VulniPulse uses Google Ads measurement to understand visits from advertisements and campaign performance. It runs cookie-free until you choose — accepting enables cookies for more accurate attribution. Rejecting keeps it cookie-free and never limits the site.
See exactly what is measuredComplete feed
Critical/high still unreviewed, or CISA KEV listed
@remix-run/router: React Router XSS Vulnerability. Red Hat rates this important (CVSS 7.6). Weakness: CWE-79. Affected package(s): rhoai/odh-mod-arch-model-registry-rhel9:1778666987, rhoai/odh-mod-arch-gen-ai-rhel9:1778473763, rhoai/odh-dashboard-rhel9:1779189627, ansible-automation-platform, automation-platform-ui, rhoai/odh-dashboard-rhel9:1772093424. Resolved in Red Hat advisory RHSA-2026:19712 — update the affected packages (`sudo dnf update`).
Remote Code Execution via JNDI Injection due to autoType mishandling. Red Hat rates this critical (CVSS 10). Weakness: CWE-829. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released.
Stored Cross-Site Scripting via GitLab Flavored Markdown. Red Hat rates this important (CVSS 8.7). Weakness: CWE-79. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released.
Unauthorized access to AI model settings via namespace identifier manipulation. Red Hat rates this important (CVSS 7.1). Weakness: CWE-862. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released.
Cross-Site Scripting Vulnerability Leading to Arbitrary Code Execution. Red Hat rates this important (CVSS 8). Weakness: CWE-79. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released.
Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF. Red Hat rates this important (CVSS 9.6). Weakness: CWE-20. Affected package(s): eap8-wildfly, eap8-undertow, eap8-apache-cxf, eap8-wildfly-clustering, eap8-bouncycastle, eap7-undertow. Resolved in Red Hat advisory RHSA-2026:3889 — update the affected packages (`sudo dnf update`).
Integrity loss of firewall configuration via improper neutralization of argument delimiters. Red Hat rates this important (CVSS 7.8). Weakness: CWE-88. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released.
Unauthorized PVC Cloning via DataImportCron. Red Hat rates this important (CVSS 8.5). Weakness: CWE-639. Affected package(s): container-native-virtualization/ovs-cni-plugin-rhel9:v4.19.17, container-native-virtualization/vm-network-latency-checkup-rhel9:v4.19.17, container-native-virtualization/kubesecondarydns-rhel9:v4.19.17, container-native-virtualization/aaq-controller-rhel9:v4.19.17, container-native-virtualization/kubevirt-template-validator-rhel9:v4.19.17, container-native-virtualization/virt-handler-rhel9:v4.19.17. Resolved in Red Hat advisory RHSA-2026:0950 — update the affected packages (`sudo dnf update`).
Signed to Unsigned Conversion Error Leading to Stack-Based Buffer Overflow in libsoup NTLM Authentication. Red Hat rates this important (CVSS 8.6). Weakness: CWE-121. Affected package(s): libsoup, spice-client-win, devspaces/pluginregistry-rhel9:1770918006, devspaces/openvsx-rhel9:1770851052, devspaces/udi-rhel9:1770913862, libsoup3. Resolved in Red Hat advisory RHSA-2026:2513 — update the affected packages (`sudo dnf update`).
Denial of Service via rate-limiting component. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released.
Denial of Service via crafted request to get_password.php. Red Hat rates this important (CVSS 7.5). Weakness: CWE-606. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released.
Remote code execution via invalid n_discard parameter in server endpoints. Red Hat rates this important (CVSS 8.1). Weakness: CWE-787. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released.
urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API). Red Hat rates this important (CVSS 7.5). Weakness: CWE-409. Affected package(s): rhacm2/submariner-globalnet-rhel9:1774550347, oadp/oadp-velero-rhel9:1770421082, rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9:1771502845, rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9:1770103255, python3.12-urllib3, rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9:1771502910. Resolved in Red Hat advisory RHSA-2026:2456 — update the affected packages (`sudo dnf update`).
pnpm code execution. Red Hat rates this important (CVSS 8.8). Weakness: CWE-693. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released.
pnpm Lockfile Integrity Bypass. Red Hat rates this important (CVSS 7.5). Weakness: CWE-494. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released.
Arbitrary code execution via buffer overflow in untgz utility. Red Hat rates this important (CVSS 8.6). Weakness: CWE-120. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released.
Host verification bypass during SSH transfers. Red Hat rates this low (CVSS 8.1). Weakness: CWE-358. Affected package(s): curl-main. Resolved in Red Hat advisory RHSA-2026:6893 — update the affected packages (`sudo dnf update`).
Denial of Service via specially crafted POST request. Red Hat rates this moderate (CVSS 7.5). Weakness: CWE-835. Affected package(s): ansible-automation-platform, rhaiis/vllm-cuda-rhel9:1774351144, rhoai/odh-caikit-nlp-rhel9:1780069094, rhoai/odh-vllm-gaudi-rhel9:1772093278, rhaiis/model-opt-cuda-rhel9:1774547384, rhoai/odh-vllm-cpu-rhel9:1776259063. Resolved in Red Hat advisory RHSA-2026:10184 — update the affected packages (`sudo dnf update`).
AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Affected package(s): automation-controller, rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9:1771502844, ansible-automation-platform, rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9:1770053721, rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9:1770055428, rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9:1771502845. Resolved in Red Hat advisory RHSA-2026:2106 — update the affected packages (`sudo dnf update`).
jsPDF Local File Inclusion/Path Traversal vulnerability. Red Hat rates this important (CVSS 8.6). Weakness: CWE-73. Affected package(s): advanced-cluster-security/rhacs-main-rhel8:1770250889, advanced-cluster-security/rhacs-main-rhel8:1770074713, advanced-cluster-security/rhacs-main-rhel8:1769615659. Resolved in Red Hat advisory RHSA-2026:2568 — update the affected packages (`sudo dnf update`).