Complete feed
Security advisories & CVEs
3309 advisories across 32 monitored vendors.
Android app · Google Play
Take your CVE monitoring with you.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
High [CVE-2026-17659] Inappropriate implementation in SiteIsolation
Inappropriate implementation in SiteIsolation. Red Hat rates this important (CVSS 8.7). Weakness: CWE-653.
High [CVE-2026-17658] Use after free in V8
Use after free in V8. Red Hat rates this important (CVSS 8.8). Weakness: CWE-825.
High [CVE-2026-17661] Use after free in Loader
Use after free in Loader. Red Hat rates this important (CVSS 8.8). Weakness: CWE-825.
High [CVE-2026-17657] Use after free in Navigation
Use after free in Navigation. Red Hat rates this important (CVSS 8.2). Weakness: CWE-825.
High [CVE-2026-17654] Race in Updater
Race in Updater. Red Hat rates this critical (CVSS 8.8). Weakness: CWE-367.
High [CVE-2026-18378] cluster pull-secret token exfiltration via user-controlled api_url (SSRF / confused deputy)
cluster pull-secret token exfiltration via user-controlled api_url (SSRF / confused deputy). Red Hat rates this important (CVSS 7.6). Weakness: CWE-918.
High [CVE-2026-18381] operator service-account token exfiltration via user-controlled Prometheus service_address
operator service-account token exfiltration via user-controlled Prometheus service_address. Red Hat rates this important (CVSS 7.6). Weakness: CWE-918.
High [CVE-2026-5056] Arbitrary code execution via stack-based buffer overflow in qtdemux
Arbitrary code execution via stack-based buffer overflow in qtdemux. Red Hat rates this important (CVSS 7.8). Weakness: CWE-121. Red Hat lists fixing advisory RHSA-2026:49508 with package gstreamer1-plugins-good-0:1.26.7-2.el10_2.2. Affected product named by the advisory: Red Hat Enterprise Linux 10.
High [CVE-2026-18022] Arbitrary Code Execution via Integer Wraparound
Arbitrary Code Execution via Integer Wraparound. Red Hat rates this important (CVSS 8.8). Weakness: CWE-787.
High [CVE-2026-67201] Server-Side Request Forgery (SSRF) bypass due to URL parser differential
Server-Side Request Forgery (SSRF) bypass due to URL parser differential. Red Hat rates this important (CVSS 8.6). Weakness: CWE-168.
High [CVE-2026-18255] Global read-only superuser can view robot account tokens
Global read-only superuser can view robot account tokens. Red Hat rates this important (CVSS 7.2). Weakness: CWE-863.
High [CVE-2026-13697] Information disclosure and Denial of Service via malformed Cache-Control directives
Information disclosure and Denial of Service via malformed Cache-Control directives. Red Hat rates this important (CVSS 7.4). Weakness: CWE-524. Red Hat lists fixing advisory RHSA-2026:48273 with package nodejs26-main-26.5.1-1.5.hum1, nodejs24-main-24.18.1-0.1.hum1.
High [CVE-2026-55707] Shared-network consumer can re-scope another project's subnets via subnetpool onboarding
Shared-network consumer can re-scope another project's subnets via subnetpool onboarding. Red Hat rates this important (CVSS 7.1). Weakness: CWE-863.
High [CVE-2026-55995] Denial of Service via double-free in iSNS attribute decoder
Denial of Service via double-free in iSNS attribute decoder. Red Hat rates this important (CVSS 7.5). Weakness: CWE-763. Red Hat lists fixing advisory RHSA-2026:53848 with package isns-utils-0:0.103-1.el10_2.1, isns-utils-0:0.99-1.el8_10.1, isns-utils-0:0.101-4.el9_8.1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
High [CVE-2026-67214] Denial of Service via negative size input in non-secure module functions
Denial of Service via negative size input in non-secure module functions. Red Hat rates this important (CVSS 7.5). Weakness: CWE-839. Red Hat lists fixing advisory RHSA-2026:48241 with package grafana13-1-main-13.1.1-0.3.hum1. Affected product named by the advisory: Red Hat Hardened Images.
High [CVE-2026-67213] Denial of Service via infinite loop in random ID generation
Denial of Service via infinite loop in random ID generation. Red Hat rates this important (CVSS 7.5). Weakness: CWE-835. Red Hat lists fixing advisory RHSA-2026:47619 with package jaeger-main-2.20.0-0.6.hum1, grafana13-1-main-13.1.1-0.3.hum1, grafana12-4-main-12.4.6-0.2.hum1.
High [CVE-2026-16308] io.quarkus.resteasy.reactive/resteasy-reactive: Quarkus REST - Unbounded multipart MIME part-header accumulation allows remote OOM denial of service
io.quarkus.resteasy.reactive/resteasy-reactive: Quarkus REST - Unbounded multipart MIME part-header accumulation allows remote OOM denial of service. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:54435 with package rhbk/keycloak-rhel9:26.6-11, rhbk/keycloak-operator-bundle:26.4.14-1, rhbk-keycloak-rhel9/rhbk-keycloak-rhel9, rhbk-openshift-rhel9/rhbk-openshift-rhel9.
High [CVE-2026-44944] Authentication bypass in iscsiuio control socket
Authentication bypass in iscsiuio control socket. Red Hat rates this important (CVSS 7.8). Weakness: CWE-1220. Red Hat lists fixing advisory RHSA-2026:53844 with package iscsi-initiator-utils-0:6.2.1.11-1.git4b3e853.el10_2.2, iscsi-initiator-utils-0:6.2.1.11-1.git4b3e853.el9_8.2. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9.
High [CVE-2026-44943] Privilege Escalation via Path Traversal
Privilege Escalation via Path Traversal. Red Hat rates this important (CVSS 8.6). Weakness: CWE-22. Red Hat lists fixing advisory RHSA-2026:53844 with package iscsi-initiator-utils-0:6.2.1.11-1.git4b3e853.el10_2.2, iscsi-initiator-utils-0:6.2.1.11-1.git4b3e853.el9_8.2. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9.
High [CVE-2026-18220] Out-of-bounds write in BFD DLX ELF backend relocation processing
Out-of-bounds write in BFD DLX ELF backend relocation processing. Red Hat rates this important (CVSS 7.8). Weakness: CWE-787.