VulniPulse uses Google Ads measurement to understand visits from advertisements and campaign performance. It runs cookie-free until you choose — accepting enables cookies for more accurate attribution. Rejecting keeps it cookie-free and never limits the site.
See exactly what is measuredComplete feed
1144 advisories across 32 monitored vendors.
Cross-tenant private SSH key disclosure via taxonomy scoping bypass. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-639. Affected package(s): foreman. Resolved in Red Hat advisory RHSA-2026:34366 — update the affected packages (`sudo dnf update`).
Authenticated users can gain administrative access to OpenShift clusters via credential disclosure. Red Hat rates this important (CVSS 6.1). Weakness: CWE-312. Affected package(s): multicluster-engine/assisted-service. Resolved in Red Hat advisory RHSA-2026:12116 — update the affected packages (`sudo dnf update`).
Improper Access Control on Keycloak Server when the account Account API feature is disabled. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-425. Affected package(s): rhbk/keycloak-operator-bundle:26.4.13, rhbk/keycloak-rhel9-operator:26.4, rhbk/keycloak-rhel9, rhbk/keycloak-rhel9:26.4, rhbk/keycloak-operator-bundle:26.6.3, rhbk/keycloak-rhel9:26.6. Resolved in Red Hat advisory RHSA-2026:30049 — update the affected packages (`sudo dnf update`).
Information disclosure due to incorrect TLS connection reuse. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-319. Affected package(s): curl-main. Resolved in Red Hat advisory RHSA-2026:12916 — update the affected packages (`sudo dnf update`).
Wrong file transfer due to incorrect SMB connection reuse. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-1025. Affected package(s): curl-main. Resolved in Red Hat advisory RHSA-2026:12916 — update the affected packages (`sudo dnf update`).
Proxy credential disclosure via redirects to unauthenticated proxies. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-201. Affected package(s): curl-main. Resolved in Red Hat advisory RHSA-2026:12916 — update the affected packages (`sudo dnf update`).
Authentication bypass due to incorrect HTTP Negotiate connection reuse. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-488. Affected package(s): curl-main. Resolved in Red Hat advisory RHSA-2026:12916 — update the affected packages (`sudo dnf update`).
Credential leak via reused proxy connection during HTTP redirects. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-201. Affected package(s): curl-main. Resolved in Red Hat advisory RHSA-2026:12916 — update the affected packages (`sudo dnf update`).
Use-after-free in gnutls_pkcs11_token_set_pin. Red Hat rates this moderate (CVSS 6.6). Weakness: CWE-825. Affected package(s): rhui5/installer-rhel9:1781525693, libtasn1, gnutls, rhui5/cds-rhel9:1781525684, discovery/discovery-ui-rhel9:1782166952, discovery/discovery-server-rhel9:1782159791. Resolved in Red Hat advisory RHSA-2026:20613 — update the affected packages (`sudo dnf update`).
Memory corruption due to off-by-one error in PKCS#12 bag handling. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-193. Affected package(s): rhui5/installer-rhel9:1781525693, libtasn1, gnutls, rhui5/cds-rhel9:1781525684, discovery/discovery-ui-rhel9:1782166952, discovery/discovery-server-rhel9:1782159791. Resolved in Red Hat advisory RHSA-2026:20613 — update the affected packages (`sudo dnf update`).
Application crash or uninitialized memory read via crafted DNS response. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-1284. Affected package(s): glibc-main. Resolved in Red Hat advisory RHSA-2026:12740 — update the affected packages (`sudo dnf update`).
Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-501. Affected package(s): firefox, thunderbird. Resolved in Red Hat advisory RHSA-2026:19370 — update the affected packages (`sudo dnf update`).
Out-of-bounds write via TSIG record processing. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-120. Affected package(s): glibc-main. Resolved in Red Hat advisory RHSA-2026:12740 — update the affected packages (`sudo dnf update`).
MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-191. Affected package(s): krb5-main, rhui5/haproxy-rhel9:1779798164, krb5, discovery/discovery-ui-rhel9:1782166952, discovery/discovery-server-rhel9:1782159791, rhui5/rhua-rhel9:1779798222. Resolved in Red Hat advisory RHSA-2026:12220 — update the affected packages (`sudo dnf update`).
Denial of Service via NULL pointer dereference in NegoEx mechanism. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-476. Affected package(s): krb5-main, insights-proxy/insights-proxy-container-rhel9:1780420428, rhui5/haproxy-rhel9:1779798164, krb5, discovery/discovery-ui-rhel9:1782166952, discovery/discovery-server-rhel9:1782159791. Resolved in Red Hat advisory RHSA-2026:12220 — update the affected packages (`sudo dnf update`).
Race in MHTML. Red Hat rates this important (CVSS 5.5). Weakness: CWE-368. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released.
Denial of Service via numeric truncation with oversized URIs. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-190. Affected package(s): uriparser-main. Resolved in Red Hat advisory RHSA-2026:12430 — update the affected packages (`sudo dnf update`).
af_alg - limit RX SG extraction by receive buffer budget. Red Hat rates this low (CVSS 5.5). Weakness: CWE-770. Affected package(s): kernel. Resolved in Red Hat advisory RHSA-2026:19074 — update the affected packages (`sudo dnf update`).
Information Disclosure via Server-Side Request Forgery (SSRF) Redirect Bypass. Red Hat rates this important (CVSS 6.5). Weakness: CWE-918. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released.
fix use-after-free on disconnect. Red Hat rates this moderate (CVSS 6.3). Weakness: CWE-825. Affected package(s): kernel, kernel-rt. Resolved in Red Hat advisory RHSA-2026:25120 — update the affected packages (`sudo dnf update`).