Complete feed
Action required
Critical/high still unreviewed, or CISA KEV listed
Android app · Google Play
Take your CVE monitoring with you.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
High [CVE-2026-70428] Arbitrary file write via path traversal
Arbitrary file write via path traversal. Red Hat rates this important (CVSS 8.8). Weakness: CWE-22. Red Hat lists fixing advisory RHSA-2026:60250 with package ocp-tools-4/jenkins-rhel8:1786533565, ocp-tools-4/jenkins-rhel9:1787124635, ocp-tools-4/jenkins-rhel9:1787124925, ocp-tools-4/jenkins-rhel9:1787125069. Affected product named by the advisory: OpenShift Developer Tools and Services.
High [CVE-2026-70426] Arbitrary code execution via deserialization filter bypass
Arbitrary code execution via deserialization filter bypass. Red Hat rates this important (CVSS 8.3). Weakness: CWE-502. Red Hat lists fixing advisory RHSA-2026:60250 with package ocp-tools-4/jenkins-rhel8:1786533565, ocp-tools-4/jenkins-rhel9:1787124635, ocp-tools-4/jenkins-rhel9:1787124925, ocp-tools-4/jenkins-rhel9:1787125069. Affected product named by the advisory: OpenShift Developer Tools and Services.
High [CVE-2026-70427] Arbitrary file write via crafted archives and symbolic links
Arbitrary file write via crafted archives and symbolic links. Red Hat rates this important (CVSS 8.8). Weakness: CWE-59. Red Hat lists fixing advisory RHSA-2026:60250 with package ocp-tools-4/jenkins-rhel8:1786533565, ocp-tools-4/jenkins-rhel9:1787124635, ocp-tools-4/jenkins-rhel9:1787124925, ocp-tools-4/jenkins-rhel9:1787125069. Affected product named by the advisory: OpenShift Developer Tools and Services.
High [CVE-2026-20263] Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability
A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling when parsing a specific BEEP SOAP request. An attacker could exploit this vulnerability by sending a specific BEEP SOAP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address these vulnerabilities.
High [CVE-2026-20124] Cisco IOS XE Software SNMP Denial of Service Vulnerability
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to improper error handling when parsing SNMP requests. This vulnerability affects all versions of SNMP — Versions 1, 2c, and 3. An attacker could exploit this vulnerability by sending a malformed SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly. The attacker must have the SNMPv1 or v2c read-only or read-write community string or valid SNMPv3 user credentials on the affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. There is a mitigation that addresses this vulnerability.
High [CVE-2026-20301] Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability
A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of malformed XMCP packets. An attacker could exploit this vulnerability by sending a malformed XMCP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload unexpectedly, resulting in a DoS condition. The attacker does not need the XMCP client username to exploit this vulnerability. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. There is a mitigation that addresses this vulnerability.
High [CVE-2026-20200 +1] Cisco Integrated Management Controller Argument Injection Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. Affected products named by the advisory: Unified Computing System (Standalone); Unified Computing System E-Series Software (UCSE).
High [CVE-2026-60023] Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. Deleted or pending answers could be retrieved by unauthorized users through the single-answer read path when the parent question remained visible, exposing answer content that should not have been accessible. Users are recommended to upgrade to version 2.0.2, which fixes the issue.
High [CVE-2026-15572] DCR protocol mapper type-swap policy bypass allows privilege escalation
DCR protocol mapper type-swap policy bypass allows privilege escalation. Red Hat rates this important (CVSS 8.8). Weakness: CWE-843. Red Hat lists fixing advisory RHSA-2026:50848 with package rhbk/keycloak-rhel9:26.6-11, rhbk/keycloak-operator-bundle:26.4.14-1, rhbk/keycloak-rhel9, rhbk/keycloak-rhel9-operator:26.6-11. Affected products named by the advisory: Red Hat build of Keycloak 26.4.14; Red Hat build of Keycloak 26.6.5.
High [CVE-2026-48911] Insufficient Verification of Data Authenticity vulnerability in Apache Answer
Insufficient Verification of Data Authenticity vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. A missing authorization check in the external-login email binding flow allows unauthenticated attackers to take over arbitrary user accounts by tricking victims into clicking a crafted confirmation link. Users are recommended to upgrade to version 2.0.2, which fixes the issue.
High [CVE-2026-48834] Improper Handling of Length Parameter Inconsistency vulnerability in Apache Answer
Improper Handling of Length Parameter Inconsistency vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. Unauthenticated attackers can cause a denial of service via a specially crafted Accept-Language header that triggers excessive CPU consumption during parsing. Users are recommended to upgrade to version 2.0.2, which fixes the issue.
