Complete feed
Recently updated
Advisories the vendor has revised
Android app · Google Play
Take your CVE monitoring with you.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Medium [CVE-2026-59881] Denial of Service via unnegotiated WebSocket compression
Denial of Service via unnegotiated WebSocket compression. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-409. Affected products named by the advisory: Exploit Intelligence; Lightspeed Core; Migration Toolkit for Applications 8; OpenShift Lightspeed; and 12 more. Affected products named by the advisory: Red Hat AI Inference Server; Red Hat Ansible Automation Platform 2; Red Hat Ansible Automation Platform Ansible Core 2; Red Hat Discovery 2; and 8 more.
Medium [CVE-2026-12996] Denial of Service or memory leak via crafted packets
Denial of Service or memory leak via crafted packets. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-825.
Medium [CVE-2026-11771] Denial of Service via crafted NTLM proxy response
Denial of Service via crafted NTLM proxy response. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-787.
Medium [CVE-2026-13117] Denial of service or memory leakage via incomplete TLS guard
Denial of service or memory leakage via incomplete TLS guard. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-825.
Medium [CVE-2026-60074] Date::Manip: Incorrect date parsing leads to logic errors
Date::Manip: Incorrect date parsing leads to logic errors. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-681.
Medium [CVE-2026-7260] Denial of Service via circular symbolic links in phar archives
Denial of Service via circular symbolic links in phar archives. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-606. Red Hat lists fixing advisory RHSA-2026:47200 with package php-main-8.5.9-1.hum1.
Medium [CVE-2026-18369] ACME HTTP-01 validation SSRF via IP literal identifiers and unvalidated redirects
ACME HTTP-01 validation SSRF via IP literal identifiers and unvalidated redirects. Red Hat rates this moderate (CVSS 5.8). Weakness: CWE-918.
Medium [CVE-2026-56850] mTLS client identities can be reused due to HTTPS Agent connection flaw
mTLS client identities can be reused due to HTTPS Agent connection flaw. Red Hat rates this moderate (CVSS 4.1). Weakness: CWE-303. Red Hat lists fixing advisory RHSA-2026:48273 with package nodejs26-main-26.5.1-1.5.hum1, nodejs22-main-22.23.2-2.3.hum1, nodejs24-main-24.18.1-0.1.hum1.
Medium [CVE-2026-58040] HTTPS Agent TLS session reuse skips hostname verification
HTTPS Agent TLS session reuse skips hostname verification. Red Hat rates this moderate (CVSS 6.3). Weakness: CWE-322. Red Hat lists fixing advisory RHSA-2026:48273 with package nodejs26-main-26.5.1-1.5.hum1, nodejs22-main-22.23.2-2.3.hum1, nodejs24-main-24.18.1-0.1.hum1.
Medium [CVE-2026-16531] Arbitrary file creation via path traversal in pmproxy logger servlet
Arbitrary file creation via path traversal in pmproxy logger servlet. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-22. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4.
Medium [CVE-2026-16530] Remote denial of service and information leakage
Remote denial of service and information leakage. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4.
Medium [CVE-2026-18019] Side-channel information leakage in Media
Side-channel information leakage in Media. Red Hat rates this low (CVSS 4.3). Weakness: CWE-205.
Medium [CVE-2026-18015] Inappropriate implementation in Tint
Inappropriate implementation in Tint. Red Hat rates this low (CVSS 4.3). Weakness: CWE-653.
Medium [CVE-2026-18017] Use after free in Dawn
Use after free in Dawn. Red Hat rates this low (CVSS 4.3).
Medium [CVE-2026-18012] Use after free in PDFium
Use after free in PDFium. Red Hat rates this low (CVSS 4.3). Weakness: CWE-825.
Medium [CVE-2026-18008] Inappropriate implementation in Settings
Inappropriate implementation in Settings. Red Hat rates this low (CVSS 4.3). Weakness: CWE-1021.
Medium [CVE-2026-18009] Insufficient validation of untrusted input in Passwords
Insufficient validation of untrusted input in Passwords. Red Hat rates this low (CVSS 4.3). Weakness: CWE-290.
Medium [CVE-2026-18005] Inappropriate implementation in WebXR
Inappropriate implementation in WebXR. Red Hat rates this low (CVSS 4.3). Weakness: CWE-825.
Medium [CVE-2026-18002] Insufficient validation of untrusted input in Google Lens
Insufficient validation of untrusted input in Google Lens. Red Hat rates this low (CVSS 5). Weakness: CWE-1289.
Medium [CVE-2026-17999] Incorrect security UI in PictureInPicture
Incorrect security UI in PictureInPicture. Red Hat rates this low (CVSS 4.3). Weakness: CWE-368.