Red Hat Linux RHEL & SELinux Vulnerabilities & Security Advisories
1641 advisories tracked · Red Hat Security Data API · 2 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Red Hat Linux advisory that VulniPulse classified as RHEL & SELinux, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 35 critical, 621 high, 814 medium, 169 low.
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat RHEL & SELinux advisories
High [CVE-2026-87586] ANGLE in Google Chrome: Information disclosure via crafted HTML page
ANGLE in Google Chrome: Information disclosure via crafted HTML page. Red Hat rates this important (CVSS 7.4). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat package: webkitgtk4; Red Hat package: webkit2gtk3.
High [CVE-2026-87596] ANGLE in Google Chrome: Information disclosure via out-of-bounds read
ANGLE in Google Chrome: Information disclosure via out-of-bounds read. Red Hat rates this important (CVSS 7.4). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat package: webkitgtk4; Red Hat package: webkit2gtk3.
High [CVE-2026-19203] HTTP request smuggling via crafted chunked requests
HTTP request smuggling via crafted chunked requests. Red Hat rates this important (CVSS 8.2). Weakness: CWE-444. Affected products named by the advisory: Exploit Intelligence; OpenShift Developer Tools and Services; Red Hat AMQ Broker 7; Red Hat build of Apache Camel 4 for Quarkus 3; and 11 more. Affected products named by the advisory: Red Hat build of Apache Camel for Spring Boot 4; Red Hat build of Apache Camel - HawtIO 4; Red Hat build of Apicurio Registry 3; Red Hat build of Debezium 3; and 7 more.
High [CVE-2026-11573] Denial of Service via uncontrolled recursion in XML serialization
Denial of Service via uncontrolled recursion in XML serialization. Red Hat rates this important (CVSS 7.5). Weakness: CWE-776. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: qt6-qtbase.
High [CVE-2026-74860] Libxml2: double-free/uaf in libxml2 python bindings
A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. Red Hat severity: Important — CVSS 8.5 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H). Weakness: CWE-763. Affected Red Hat products: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9. Red Hat fixing advisory: RHSA-2026:64463. Affected products named by the advisory: Red Hat package: libxml2.
High [CVE-2026-19843] Command injection via unescaped LDAP DN in Cockpit 389 Console LDAP editor
Command injection via unescaped LDAP DN in Cockpit 389 Console LDAP editor. Red Hat rates this important (CVSS 8.4). Weakness: CWE-78. Red Hat lists fixing advisory RHSA-2026:64780 with package 389-ds-base-0:3.0.6-4.el10dsrv, redhat-ds:12-9040020260903102623.1674d574, redhat-ds:12-9020020260903155914.1674d574, 389-ds-base-0:3.2.0-7.el10dsrv. Affected products named by the advisory: Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Directory Server 11.9 for RHEL 8; Red Hat Directory Server 12.2 E4S for RHEL 9; Red Hat Directory Server 12.4 E4S for RHEL 9; and 9 more. Affected products named by the advisory: Red Hat Directory Server 12.6 EUS for RHEL 9; Red Hat Directory Server 12.8 for RHEL 9; Red Hat Directory Server 13.0 EUS for RHEL 10; Red Hat Directory Server 13.2 for RHEL 10; and 5 more.
High [CVE-2026-19204] org.eclipse.jetty.websocket/websocket-core-common: Jetty: Denial of Service via crafted WebSocket frame with unknown opcode
org.eclipse.jetty.websocket/websocket-core-common: Jetty: Denial of Service via crafted WebSocket frame with unknown opcode. Red Hat rates this important (CVSS 7.5). Weakness: CWE-789. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Satellite 6; Red Hat package: jmc.
High [CVE-2026-0799] Out-of-bounds read and write vulnerability allows arbitrary memory access
Out-of-bounds read and write vulnerability allows arbitrary memory access. Red Hat rates this important (CVSS 8.7). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: libpcap.
High [CVE-2026-86145] Out-of-bounds write allows arbitrary code execution via crafted regular expressions
Out-of-bounds write allows arbitrary code execution via crafted regular expressions. Red Hat rates this important (CVSS 8.2). Weakness: CWE-787. Red Hat lists fixing advisory RHSA-2026:67534 with package pcre2-main-10.48-0.1.hum1. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Hardened Images; and 5 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: mariadb10.11; Red Hat package: mariadb11.8; Red Hat package: mingw-pcre2; and 1 more.
