Complete feed
Security advisories & CVEs
3251 advisories across 32 monitored vendors.
Android app · Google Play
Take your CVE monitoring with you.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Medium [CVE-2026-71084] Denial of Service via unauthenticated local access
Denial of Service via unauthenticated local access. Red Hat rates this moderate (CVSS 6.8). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: mysql-connector-odbc.
Medium [CVE-2026-71079] Denial of Service via network access by a low privileged attacker
Denial of Service via network access by a low privileged attacker. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-770. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: mysql-connector-odbc.
Medium [CVE-2026-76042] Information disclosure via uninitialized resource in GPU
Information disclosure via uninitialized resource in GPU. Red Hat rates this moderate (CVSS 6.8). Weakness: CWE-824.
Medium [CVE-2026-16732] Request spoofing via numeric trustProxy configuration
Request spoofing via numeric trustProxy configuration. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-501. Affected products named by the advisory: Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenShift AI (RHOAI); Red Hat OpenShift Dev Spaces.
Medium [CVE-2026-18504] Schema validation bypass via root primitive coercion mismatch
Schema validation bypass via root primitive coercion mismatch. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-843. Affected products named by the advisory: Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenShift AI (RHOAI); Red Hat OpenShift Dev Spaces.
Medium [CVE-2026-49452] CSS Injection via Presentational Hints
WeasyPrint helps web developers to create PDF documents. Prior to 69.0, WeasyPrint embeds unescaped HTML presentational-hint attribute values into CSS in weasyprint/css/__init__.py when presentational_hints=True. The background attribute is inserted into a background-image:url() declaration and parsed by tinycss2.parse_blocks_contents(), allowing untrusted HTML to inject additional CSS declarations. Applications that render untrusted HTML with presentational hints enabled can be affected by CSS injection and server-side requests through injected url() values. This issue is fixed in version 69.0. This vulnerability allows a remote attacker to inject arbitrary CSS, potentially leading to information disclosure or the initiation of server-side requests through specially crafted url() values. Red Hat Ansible Automation Platform 2.5 ships WeasyPrint 69.0, which already includes the fix for this vulnerability, and is therefore not affected. The WeasyPrint package in EPEL ships a version within the vulnerable range. Red Hat severity: Moderate — CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N). Weakness: CWE-79.
Medium [CVE-2026-66781] IPsec PSK stored cleartext in Submariner CR spec
IPsec PSK stored cleartext in Submariner CR spec. Red Hat rates this important (CVSS 6.5). Weakness: CWE-312. Red Hat lists fixing advisory RHSA-2026:60391 with package rhacm2/submariner-addon-rhel9:1787362694, rhacm2/submariner-addon-rhel9:1787689013, rhacm2/submariner-addon-rhel9:1787365971, rhacm2/submariner-addon-rhel9:1787362658. Affected products named by the advisory: Red Hat Advanced Cluster Management for Kubernetes 2.11; Red Hat Advanced Cluster Management for Kubernetes 2.13; Red Hat Advanced Cluster Management for Kubernetes 2.14; Red Hat Advanced Cluster Management for Kubernetes 2.15; and 2 more. Affected products named by the advisory: Red Hat Advanced Cluster Management for Kubernetes 2.16; Red Hat Advanced Cluster Management for Kubernetes 2.17.
Medium [CVE-2026-75485] cluster Proxy object dumped raw, bypassing inspect redaction of proxy basic-auth credentials
cluster Proxy object dumped raw, bypassing inspect redaction of proxy basic-auth credentials. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-532. Red Hat lists fixing advisory RHSA-2026:60391 with package rhacm2/acm-must-gather-rhel9:1787238730, rhacm2/acm-must-gather-rhel9:1787263322, rhacm2/acm-must-gather-rhel9:1787260453, rhacm2/acm-must-gather-rhel9:1787228698. Affected products named by the advisory: Red Hat Advanced Cluster Management for Kubernetes 2.11; Red Hat Advanced Cluster Management for Kubernetes 2.13; Red Hat Advanced Cluster Management for Kubernetes 2.14; Red Hat Advanced Cluster Management for Kubernetes 2.15; and 2 more. Affected products named by the advisory: Red Hat Advanced Cluster Management for Kubernetes 2.16; Red Hat Advanced Cluster Management for Kubernetes 2.17.
Medium [CVE-2026-73834] embedded Secret data in ACM wrapper CRs collected without redaction
embedded Secret data in ACM wrapper CRs collected without redaction. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-312. Red Hat lists fixing advisory RHSA-2026:60391 with package rhacm2/acm-must-gather-rhel9:1787238730, rhacm2/acm-must-gather-rhel9:1787263322, rhacm2/acm-must-gather-rhel9:1787260453, rhacm2/acm-must-gather-rhel9:1787228698. Affected products named by the advisory: Red Hat Advanced Cluster Management for Kubernetes 2.11; Red Hat Advanced Cluster Management for Kubernetes 2.13; Red Hat Advanced Cluster Management for Kubernetes 2.14; Red Hat Advanced Cluster Management for Kubernetes 2.15; and 2 more. Affected products named by the advisory: Red Hat Advanced Cluster Management for Kubernetes 2.16; Red Hat Advanced Cluster Management for Kubernetes 2.17.
Medium [CVE-2026-75032] Out-of-bounds read in AVRCP parse_media_element and parse_media_folder
Out-of-bounds read in AVRCP parse_media_element and parse_media_folder. Red Hat rates this moderate (CVSS 6.3). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
Medium [CVE-2026-74989] Internally found bugs fixed in Firefox 154
Internally found bugs fixed in Firefox 154. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-825.
Medium [CVE-2026-74966] Information disclosure in the Form Autofill component
Information disclosure in the Form Autofill component. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-359.
Medium [CVE-2026-74968] Site isolation issue in the Graphics: WebRender component
Site isolation issue in the Graphics: WebRender component. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-501.
Medium [CVE-2026-74970] Site isolation issue in the Graphics component
Site isolation issue in the Graphics component. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-501.
Medium [CVE-2026-74961] Side-channel in the Web Audio component
Side-channel in the Web Audio component. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-208.
Medium [CVE-2026-74955] Privilege escalation in the Request Handling component
Privilege escalation in the Request Handling component. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-551.
Medium [CVE-2026-74956] Same-origin policy bypass in the DOM: Service Workers component
Same-origin policy bypass in the DOM: Service Workers component. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-346.
Medium [CVE-2026-74954] Information disclosure due to side-channel in the Storage: Cache API component
Information disclosure due to side-channel in the Storage: Cache API component. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-524.
Medium [CVE-2026-74958] Information disclosure in the WebRTC component
Information disclosure in the WebRTC component. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-201.
Medium [CVE-2026-74950] Privilege escalation in the Downloads API component
Privilege escalation in the Downloads API component. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-648.