Complete feed
No mitigation yet
No fix, workaround or mitigation extracted yet
Android app · Google Play
Take your CVE monitoring with you.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Medium [CVE-2026-79258] Information disclosure via incorrect authorization
Information disclosure via incorrect authorization. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-346.
Medium [CVE-2026-79276] Privilege management bypass via crafted HTML page
Privilege management bypass via crafted HTML page. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-266.
Medium [CVE-2026-79772] Signature validation bypass via unchecked return value
Signature validation bypass via unchecked return value. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-252. Affected products named by the advisory: Red Hat 3scale API Management Platform 2; Red Hat Satellite 6.
Medium [CVE-2026-79771] Denial of Service via XSLT transform memory leak
Denial of Service via XSLT transform memory leak. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770. Affected products named by the advisory: Red Hat 3scale API Management Platform 2; Red Hat Satellite 6.
Medium [CVE-2026-79769] Process crash due to invalid memory read via programming error in internal method
Process crash due to invalid memory read via programming error in internal method. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-843. Affected products named by the advisory: Red Hat 3scale API Management Platform 2; Red Hat Satellite 6.
Medium [CVE-2026-78684] Denial of Service via DeepStream backend resource control bypass.
Denial of Service via DeepStream backend resource control bypass. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770. Affected products named by the advisory: Red Hat AI Inference Server; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenShift AI (RHOAI).
Low [CVE-2025-71346] Heap buffer under-read in XML Schema validation
Heap buffer under-read in XML Schema validation. Red Hat rates this low (CVSS 2.9). Weakness: CWE-125. Affected products named by the advisory: Red Hat 3scale API Management Platform 2; Red Hat Satellite 6.
Advisory [CVE-2026-66152] Path traversal vulnerability in OPSWAT tarball in the SonicWall NetExtender Linux client allows an attacker to write arbitrary file as root
A Path traversal vulnerability in OPSWAT tarball in the SonicWall NetExtender Linux client allows an attacker to write arbitrary file as root.
High [CVE-2026-76848] Information disclosure via SQL injection in SelectQueryBuilder.distinctOn
Information disclosure via SQL injection in SelectQueryBuilder.distinctOn. Red Hat rates this important (CVSS 7.5). Weakness: CWE-89. Affected products named by the advisory: Red Hat Developer Hub; Self-service automation portal 2.
High [CVE-2026-78161] Out-of-bounds write in LECP CBOR Recording
Out-of-bounds write in LECP CBOR Recording. Red Hat rates this important (CVSS 7.3). Weakness: CWE-787.
Medium [CVE-2026-17113] unvalidated image env var causes daemon crash
unvalidated image env var causes daemon crash. Red Hat rates this moderate (CVSS 6). Weakness: CWE-1287. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
Medium [CVE-2026-76845] Arbitrary File Overwrite via Symlink Following
Arbitrary File Overwrite via Symlink Following. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-59. Affected products named by the advisory: Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Build of Podman Desktop; Red Hat Developer Hub; Red Hat Enterprise Linux 8; and 7 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Fuse 7; Red Hat OpenShift AI (RHOAI); Red Hat OpenShift Container Platform 4; and 3 more.