High [CVE-2026-16442] SAML IdP-initiated broker login bypasses link-only restriction
SAML IdP-initiated broker login bypasses link-only restriction. Red Hat rates this important (CVSS 7.4). Weakness: CWE-346. Red Hat lists fixing advisory RHSA-2026:50848 with package rhbk/keycloak-rhel9:26.6-11, rhbk/keycloak-operator-bundle:26.4.14-1, rhbk-keycloak-rhel9/rhbk-keycloak-rhel9, keycloak-services. Affected products named by the advisory: Red Hat build of Keycloak 26.4; Red Hat build of Keycloak 26.6.
High [CVE-2026-16102] Default DCR policy allows role forgery via User Property mappers
Default DCR policy allows role forgery via User Property mappers. Red Hat rates this important (CVSS 8.1). Red Hat lists fixing advisory RHSA-2026:50848 with package rhbk/keycloak-rhel9:26.6-11, rhbk/keycloak-operator-bundle:26.4.14-1, rhbk-keycloak-rhel9/rhbk-keycloak-rhel9, keycloak-services. Affected products named by the advisory: Red Hat build of Keycloak 26.4; Red Hat build of Keycloak 26.6; Red Hat Single Sign-On 7.
High [CVE-2026-15573] Authorization bypass via unnormalized URI matching in PathMatcher
Authorization bypass via unnormalized URI matching in PathMatcher. Red Hat rates this important (CVSS 8.1). Red Hat lists fixing advisory RHSA-2026:50848 with package rhbk/keycloak-rhel9:26.6-11, rhbk/keycloak-operator-bundle:26.4.14-1, rhbk/keycloak-rhel9, keycloak-services. Affected products named by the advisory: Red Hat build of Keycloak 26.4; Red Hat build of Keycloak 26.6; Red Hat Data Grid 8; Red Hat Single Sign-On 7.
High [CVE-2026-16443] SAML broker metadata import disables response signature validation
SAML broker metadata import disables response signature validation. Red Hat rates this important (CVSS 7.4). Weakness: CWE-347. Red Hat lists fixing advisory RHSA-2026:50848 with package rhbk/keycloak-rhel9:26.6-11, rhbk/keycloak-operator-bundle:26.4.14-1, rhbk-keycloak-rhel9/rhbk-keycloak-rhel9, keycloak-services. Affected products named by the advisory: Red Hat build of Keycloak 26.4; Red Hat build of Keycloak 26.6.
High [CVE-2026-71226] Memory corruption via uncanceled AIO requests on error in libkcapi's one-shot AIO path
Memory corruption via uncanceled AIO requests on error in libkcapi's one-shot AIO path. Red Hat rates this moderate (CVSS 7.3). Weakness: CWE-416. Red Hat lists fixing advisory RHSA-2026:56985 with package libkcapi-main-1.5.1-0.1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4.
High [CVE-2026-71287] Blind SQL injection due to improper input sanitization
Blind SQL injection due to improper input sanitization. Red Hat rates this important (CVSS 8.8). Weakness: CWE-89.
High [CVE-2026-71281] Arbitrary Code Execution via Unsafe Deserialization in LoRA-GA and CorDA Modules
Arbitrary Code Execution via Unsafe Deserialization in LoRA-GA and CorDA Modules. Red Hat rates this important (CVSS 8.8). Weakness: CWE-502. Affected products named by the advisory: Lightspeed Core; Red Hat AI Inference Server; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenShift AI (RHOAI).
High [CVE-2026-71267] Stack buffer overflow via overly long filenames
Stack buffer overflow via overly long filenames. Red Hat rates this important (CVSS 8.8). Weakness: CWE-120.
High [CVE-2026-71235] Arbitrary Code Execution via Unrestricted Script Execution
Arbitrary Code Execution via Unrestricted Script Execution. Red Hat rates this important (CVSS 8.8). Weakness: CWE-94. Red Hat lists fixing advisory RHSA-2026:59467 with package oadp/oadp-velero-rhel9:1786944540. Affected products named by the advisory: Assisted Installer for Red Hat OpenShift Container Platform 2; Builds for Red Hat OpenShift; cert-manager Operator for Red Hat OpenShift; Compliance Operator; and 35 more. Affected products named by the advisory: Confidential Compute Attestation; Cryostat 4; Deployment Validation Operator; External Secrets Operator for Red Hat OpenShift; and 31 more.