Red Hat Linux RHEL & SELinux Vulnerabilities & Security Advisories
2536 advisories tracked · Red Hat Security Data API · 2 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as RHEL & SELinux, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 50 critical, 896 high, 1323 medium, 265 low.
Get an email when Red Hat RHEL & SELinux publishes the next one.
See Red Hat RHEL & SELinux's last 90 days of advisories first. Then choose the free weekly digest, or a free month of real-time alerts with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat RHEL & SELinux advisories
Medium [CVE-2026-101726] Denial of Service via the C API
Denial of Service via the C API. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-400. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: mysql8.4.
Medium [CVE-2026-101725] From CVEorg collector
From CVEorg collector. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-400. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: mysql8.4.
Medium [CVE-2026-101724] Denial of Service in InnoDB component
Denial of Service in InnoDB component. Red Hat rates this moderate (CVSS 4.9). Weakness: CWE-400. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: mysql8.4.
Medium [CVE-2026-101721] Denial of Service in Server Components Services
Denial of Service in Server Components Services. Red Hat rates this moderate (CVSS 4.9). Weakness: CWE-400. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: mysql8.4.
Medium [CVE-2026-101627] Denial of Service in InnoDB component
Denial of Service in InnoDB component. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-400. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: mysql8.4.
Medium [CVE-2026-101623] Denial of Service via server optimizer flaw
Denial of Service via server optimizer flaw. Red Hat rates this moderate (CVSS 4.9). Weakness: CWE-400. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: mysql8.4.
Medium [CVE-2026-101624] Denial of service via InnoDB storage engine
Denial of service via InnoDB storage engine. Red Hat rates this moderate (CVSS 4.9). Weakness: CWE-400. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat package: mysql8.4.
Medium [CVE-2026-101621] Denial of Service in InnoDB
Denial of Service in InnoDB. Red Hat rates this moderate (CVSS 4.9). Weakness: CWE-617. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: mysql8.4.
Medium [CVE-2026-101615] Denial of service in InnoDB
Denial of service in InnoDB. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-400. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: mysql8.4.
Medium [CVE-2026-101616] Denial of Service via JSON component
Denial of Service via JSON component. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-20. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat package: mysql8.4.
Medium [CVE-2026-101613] Denial of service via DDL component
Denial of service via DDL component. Red Hat rates this moderate (CVSS 4.9). Weakness: CWE-400. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: mysql8.4.
Medium [CVE-2026-101612] Denial of Service in InnoDB component
Denial of Service in InnoDB component. Red Hat rates this moderate (CVSS 4). Weakness: CWE-617. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat package: mysql8.4.
Medium [CVE-2026-101614] Denial of Service in InnoDB component
Denial of Service in InnoDB component. Red Hat rates this moderate (CVSS 4.9). Weakness: CWE-400. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat Hardened Images; Red Hat package: mysql8.4.
Medium [CVE-2026-101607] Denial of Service in Server Optimizer
Denial of Service in Server Optimizer. Red Hat rates this moderate (CVSS 4.9). Weakness: CWE-835. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: mysql8.4.
Medium [CVE-2026-101608] Denial of Service via Server Optimizer component
Denial of Service via Server Optimizer component. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-400. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: mysql8.4.
Medium [CVE-2026-113812] Mozilla::CA: TLS server impersonation via compromised intermediate certificates
Mozilla::CA: TLS server impersonation via compromised intermediate certificates. Red Hat rates this important (CVSS 6.8). Weakness: CWE-295. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: perl-mozilla-ca.
Medium [CVE-2026-113867] Unauthorized actions via XMPP stanza injection
Unauthorized actions via XMPP stanza injection. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-91. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: thunderbird.
Medium [CVE-2026-113869] Use-after-free in S/MIME decryption during a security device password prompt
Use-after-free in S/MIME decryption during a security device password prompt. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: thunderbird.
Medium [CVE-2026-113868] information disclosure via malformed authentication challenge
information disclosure via malformed authentication challenge. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-908. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: thunderbird.
Medium [CVE-2026-113866] Information disclosure via unencrypted AutoDiscover lookup
Information disclosure via unencrypted AutoDiscover lookup. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-523. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: thunderbird.