Red Hat Linux RHEL & SELinux Vulnerabilities & Security Advisories
2703 advisories tracked · Red Hat Security Data API · 2 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as RHEL & SELinux, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 52 critical, 950 high, 1428 medium, 271 low.
Get an email when Red Hat RHEL & SELinux publishes the next one.
See Red Hat RHEL & SELinux's last 90 days of advisories first. Then choose the free weekly digest, or a free month of real-time alerts with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat RHEL & SELinux advisories
Medium [CVE-2026-111376] Denial of Service via short clipboard response
Denial of Service via short clipboard response. Red Hat rates this moderate (CVSS 5). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: freerdp.
Medium [CVE-2026-111375] Denial of Service via out-of-bounds read in RAIL window title
Denial of Service via out-of-bounds read in RAIL window title. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: freerdp.
Medium [CVE-2026-111374] Denial of Service via unadvertised camera stream requests
Denial of Service via unadvertised camera stream requests. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: freerdp.
Medium [CVE-2026-111373] Denial of Service via zero-length WebSocket ping
Denial of Service via zero-length WebSocket ping. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-617. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: freerdp.
Medium [CVE-2026-46471] information disclosure via out-of-bounds read during MP4 parsing
information disclosure via out-of-bounds read during MP4 parsing. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: gstreamer1-plugins-good.
Low [CVE-2026-17591] Libarchive: libarchive: use-after-free via aliased mac metadata copy
A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information disclosure due to a use-after-free vulnerability, which occurs when a program reads memory that has already been released. This issue arises when the archive_entry_copy_mac_metadata() function deallocates an internal buffer before completing a data copy. An attacker who can supply input to an application utilizing this function can trigger the flaw to crash the application or read uninitialized memory data. This vulnerability is rated as Low severity for Red Hat because successful exploitation requires highly specific application-level API usage where an archive entry's metadata buffer is explicitly copied onto itself. Standard command-line archive utilities and typical library consumers do not perform this aliased operation during regular archive extraction or creation. Consequently, the flaw presents minimal exposure in standard Red Hat Enterprise Linux environments, with potential impact limited to localized crashes or minor memory leakage in custom applications invoking the affected API pattern. Weakness: CWE-416. Affected Red Hat products: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9. Red Hat fixing advisory: RHSA-2026:77775.
Low [CVE-2026-46472] Information disclosure via out-of-bounds read in qtdemux_parse_chnl
Information disclosure via out-of-bounds read in qtdemux_parse_chnl. Red Hat rates this low (CVSS 3.3). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: gstreamer1-plugins-good.
High [CVE-2026-104150] Denial of Service via inefficient regular expression in slug route matcher
Denial of Service via inefficient regular expression in slug route matcher. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1333. Red Hat lists fixing advisory RHSA-2026:92510 with package rhoai/odh-mod-arch-gen-ai-rhel9:1793001896, rhoai/odh-mod-arch-mlflow-rhel9:1793001851, rhoai/odh-mod-arch-automl-rhel9:1793001841, rhoai/odh-mod-arch-autorag-rhel9:1793001850. Affected products named by the advisory: Node HealthCheck Operator; Red Hat build of Apache Camel for Spring Boot 4; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; and 6 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift AI (RHOAI); Red Hat package: grafana; and 2 more.
High [CVE-2026-87018] Denial of Service via TLS renegotiation with mismatched certificate
Denial of Service via TLS renegotiation with mismatched certificate. Red Hat rates this important (CVSS 7.5). Weakness: CWE-617. Red Hat lists fixing advisory RHSA-2026:84706 with package cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9:1793661804, rhoai/odh-mod-arch-mlflow-rhel9:1793001851, cluster-observability-operator/monitoring-console-plugin-pf6-rhel9:1793661280, cluster-observability-operator/monitoring-console-plugin-pf5-rhel9:1793662327. Affected products named by the advisory: Red Hat Hardened Images; Exploit Intelligence; Red Hat AMQ Broker 7; Red Hat Ansible Automation Platform 2; and 15 more. Affected products named by the advisory: Red Hat Build of Podman Desktop; Red Hat Developer Hub; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; and 11 more.
High [CVE-2026-109383] Certificate validation bypass via dropped TLS options in Agent
Certificate validation bypass via dropped TLS options in Agent. Red Hat rates this important (CVSS 7.4). Weakness: CWE-295. Red Hat lists fixing advisory RHSA-2026:84706 with package cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9:1793661804, rhoai/odh-mod-arch-mlflow-rhel9:1793001851, cluster-observability-operator/monitoring-console-plugin-pf6-rhel9:1793661280, cluster-observability-operator/monitoring-console-plugin-pf5-rhel9:1793662327. Affected products named by the advisory: Red Hat Hardened Images; Exploit Intelligence; Red Hat AMQ Broker 7; Red Hat Ansible Automation Platform 2; and 15 more. Affected products named by the advisory: Red Hat Build of Podman Desktop; Red Hat Developer Hub; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; and 11 more.
