Complete feed
Recently updated
Advisories the vendor has revised
Android app · Google Play
Take your CVE monitoring with you.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
High [CVE-2026-13697] Information disclosure and Denial of Service via malformed Cache-Control directives
Information disclosure and Denial of Service via malformed Cache-Control directives. Red Hat rates this important (CVSS 7.4). Weakness: CWE-524. Red Hat lists fixing advisory RHSA-2026:48273 with package nodejs26-main-26.5.1-1.5.hum1, nodejs24-main-24.18.1-0.1.hum1.
High [CVE-2026-55707] Shared-network consumer can re-scope another project's subnets via subnetpool onboarding
Shared-network consumer can re-scope another project's subnets via subnetpool onboarding. Red Hat rates this important (CVSS 7.1). Weakness: CWE-863.
High [CVE-2026-55995] Denial of Service via double-free in iSNS attribute decoder
Denial of Service via double-free in iSNS attribute decoder. Red Hat rates this important (CVSS 7.5). Weakness: CWE-763. Red Hat lists fixing advisory RHSA-2026:53848 with package isns-utils-0:0.103-1.el10_2.1, isns-utils-0:0.99-1.el8_10.1, isns-utils-0:0.101-4.el9_8.1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
High [CVE-2026-67214] Denial of Service via negative size input in non-secure module functions
Denial of Service via negative size input in non-secure module functions. Red Hat rates this important (CVSS 7.5). Weakness: CWE-839. Red Hat lists fixing advisory RHSA-2026:48241 with package grafana13-1-main-13.1.1-0.3.hum1. Affected product named by the advisory: Red Hat Hardened Images.
High [CVE-2026-67213] Denial of Service via infinite loop in random ID generation
Denial of Service via infinite loop in random ID generation. Red Hat rates this important (CVSS 7.5). Weakness: CWE-835. Red Hat lists fixing advisory RHSA-2026:47619 with package jaeger-main-2.20.0-0.6.hum1, grafana13-1-main-13.1.1-0.3.hum1, grafana12-4-main-12.4.6-0.2.hum1.
High [CVE-2026-16308] io.quarkus.resteasy.reactive/resteasy-reactive: Quarkus REST - Unbounded multipart MIME part-header accumulation allows remote OOM denial of service
io.quarkus.resteasy.reactive/resteasy-reactive: Quarkus REST - Unbounded multipart MIME part-header accumulation allows remote OOM denial of service. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:54435 with package rhbk/keycloak-rhel9:26.6-11, rhbk/keycloak-operator-bundle:26.4.14-1, rhbk-keycloak-rhel9/rhbk-keycloak-rhel9, rhbk-openshift-rhel9/rhbk-openshift-rhel9.
High [CVE-2026-44944] Authentication bypass in iscsiuio control socket
Authentication bypass in iscsiuio control socket. Red Hat rates this important (CVSS 7.8). Weakness: CWE-1220. Red Hat lists fixing advisory RHSA-2026:53844 with package iscsi-initiator-utils-0:6.2.1.11-1.git4b3e853.el10_2.2, iscsi-initiator-utils-0:6.2.1.11-1.git4b3e853.el9_8.2. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9.
High [CVE-2026-44943] Privilege Escalation via Path Traversal
Privilege Escalation via Path Traversal. Red Hat rates this important (CVSS 8.6). Weakness: CWE-22. Red Hat lists fixing advisory RHSA-2026:53844 with package iscsi-initiator-utils-0:6.2.1.11-1.git4b3e853.el10_2.2, iscsi-initiator-utils-0:6.2.1.11-1.git4b3e853.el9_8.2. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9.
High [CVE-2026-18220] Out-of-bounds write in BFD DLX ELF backend relocation processing
Out-of-bounds write in BFD DLX ELF backend relocation processing. Red Hat rates this important (CVSS 7.8). Weakness: CWE-787.
High [CVE-2026-64556] Detach event groups during remove_on_exec
Detach event groups during remove_on_exec. Red Hat rates this moderate (CVSS 7). Weakness: CWE-663.
High [CVE-2026-64557] Fix use-after-free in l2cap_sock_new_connection_cb
Fix use-after-free in l2cap_sock_new_connection_cb(). Red Hat rates this moderate (CVSS 7). Weakness: CWE-825.
High [CVE-2026-64558] Check length in pkey_pckmo handler implementation
Check length in pkey_pckmo handler implementation. Red Hat rates this important (CVSS 7). Weakness: CWE-787.
High [CVE-2026-64559] Check length in PKEY_VERIFYPROTK ioctl
Check length in PKEY_VERIFYPROTK ioctl. Red Hat rates this moderate (CVSS 7). Weakness: CWE-805.
High [CVE-2026-64560] Prevent UAF caused by non-leader exec race
Prevent UAF caused by non-leader exec() race. Red Hat rates this important (CVSS 7). Weakness: CWE-364.
Medium [CVE-2026-62343] Denial of Service via heap buffer over-write in morphology operation with invalid kernel
Denial of Service via heap buffer over-write in morphology operation with invalid kernel. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-805.
Medium [CVE-2026-64685] Information Disclosure via Crafted Image File
Information Disclosure via Crafted Image File. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-125.
Medium [CVE-2026-15157] HTTP header injection via unvalidated blob-like body type property
HTTP header injection via unvalidated blob-like body type property. Red Hat rates this moderate (CVSS 4.2). Weakness: CWE-93. Red Hat lists fixing advisory RHSA-2026:48273 with package nodejs26-main-26.5.1-1.5.hum1, nodejs24-main-24.18.1-0.1.hum1.
Medium [CVE-2026-14643] Cross-user information disclosure due to improper Cache-Control directive parsing
Cross-user information disclosure due to improper Cache-Control directive parsing. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-524. Red Hat lists fixing advisory RHSA-2026:48273 with package nodejs26-main-26.5.1-1.5.hum1, nodejs24-main-24.18.1-0.1.hum1.
Medium [CVE-2026-16728] Response desynchronization via retry interceptor with mismatched Content-Length
Response desynchronization via retry interceptor with mismatched Content-Length. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-444. Red Hat lists fixing advisory RHSA-2026:48273 with package nodejs26-main-26.5.1-1.5.hum1, nodejs24-main-24.18.1-0.1.hum1.
Medium [CVE-2026-54249] Information disclosure through unvalidated file references.
Information disclosure through unvalidated file references. Red Hat rates this moderate (CVSS 6.8). Weakness: CWE-918.