Complete feed
Security advisories & CVEs
2766 advisories across 32 monitored vendors.
Android app · Google Play
Take your CVE monitoring with you.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Medium [CVE-2026-20786] Denial of service via out-of-bounds read
Denial of service via out-of-bounds read. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-125.
Medium [CVE-2026-20783] Denial of Service via improper conditions check
Denial of Service via improper conditions check. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-606.
Medium [CVE-2026-20731] Denial of Service via Improper Buffer Restrictions
Denial of Service via Improper Buffer Restrictions. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-131.
Medium [CVE-2026-73075] Out-of-bounds Access in Popup Opacity Handling
Out-of-bounds Access in Popup Opacity Handling. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-125.
Medium [CVE-2026-73074] Heap buffer overflow via integer wraparound in text property handling
Heap buffer overflow via integer wraparound in text property handling. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-190.
Medium [CVE-2026-19078] Open redirect vulnerability enables phishing via unvalidated parameter.
Open redirect vulnerability enables phishing via unvalidated parameter. Red Hat rates this low (CVSS 4.3). Weakness: CWE-601. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
Medium [CVE-2026-14180] Undertow:HTTP request smuggling via oversized chunk-size bit overlap
Undertow:HTTP request smuggling via oversized chunk-size bit overlap. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-444. Affected products named by the advisory: Red Hat build of Apache Camel for Spring Boot 4; Red Hat build of Apache Camel - HawtIO 4; Red Hat Data Grid 8; Red Hat Enterprise Linux 10; and 9 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Fuse 7; Red Hat JBoss Enterprise Application Platform 7; and 5 more.
Medium [CVE-2026-73070] Stack Buffer Overflow via unbounded socket connections
Stack Buffer Overflow via unbounded socket connections. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-120. Red Hat lists fixing advisory RHSA-2026:56636 with package vim-main-9.2.967-1.hum1.
Medium [CVE-2026-71193] cross-tenant DNS zone overlap via pool-scoped ownership checks when using AttributeFilter scheduler
cross-tenant DNS zone overlap via pool-scoped ownership checks when using AttributeFilter scheduler. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-863. Affected products named by the advisory: Red Hat OpenStack Platform 13 (Queens); Red Hat OpenStack Platform 16.2; Red Hat OpenStack Platform 17.1; Red Hat OpenStack Platform 18.0.
Medium [CVE-2026-71194] mDNS NOTIFY handler DoS via pool-blind zone lookup
mDNS NOTIFY handler DoS via pool-blind zone lookup. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-863. Affected products named by the advisory: Red Hat OpenStack Platform 13 (Queens); Red Hat OpenStack Platform 16.2; Red Hat OpenStack Platform 17.1; Red Hat OpenStack Platform 18.0.
Medium [CVE-2026-73067] Denial of Service due to crafted data model
Denial of Service due to crafted data model. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-125.
Medium [CVE-2026-72745] Information disclosure and memory corruption via malformed Kerberos GSS Wrap token
Information disclosure and memory corruption via malformed Kerberos GSS Wrap token. Red Hat rates this moderate (CVSS 6.4). Weakness: CWE-823. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: freerdp.
Medium [CVE-2026-33922] Arbitrary file deletion via path traversal in Offline archives functionality
Arbitrary file deletion via path traversal in Offline archives functionality. Red Hat rates this moderate (CVSS 6). Weakness: CWE-22.
Medium [CVE-2026-33921] Information disclosure and arbitrary packet sending via insecure access restrictions
Information disclosure and arbitrary packet sending via insecure access restrictions. Red Hat rates this moderate (CVSS 5.2). Weakness: CWE-1188.
Medium [CVE-2026-71218] Unbounded peer-controlled allocation in iperf3 JSON_read allows unauthenticated remote memory exhaustion
Unbounded peer-controlled allocation in iperf3 JSON_read() allows unauthenticated remote memory exhaustion. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-789. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
Medium [CVE-2026-19519] denial of service via unchecked type assertion in RPM header parser
denial of service via unchecked type assertion in RPM header parser. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-617. Affected products named by the advisory: Red Hat Advanced Cluster Security 4; Red Hat Quay 3.
Medium [CVE-2026-19391] Incomplete credential redaction exposes SSSD bind passwords and Pacemaker fence credentials in uploaded archives
Incomplete credential redaction exposes SSSD bind passwords and Pacemaker fence credentials in uploaded archives. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-312. Affected products named by the advisory: Pen Drive Powered by Red Hat Lightspeed; Red Hat Certification Program for Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 10; Red Hat package: insights-core.
Medium [CVE-2026-5304] Privilege escalation via malicious ACAP application installation
Privilege escalation via malicious ACAP application installation. Red Hat rates this moderate (CVSS 5.7). Weakness: CWE-266. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat package: axis.
Medium [CVE-2026-24330] Arbitrary File Read via malicious archive deployment
Arbitrary File Read via malicious archive deployment. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-434. Affected products named by the advisory: Red Hat Fuse 7; Red Hat JBoss Enterprise Application Platform 7; Red Hat JBoss Enterprise Application Platform 8; Red Hat JBoss Enterprise Application Platform Expansion Pack; and 2 more. Affected products named by the advisory: Red Hat Process Automation 7; Red Hat Single Sign-On 7.
Medium [CVE-2026-24329] Denial of Service via malformed payload injection by an authenticated administrative user.
Denial of Service via malformed payload injection by an authenticated administrative user. Red Hat rates this moderate (CVSS 4.9). Weakness: CWE-91. Affected products named by the advisory: Red Hat Fuse 7; Red Hat JBoss Enterprise Application Platform 7; Red Hat JBoss Enterprise Application Platform 8; Red Hat JBoss Enterprise Application Platform Expansion Pack; and 2 more. Affected products named by the advisory: Red Hat Process Automation 7; Red Hat Single Sign-On 7.