid`) via missing request value — Red Hat Enterprise Linux 10 CWE-476 6.5 Medium 2026-08-20
CVE-2026-11861 Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships — Red Hat Enterprise Linux 10 CWE-266 9.6 Critical 2026-08-20
CVE-2026-73198 Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read — Red Hat Enterprise Linux 10 CWE-770 7.5 High 2026-08-20
CVE-2026-13097 Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore — Red Hat Enterprise Linux 10 CWE-706 8.7 High 2026-08-20
CVE-2026-73196 Ipa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encoding — Red Hat Enterprise Linux 10 CWE-770 4.3 Medium 2026-08-20
CVE-2026-73197 Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read — Red Hat Enterprise Linux 10 CWE-770 7.5 High 2026-08-20
CVE-2026-77014 Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses — Red Hat Enterprise Linux 10 CWE-197 5.3 Medium 2026-08-20
CVE-2026-76235 Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_html — Red Hat Enterprise Linux 10 CWE-401 7.5 High 2026-08-19
CVE-2026-75900 Swtpm: swtpm: out-of-bounds read in swtpm_nvram_checkheader due to sizeof(pointer) vs sizeof(struct) mismatch — Red Hat Enterprise Linux 10 CWE-125 6.1 Medium 2026-08-19
CVE-2026-75032 Bluez: bluez: out-of-bounds read in avrcp parse_media_element and parse_media_folder — Red Hat Enterprise Linux 10 CWE-125 6.3 Medium 2026-08-18
CVE-2026-13002 Dnsmasq: infinite loop dos in dnssec nsec/nsec3 type bitmap parsing — Red Hat Enterprise Linux 10 CWE-835 4.4 Medium 2026-08-14
CVE-2026-58224 Samba: ctdb fails to do integrity checking of received packets — Red Hat Enterprise Linux 10 CWE-353 6.5 Medium 2026-08-14
CVE-2026-19617 Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser — Red Hat Enterprise Linux 10 CWE-770 5.5 Medium 2026-08-14
CVE-2026-19730 Podman: podman: quadlet install --replace non-truncating write retains removed host-access directives — Red Hat Enterprise Linux 10 CWE-459 4.2 Medium 2026-08-13
CVE-2026-73584 Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handling — Red Hat Enterprise Linux 10 CWE-377 6.3 Medium 2026-08-13
CVE-2026-73583 Sblim-sfcb: unsafe deserialization in sblim-sfcb provider-manager ipc allows out-of-bounds memory access via malformed operationhdr — Red Hat Enterprise Linux 10 CWE-125 6.6 Medium 2026-08-13
CVE-2026-73585 Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack — Red Hat Enterprise Linux 10 CWE-377 6.3 Medium 2026-08-13
CVE-2026-18728 Open-iscsi: open-iscsi: integer underflow in iscsiuio ipv4 dhcp parsing — Red Hat Enterprise Linux 10 CWE-191 6.5 Medium 2026-08-13
CVE-2026-18727 Open-iscsi: open-iscsi: integer underflow in iscsiuio dhcpv6 parsing — Red Hat Enterprise Linux 10 CWE-191 6.5 Medium 2026-08-12
CVE-2026-18726 Open-iscsi: open-iscsi: denial of service in iscsiuio router advertisement parsing — Red Hat Enterprise Linux 10 CWE-835 6.5 Medium 2026-08-12
CVE-2026-19654 Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd — Red Hat Enterprise Linux 10 CWE-125 7.5 High 2026-08-12
CVE-2026-19548 Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing — Red Hat Enterprise Linux 10 CWE-416 5.5 Medium 2026-08-12
CVE-2026-19550 Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes — Red Hat Enterprise Linux 10 CWE-863 8.2 High 2026-08-11
CVE-2026-19546 Dbi: incomplete fix for cve-2026-14380 dbi: arbitrary code execution via caller-influenced profile attribute — Red Hat Enterprise Linux 10 CWE-94 8.8 High 2026-08-11

This page lists every published CVE security advisory associated with Red Hat. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.