Red Hat Linux RHEL & SELinux Vulnerabilities & Security Advisories
2536 advisories tracked · Red Hat Security Data API · 2 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as RHEL & SELinux, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 50 critical, 896 high, 1323 medium, 265 low.
Get an email when Red Hat RHEL & SELinux publishes the next one.
See Red Hat RHEL & SELinux's last 90 days of advisories first. Then choose the free weekly digest, or a free month of real-time alerts with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat RHEL & SELinux advisories
Medium [CVE-2026-114095] Denial of Service via self-referential packfile delta objects
Denial of Service via self-referential packfile delta objects. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-835. Affected products named by the advisory: Red Hat Ansible Automation Platform 2; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat OpenShift AI (RHOAI); and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: resource-agents.
Medium [CVE-2026-114047] proxy improper TLS certificate validation allows target impersonation
proxy improper TLS certificate validation allows target impersonation. Red Hat rates this moderate (CVSS 6.8). Weakness: CWE-295. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: freerdp.
Medium [CVE-2026-114046] null pointer dereference in smartcard emulation via crafted reader name
null pointer dereference in smartcard emulation via crafted reader name. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: freerdp.
Medium [CVE-2026-114043] heap out-of-bounds read in WinPR clipboard PNG-to-CF_DIB synthesis
heap out-of-bounds read in WinPR clipboard PNG-to-CF_DIB synthesis. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: freerdp.
Low [CVE-2026-114501] Information disclosure via improper memory alignment during Arrow export
Information disclosure via improper memory alignment during Arrow export. Red Hat rates this low (CVSS 3.7). Weakness: CWE-908. Affected products named by the advisory: Exploit Intelligence; Lightspeed Core; OpenShift Lightspeed; Red Hat AI Inference Server; and 8 more. Affected products named by the advisory: Red Hat Ansible Automation Platform 2; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat Lightspeed Services for OCP; and 4 more.
High [CVE-2026-101797] system takeover via mysqldump component
system takeover via mysqldump component. Red Hat rates this important (CVSS 7.5). Weakness: CWE-20. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: mysql8.4.
High [CVE-2026-101796] Complete server takeover via replication component
Complete server takeover via replication component. Red Hat rates this important (CVSS 7.5). Weakness: CWE-400. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: mysql8.4.
High [CVE-2026-101785] Unauthorized data modification in JSON component
Unauthorized data modification in JSON component. Red Hat rates this important (CVSS 8.3). Weakness: CWE-269. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat package: mysql8.4.
High [CVE-2026-101781] Server takeover via Group Replication GCS
Server takeover via Group Replication GCS. Red Hat rates this important (CVSS 8.8). Weakness: CWE-306. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat package: mysql8.4.
High [CVE-2026-101775] unauthorized data modification via replication component
unauthorized data modification via replication component. Red Hat rates this important (CVSS 7.4). Weakness: CWE-400. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: mysql8.4.
High [CVE-2026-101772] unauthorized server takeover
unauthorized server takeover. Red Hat rates this important (CVSS 8.1). Weakness: CWE-20. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: mysql8.4.
High [CVE-2026-101773] Denial of Service via the Group Replication plugin
Denial of Service via the Group Replication plugin. Red Hat rates this important (CVSS 7.1). Weakness: CWE-400. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: mysql8.4.
High [CVE-2026-101771] complete service takeover via network access
complete service takeover via network access. Red Hat rates this important (CVSS 8.1). Weakness: CWE-20. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat package: mysql8.4.
High [CVE-2026-101770] System takeover via client programs
System takeover via client programs. Red Hat rates this important (CVSS 8.1). Weakness: CWE-20. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: mysql8.4.
High [CVE-2026-101679] Denial of Service via multiple protocols
Denial of Service via multiple protocols. Red Hat rates this important (CVSS 7.5). Weakness: CWE-400. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat package: mysql8.4.
High [CVE-2026-113679] Out-of-bounds write via crafted font in WebAssembly shaper
Out-of-bounds write via crafted font in WebAssembly shaper. Red Hat rates this moderate (CVSS 7). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: harfbuzz.
High [CVE-2025-71436] arbitrary code execution via heap-based buffer overflow in language tag handling
arbitrary code execution via heap-based buffer overflow in language tag handling. Red Hat rates this important (CVSS 7.1). Weakness: CWE-122. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: raptor2.
High [CVE-2026-101296] Authentication bypass via non-GSSAPI SASL in JNDI realm
Authentication bypass via non-GSSAPI SASL in JNDI realm. Red Hat rates this important (CVSS 7.4). Weakness: CWE-303. Red Hat lists fixing advisory RHSA-2026:85926 with package tomcat10-main-10.1.61-0.1.hum1, tomcat11-main-11.0.27-0.1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 8 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat JBoss Web Server 5; Red Hat JBoss Web Server 6; and 4 more.
High [CVE-2026-113470] Website spoofing via failure to block compromised intermediate certificates
Website spoofing via failure to block compromised intermediate certificates. Red Hat rates this moderate (CVSS 7.1). Weakness: CWE-295. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: firefox.
High [CVE-2026-112177] Reintroduction of.charkeys -dSAFER bypass in RHEL 8
Reintroduction of.charkeys -dSAFER bypass in RHEL 8. Red Hat rates this important (CVSS 7.3). Weakness: CWE-648. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat package: ghostscript.