High [CVE-2026-109829] Cache poisoning and information disclosure via improper cross-origin redirect caching
Cache poisoning and information disclosure via improper cross-origin redirect caching. Red Hat rates this important (CVSS 7.4). Weakness: CWE-346. Red Hat lists fixing advisory RHSA-2026:84706 with package nodejs26-main-26.11.1-0.4.hum1, cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9:1793661804, rhoai/odh-mod-arch-mlflow-rhel9:1793001851, cluster-observability-operator/monitoring-console-plugin-pf6-rhel9:1793661280. Affected products named by the advisory: Red Hat Hardened Images; Exploit Intelligence; Red Hat AMQ Broker 7; Red Hat Ansible Automation Platform 2; and 15 more. Affected products named by the advisory: Red Hat Build of Podman Desktop; Red Hat Developer Hub; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; and 11 more.
High [CVE-2026-109869] Denial of Service via unhandled stream error on excessive content encodings
Denial of Service via unhandled stream error on excessive content encodings. Red Hat rates this important (CVSS 7.5). Weakness: CWE-248. Red Hat lists fixing advisory RHSA-2026:84706 with package cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9:1793661804, rhoai/odh-mod-arch-mlflow-rhel9:1793001851, cluster-observability-operator/monitoring-console-plugin-pf6-rhel9:1793661280, cluster-observability-operator/monitoring-console-plugin-pf5-rhel9:1793662327. Affected products named by the advisory: Red Hat Hardened Images; Exploit Intelligence; Red Hat AMQ Broker 7; Red Hat Ansible Automation Platform 2; and 15 more. Affected products named by the advisory: Red Hat Build of Podman Desktop; Red Hat Developer Hub; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; and 11 more.
High [CVE-2026-18660] Access control bypass via case-sensitive host filtering
Access control bypass via case-sensitive host filtering. Red Hat rates this important (CVSS 8.2). Weakness: CWE-178. Red Hat lists fixing advisory RHSA-2026:92858 with package ocp-tools-4/jenkins-rhel8:1792044386, openvox-server-0:8.17.0-1.el8sat, openvox-server-0:8.17.0-1.el9sat, ocp-tools-4/jenkins-rhel8:1792044327. Affected products named by the advisory: Exploit Intelligence; OpenShift Developer Tools and Services; OpenShift Serverless; Red Hat AMQ Broker 7; and 16 more. Affected products named by the advisory: Red Hat build of Apache Camel for Spring Boot 4; Red Hat build of Apache Camel - HawtIO 4; Red Hat build of Apicurio Registry 3; Red Hat build of Debezium 3; and 12 more.
High [CVE-2026-77711] Information disclosure via improper proxy authentication handling
Information disclosure via improper proxy authentication handling. Red Hat rates this important (CVSS 7.5). Weakness: CWE-201. Affected products named by the advisory: Red Hat build of Apache Camel 4 for Quarkus 3; Red Hat build of Apache Camel for Spring Boot 4; Red Hat build of Apache Camel - HawtIO 4; Red Hat build of Apicurio Registry 3; and 9 more. Affected products named by the advisory: Red Hat build of Debezium 3; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 9; Red Hat Fuse 7; and 5 more.
Medium [CVE-2026-111272] Denial of Service via heap-based out-of-bounds read in Nikon metadata parser
Denial of Service via heap-based out-of-bounds read in Nikon metadata parser. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: libraw.
Medium [CVE-2026-111269] Denial of Service via out-of-bounds read in icalvalue_decode_ical_string
Denial of Service via out-of-bounds read in icalvalue_decode_ical_string(). Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: libical.
Medium [CVE-2026-111157] Denial of Service via crafted WAV file
Denial of Service via crafted WAV file. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: sox.
Medium [CVE-2026-111141] Denial of Service via out-of-bounds read in central directory parsing
Denial of Service via out-of-bounds read in central directory parsing. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: zziplib.
Medium [CVE-2026-111142] Denial of Service via out-of-bounds read in ZIP central directory parsing
Denial of Service via out-of-bounds read in ZIP central directory parsing. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: zziplib.
Medium [CVE-2026-111137] Denial of service via out-of-bounds write in smiValueAsString
Denial of service via out-of-bounds write in smiValueAsString(). Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: libsmi.