Complete feed
Security advisories & CVEs
1781 advisories across 32 monitored vendors.
Android app · Google Play
Take your CVE monitoring with you.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Medium [CVE-2026-72585] Authorization bypass allows Editor to delete protected contact points
Authorization bypass allows Editor to delete protected contact points. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-284. Affected products named by the advisory: Multicluster Global Hub; Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Ceph Storage 5; Red Hat Ceph Storage 6; and 3 more. Affected products named by the advisory: Red Hat Ceph Storage 7; Red Hat Ceph Storage 9; Red Hat Hardened Images.
Medium [CVE-2026-66486] GNU cpio: Terminal control sequence injection via crafted archive member names
GNU cpio: Terminal control sequence injection via crafted archive member names. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-94. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: cpio.
Medium [CVE-2026-66485] GNU cpio: Denial of Service via uncontrolled memory allocation from crafted archives
GNU cpio: Denial of Service via uncontrolled memory allocation from crafted archives. Red Hat rates this moderate (CVSS 5). Weakness: CWE-120. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: cpio.
Medium [CVE-2026-71394] use of uninitialized memory via a malicious font file
use of uninitialized memory via a malicious font file. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-1284.
Medium [CVE-2026-55814] Information disclosure via missing authentication in download APIs
Information disclosure via missing authentication in download APIs. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-306.
Medium [CVE-2026-65945] Logs contain replayable JWT tokens in Apache Ranger versions <= 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue
Logs contain replayable JWT tokens in Apache Ranger versions <= 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue.
Medium [CVE-2026-19404] missing authorization allows anonymous clients to start or abort CleanAllRUV replication maintenance
missing authorization allows anonymous clients to start or abort CleanAllRUV replication maintenance. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-862.
Medium [CVE-2026-12570] Denial of Service via HDF5 Shape Bomb when loading malicious model files
Denial of Service via HDF5 Shape Bomb when loading malicious model files. Red Hat rates this moderate (CVSS 5). Weakness: CWE-770.
Medium [CVE-2026-72522] Denial of Service due to incorrect Unicode surrogate handling
Denial of Service due to incorrect Unicode surrogate handling. Red Hat rates this moderate (CVSS 6.2). Weakness: CWE-125. Red Hat lists fixing advisory RHSA-2026:54869 with package expat-main-2.8.3-0.1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 4 more. Affected products named by the advisory: Red Hat Hardened Images; Red Hat package: firefox; Red Hat package: thunderbird; Red Hat package: mingw-expat.
Medium [CVE-2026-68083] fix path resolution in ksmbd_vfs_kern_path_create
fix path resolution in ksmbd_vfs_kern_path_create. Red Hat rates this moderate. Weakness: CWE-22.
Medium [CVE-2026-68109] replace BUG_ON with WARN_ON
replace BUG_ON() with WARN_ON(). Red Hat rates this low (CVSS 5.5). Weakness: CWE-617. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-68265] Fix BO prefetch with CONSULT_MEM_ADVISE_PREF_LOC
Fix BO prefetch with CONSULT_MEM_ADVISE_PREF_LOC. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-68311] guard link STA in decap offload
guard link STA in decap offload. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-68096] fix recursive locking deadlock in audit_dupe_exe
fix recursive locking deadlock in audit_dupe_exe(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-833. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-68411] clamp virtio RX length before skb_put
clamp virtio RX length before skb_put. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-787.
Medium [CVE-2026-68419] Prevent rereg_mr for non-mem regions
Prevent rereg_mr for non-mem regions. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-791. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-68313] fix infinite loop in __tipc_nl_compat_dumpit
fix infinite loop in __tipc_nl_compat_dumpit. Red Hat rates this low (CVSS 5.5). Weakness: CWE-835. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-68408] convert pmsr_free_wk to wiphy_work to fix deadlock
convert pmsr_free_wk to wiphy_work to fix deadlock. Red Hat rates this low (CVSS 5.5). Weakness: CWE-833. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-68239] Account for NULL and handle pages in ttm_pool_backup
Account for NULL and handle pages in ttm_pool_backup. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.
Medium [CVE-2026-68355] fix potential buffer underflow in ath11k_hal_rx_msdu_list_get
fix potential buffer underflow in ath11k_hal_rx_msdu_list_get(). Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-124. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: kernel-rt.