VulniPulse uses Google Ads measurement to understand visits from advertisements and campaign performance. It runs cookie-free until you choose — accepting enables cookies for more accurate attribution. Rejecting keeps it cookie-free and never limits the site.
See exactly what is measuredComplete feed
1151 advisories across 32 monitored vendors.
Information disclosure via authenticated path traversal. Red Hat rates this important (CVSS 6.5). Weakness: CWE-22. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released.
File overwrite via drive-relative symlink traversal. Red Hat rates this moderate (CVSS 6.2). Weakness: CWE-22. Affected package(s): devspaces/dashboard-rhel9:1779341289, devspaces/code-rhel9:1779814592. Resolved in Red Hat advisory RHSA-2026:21772 — update the affected packages (`sudo dnf update`).
Denial of Service via path traversal in D-Bus locale configuration. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-22. Affected package(s): dnf5-main. Resolved in Red Hat advisory RHSA-2026:7349 — update the affected packages (`sudo dnf update`).
Denial of Service via out-of-bounds read in SFTP extension name handler. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-125. Affected package(s): libssh-main. Resolved in Red Hat advisory RHSA-2026:7067 — update the affected packages (`sudo dnf update`).
Heap-based buffer overflow in pnm2png allows information disclosure and denial of service. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-131. Affected package(s): libpng-main. Resolved in Red Hat advisory RHSA-2026:6732 — update the affected packages (`sudo dnf update`).
URLs in meta content attribute actions are not escaped in html/template. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-79. Affected package(s): golang1. Resolved in Red Hat advisory RHSA-2026:7291 — update the affected packages (`sudo dnf update`).
rpc.mountd in the nfs-utils privilege escalation. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-279. Affected package(s): nfs-utils, rhcos, rhceph/rhceph. Resolved in Red Hat advisory RHSA-2026:5606 — update the affected packages (`sudo dnf update`).
Denial of Service via recursive data structures in flatten and isEqual functions. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-606. Affected package(s): rhdh/rhdh-hub-rhel9:1777903262, rhdh/rhdh-hub-rhel9:1780930740, rhdh/rhdh-hub-rhel9:1776784286. Resolved in Red Hat advisory RHSA-2026:13826 — update the affected packages (`sudo dnf update`).
Information disclosure or denial of service via specially crafted font files. Red Hat rates this moderate (CVSS 5.3). Affected package(s): java, freetype-main. Resolved in Red Hat advisory RHSA-2026:11822 — update the affected packages (`sudo dnf update`).
Information disclosure via specially crafted XCOFF object file. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-125. Affected package(s): binutils-main. Resolved in Red Hat advisory RHSA-2026:33527 — update the affected packages (`sudo dnf update`).
Information disclosure or denial of service via out-of-bounds read in bfd linker. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-125. Affected package(s): binutils-main. Resolved in Red Hat advisory RHSA-2026:33527 — update the affected packages (`sudo dnf update`).
Improper Access Control Leading to MFA Deletion and Account Takeover in Keycloak Account REST API. Red Hat rates this moderate (CVSS 4.2). Weakness: CWE-284. Affected package(s): rhbk/keycloak-operator-bundle:26.4.11, rhbk/keycloak-rhel9, rhbk/keycloak-rhel9-operator:26.4, rhbk/keycloak-rhel9:26.4. Resolved in Red Hat advisory RHSA-2026:6478 — update the affected packages (`sudo dnf update`).
Denial of service and information disclosure via crafted swap file. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-120. Affected package(s): rhcos, rhaiis/vllm-rocm-rhel9:1778244531, rhui5/cds-kubernetes-tp-rhel9:1777459441, rhui5/haproxy-rhel9:1776868744, rhui5/installer-rhel9:1776868772, vim. Resolved in Red Hat advisory RHSA-2026:6915 — update the affected packages (`sudo dnf update`).
Arbitrary code execution via OS command injection in the netrw plugin. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-78. Affected package(s): rhcos, rhaiis/vllm-rocm-rhel9:1778244531, rhui5/cds-kubernetes-tp-rhel9:1777459441, rhui5/haproxy-rhel9:1776868744, rhui5/installer-rhel9:1776868772, vim. Resolved in Red Hat advisory RHSA-2026:6915 — update the affected packages (`sudo dnf update`).
Denial of Service due to malformed HTTP/2 frames. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-476. Affected package(s): openshift-pipelines/pipelines-operator-bundle:1781686494, openshift-pipelines/pipelines-rhel9-operator:1780645012, golang1. Resolved in Red Hat advisory RHSA-2026:7385 — update the affected packages (`sudo dnf update`).
Denial of Service via catastrophic backtracking in glob expressions. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-1333. Affected package(s): quay/quay-rhel9:1775069491, nodejs:20, nodejs:22, rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:1776336652, devspaces/openvsx-rhel9:1779528224, satellite/iop-advisor-frontend-rhel9:1781181673. Resolved in Red Hat advisory RHSA-2026:13826 — update the affected packages (`sudo dnf update`).
Denial of Service via crafted PDF. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-1050. Affected package(s): rhoai/odh-llama-stack-core-rhel9:1775144403. Resolved in Red Hat advisory RHSA-2026:10184 — update the affected packages (`sudo dnf update`).
Denial of Service via endless blocking loop in Stream_EnsureCapacity. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-190. Affected package(s): freerdp. Resolved in Red Hat advisory RHSA-2026:19811 — update the affected packages (`sudo dnf update`).
Denial of Service via double free vulnerability during disconnect. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-825. Affected package(s): freerdp. Resolved in Red Hat advisory RHSA-2026:19142 — update the affected packages (`sudo dnf update`).
Denial of service via heap use-after-free during auto-reconnect. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-825. Affected package(s): freerdp. Resolved in Red Hat advisory RHSA-2026:16014 — update the affected packages (`sudo dnf update`).