Complete feed
Security advisories & CVEs
5206 advisories across 32 monitored vendors.
Android app · Google Play
Take your CVE monitoring with you.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Critical [CVE-2026-5279] Object corruption in V8
Object corruption in V8. Red Hat rates this important (CVSS 9.6). Weakness: CWE-843. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-4800] Arbitrary code execution via untrusted input in template imports
Arbitrary code execution via untrusted input in template imports. Red Hat rates this important (CVSS 8.1). Weakness: CWE-94. Affected package(s): odf4/ocs-client-console-rhel9:1778050558, odf4/mcg-core-rhel9:1776403991, cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9:1782839996, odf4/ocs-client-rhel9-operator:1778049818, odf4/odf-cloudnative-pg-rhel9-operator:1776406131, satellite/iop-remediations-rhel9:1776194798. Resolved in Red Hat advisory RHSA-2026:29795 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Ansible Automation Platform 2.6 for RHEL 9; Cryostat 4 on RHEL 9; Red Hat Enterprise Linux AppStream (v. 10); Red Hat Enterprise Linux High Availability EUS (v. 10.0); and 84 more.
High [CVE-2026-34070] path traversal in legacy load_prompt functions in langchain-core
path traversal in legacy load_prompt functions in langchain-core. Red Hat rates this important (CVSS 7.5). Weakness: CWE-22. Affected package(s): ansible-automation-platform. Resolved in Red Hat advisory RHSA-2026:24766 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Ansible Automation Platform 2.5; Red Hat OpenShift AI 3.3; OpenShift Lightspeed.
High [CVE-2026-33997] Privilege validation bypass during plugin installation
Privilege validation bypass during plugin installation. Red Hat rates this important (CVSS 8.4). Weakness: CWE-266. Affected package(s): multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1780167118, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1778867753, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779579439. Resolved in Red Hat advisory RHSA-2026:21769 — update the affected packages (`sudo dnf update`). Affected product named by the advisory: Red Hat multicluster global hub 1.4.3.
High [CVE-2026-34040] Authorization bypass vulnerability
Authorization bypass vulnerability. Red Hat rates this moderate (CVSS 8.4). Weakness: CWE-807. Affected package(s): multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779925273, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1780167118, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1778867753, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779579439. Resolved in Red Hat advisory RHSA-2026:21769 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-5201] Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image
Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image. Red Hat rates this important (CVSS 7.5). Weakness: CWE-122. Affected package(s): gdk-pixbuf2, rhaiis/vllm-rocm-rhel9:1778244531, rhaiis/vllm-cuda-rhel9:1779223654, rhaiis/vllm-cuda-rhel9:1778274666, rhaiis/vllm-spyre-rhel9:1778244546, rhaiis/model-opt-cuda-rhel9:1780681984. Resolved in Red Hat advisory RHSA-2026:10707 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.2 Advanced Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; and 12 more.
High [CVE-2026-5283] Inappropriate implementation in ANGLE
Inappropriate implementation in ANGLE. Red Hat rates this important (CVSS 7.4). Weakness: CWE-346. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-2950] Prototype pollution allows deletion of built-in prototype properties via array path bypass
Prototype pollution allows deletion of built-in prototype properties via array path bypass. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-915. Affected package(s): nodejs20-main, rhdh/rhdh-hub-rhel9:1780930740, nodejs25-main, yarnpkg-main. Resolved in Red Hat advisory RHSA-2026:7655 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-34043] Denial of Service via specially crafted array-like object serialization
Denial of Service via specially crafted array-like object serialization. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-835. Affected package(s): openshift4/ose-networking-console-plugin-rhel9:1778256287, dotnet8.0, openshift4/ose-networking-console-plugin-rhel9:1778644858, openshift4/ose-networking-console-plugin-rhel9:1779256322, openshift4/ose-networking-console-plugin-rhel9:1782211435, openshift4/ose-networking-console-plugin-rhel9:1778532500. Resolved in Red Hat advisory RHSA-2026:21291 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8.
Medium [CVE-2026-5282] Out of bounds read in WebCodecs
Out of bounds read in WebCodecs. Red Hat rates this important (CVSS 6.5). Weakness: CWE-125. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-5276] Insufficient policy enforcement in WebUSB
Insufficient policy enforcement in WebUSB. Red Hat rates this important (CVSS 6.5). Weakness: CWE-280. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
Low [CVE-2026-34073] Security bypass due to improper DNS name constraint validation
Security bypass due to improper DNS name constraint validation. Red Hat rates this low (CVSS 3.7). Weakness: CWE-295. Affected package(s): python-cryptography-main. Resolved in Red Hat advisory RHSA-2026:7295 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Critical [CVE-2025-15379] Arbitrary command execution via command injection in model serving container initialization.
Arbitrary command execution via command injection in model serving container initialization.. Red Hat rates this important (CVSS 9). Weakness: CWE-78. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat OpenShift AI (RHOAI).
Critical [CVE-2025-15036] Path traversal vulnerability allows arbitrary file overwrite and privilege escalation
Path traversal vulnerability allows arbitrary file overwrite and privilege escalation. Red Hat rates this important (CVSS 9.6). Weakness: CWE-22. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat OpenShift AI (RHOAI).
High [CVE-2026-33987] Memory corruption vulnerability allows denial of service or arbitrary code execution
Memory corruption vulnerability allows denial of service or arbitrary code execution. Red Hat rates this moderate (CVSS 7.8). Weakness: CWE-131. Affected package(s): freerdp. Resolved in Red Hat advisory RHSA-2026:16014 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 1.
High [CVE-2026-33986] Arbitrary code execution or denial of service via H.264 codec memory allocation vulnerability
Arbitrary code execution or denial of service via H.264 codec memory allocation vulnerability. Red Hat rates this important (CVSS 7.5). Weakness: CWE-131. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-33984] Heap buffer overflow allows arbitrary code execution via crafted pixel data
Heap buffer overflow allows arbitrary code execution via crafted pixel data. Red Hat rates this important (CVSS 7.5). Weakness: CWE-131. Affected package(s): freerdp. Resolved in Red Hat advisory RHSA-2026:8945 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.2 Advanced Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 9 more.
High [CVE-2026-33983] Denial of Service via specially crafted Remote Desktop Protocol messages
Denial of Service via specially crafted Remote Desktop Protocol messages. Red Hat rates this important (CVSS 7.5). Weakness: CWE-190. Affected package(s): freerdp. Resolved in Red Hat advisory RHSA-2026:8945 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.2 Advanced Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 9 more.
High [CVE-2026-21710] Denial of Service due to crafted HTTP `__proto__` header
Denial of Service due to crafted HTTP `__proto__` header. Red Hat rates this important (CVSS 7.5). Weakness: CWE-843. Affected package(s): nodejs:20, nodejs:22, nodejs22, nodejs24, nodejs:24. Resolved in Red Hat advisory RHSA-2026:7350 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.4 Extended Update Support; Red Hat Enterprise Linux 9.6 Extended Update Support.
High [CVE-2026-34714] Arbitrary code execution via crafted file
Arbitrary code execution via crafted file. Red Hat rates this important (CVSS 8.6). Weakness: CWE-917. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.