Red Hat Linux RHEL & SELinux Vulnerabilities & Security Advisories
2536 advisories tracked · Red Hat Security Data API · 2 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as RHEL & SELinux, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 50 critical, 896 high, 1323 medium, 265 low.
Get an email when Red Hat RHEL & SELinux publishes the next one.
See Red Hat RHEL & SELinux's last 90 days of advisories first. Then choose the free weekly digest, or a free month of real-time alerts with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat RHEL & SELinux advisories
High [CVE-2026-86922] Arbitrary code execution via type confusion
Arbitrary code execution via type confusion. Red Hat rates this important (CVSS 8.8). Weakness: CWE-843. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: webkitgtk3; Red Hat package: webkitgtk4.
Medium [CVE-2026-91417] Enhance CORBA (Oracle CPU 2026-10)
Enhance CORBA (Oracle CPU 2026-10). Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770. Affected products named by the advisory: Red Hat build of OpenJDK 1.8; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 6 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat package: java-1.6.0-openjdk; Red Hat package: java-1.7.0-openjdk; and 2 more.
Medium [CVE-2026-91411] Enhance JGSS (Oracle CPU 2026-10)
Enhance JGSS (Oracle CPU 2026-10). Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-1286. Affected products named by the advisory: Red Hat build of OpenJDK 11 ELS; Red Hat build of OpenJDK 1.8; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 7 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat package: java-1.6.0-openjdk; and 3 more.
Medium [CVE-2026-91396] Improve Pack200 handling (Oracle CPU 2026-10)
Improve Pack200 handling (Oracle CPU 2026-10). Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-22. Affected products named by the advisory: Red Hat build of OpenJDK 11 ELS; Red Hat build of OpenJDK 1.8; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 7 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat package: java-1.6.0-openjdk; and 3 more.
Medium [CVE-2026-91395] Enhance Pack200 unpacking (Oracle CPU 2026-10)
Enhance Pack200 unpacking (Oracle CPU 2026-10). Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-22. Affected products named by the advisory: Red Hat build of OpenJDK 11 ELS; Red Hat build of OpenJDK 1.8; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 7 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat package: java-1.6.0-openjdk; and 3 more.
Medium [CVE-2026-111879] Denial of Service via unreleased table lock on error
Denial of Service via unreleased table lock on error. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: perl-dbi.
Medium [CVE-2026-87293] Enhance RMI connections (Oracle CPU 2026-10)
Enhance RMI connections (Oracle CPU 2026-10). Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-924. Affected products named by the advisory: Red Hat build of OpenJDK 1.8; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 6 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat package: java-1.6.0-openjdk; Red Hat package: java-1.7.0-openjdk; and 2 more.
Medium [CVE-2026-108518] Denial of Service via type confusion in dbi_profile
Denial of Service via type confusion in dbi_profile. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-843. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: perl-dbi.
Medium [CVE-2026-101803] unauthorized data modification via XML component
unauthorized data modification via XML component. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-91. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: mysql8.4.
Medium [CVE-2026-101802] Denial of Service via the Server Parser
Denial of Service via the Server Parser. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-400. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: mysql8.4.
Medium [CVE-2026-101800] unauthorized data access via improper privilege controls
unauthorized data access via improper privilege controls. Red Hat rates this moderate (CVSS 6.8). Weakness: CWE-269. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: mysql8.4.
Medium [CVE-2026-101801] Denial of Service in Server Optimizer
Denial of Service in Server Optimizer. Red Hat rates this moderate (CVSS 4.9). Weakness: CWE-835. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat package: mysql8.4.
Medium [CVE-2026-101799] Denial of Service via Group Replication GCS
Denial of Service via Group Replication GCS. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-400. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: mysql8.4.
Medium [CVE-2026-101798] Denial of Service in the server optimizer
Denial of Service in the server optimizer. Red Hat rates this moderate (CVSS 4.9). Weakness: CWE-835. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat package: mysql8.4.
Medium [CVE-2026-101795] Complete service compromise by a local privileged attacker
Complete service compromise by a local privileged attacker. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-400. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: mysql8.4.
Medium [CVE-2026-101794] Denial of Service via XML component flaw
Denial of Service via XML component flaw. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-91. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat package: mysql8.4.
Medium [CVE-2026-101789] Denial of Service via the Optimizer component
Denial of Service via the Optimizer component. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-400. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: mysql8.4.
Medium [CVE-2026-101788] Denial of Service via Server Components Services
Denial of Service via Server Components Services. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-770. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: mysql8.4.
Medium [CVE-2026-101787] Denial of Service via Server Optimizer flaw
Denial of Service via Server Optimizer flaw. Red Hat rates this moderate (CVSS 4.9). Weakness: CWE-835. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: mysql8.4.
Medium [CVE-2026-101784] Denial of service in query optimizer
Denial of service in query optimizer. Red Hat rates this moderate (CVSS 4.9). Weakness: CWE-400. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat package: mysql8.4.