High [CVE-2026-19534] Denial of Service via unrequested WebSocket subprotocol
Denial of Service via unrequested WebSocket subprotocol. Red Hat rates this important (CVSS 7.5). Weakness: CWE-476. Red Hat lists fixing advisory RHSA-2026:69248 with package nodejs26-main-26.8.2-0.1.hum1, grafana12-4-main-12.4.10-0.2.hum1, rhdh/rhdh-hub-rhel9:1789554285. Affected products named by the advisory: Red Hat Hardened Images; Exploit Intelligence; OpenShift Pipelines; Red Hat Build of Podman Desktop; and 14 more. Affected products named by the advisory: Red Hat Developer Hub; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 10 more.
High [CVE-2026-84961] TLS certificate validation bypass in BalancedPool via dropped connect options
TLS certificate validation bypass in BalancedPool via dropped connect options. Red Hat rates this important (CVSS 7.4). Weakness: CWE-295. Red Hat lists fixing advisory RHSA-2026:69248 with package nodejs26-main-26.8.2-0.1.hum1, nodejs24-main-11.16.0-1.24.18.1.0.2.2.hum1, grafana12-4-main-12.4.10-0.2.hum1, rhdh/rhdh-hub-rhel9:1789554285. Affected products named by the advisory: Red Hat Hardened Images; Exploit Intelligence; OpenShift Pipelines; Red Hat Build of Podman Desktop; and 14 more. Affected products named by the advisory: Red Hat Developer Hub; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 10 more.
High [CVE-2026-85152] Authentication bypass via cross-origin cache poisoning due to missing origin isolation
Authentication bypass via cross-origin cache poisoning due to missing origin isolation. Red Hat rates this important (CVSS 7.4). Weakness: CWE-346. Red Hat lists fixing advisory RHSA-2026:63782 with package grafana12-4-main-12.4.9-0.6.hum1, nodejs24-main-11.16.0-1.24.18.1.0.2.2.hum1, nodejs26-main-26.7.0-1.5.2.hum1. Affected products named by the advisory: Red Hat Hardened Images; Exploit Intelligence; OpenShift Pipelines; Red Hat AMQ Broker 7; and 15 more. Affected products named by the advisory: Red Hat Build of Podman Desktop; Red Hat Developer Hub; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; and 11 more.
High [CVE-2026-85730] Denial of Service via malformed TOML documents
Denial of Service via malformed TOML documents. Red Hat rates this important (CVSS 7.5). Weakness: CWE-835. Affected products named by the advisory: Red Hat Build of Podman Desktop; Red Hat Enterprise Linux 10; Red Hat OpenShift AI (RHOAI); Red Hat package: cockpit-image-builder.
High [CVE-2026-85509] Arbitrary code execution via stack-based buffer overflow
Arbitrary code execution via stack-based buffer overflow. Red Hat rates this moderate (CVSS 7.5). Weakness: CWE-121. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: freeipmi.
High [CVE-2026-85508] stack-based buffer overflow in ipmi-oem Dell system info handler
stack-based buffer overflow in ipmi-oem Dell system info handler. Red Hat rates this moderate (CVSS 7.5). Weakness: CWE-121. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: freeipmi.
High [CVE-2026-85507] Arbitrary code execution via stack-based buffer overflow
Arbitrary code execution via stack-based buffer overflow. Red Hat rates this moderate (CVSS 7.5). Weakness: CWE-121. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: freeipmi.
High [CVE-2026-85506] Arbitrary code execution via stack-based buffer overflow in ipmi-oem
Arbitrary code execution via stack-based buffer overflow in ipmi-oem. Red Hat rates this moderate (CVSS 7.5). Weakness: CWE-121. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: freeipmi.
High [CVE-2026-85504] Arbitrary code execution via malformed Fujitsu System Event Log responses
Arbitrary code execution via malformed Fujitsu System Event Log responses. Red Hat rates this moderate (CVSS 7.5). Weakness: CWE-121. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: freeipmi.
High [CVE-2026-85393] Signature forgery vulnerability in RSA PKCS#1 v1.5 verification
Signature forgery vulnerability in RSA PKCS#1 v1.5 verification. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1284. Red Hat lists fixing advisory RHSA-2026:71210 with package ansible-automation-platform-25/lightspeed-rhel8:1789685837, ansible-automation-platform-26/lightspeed-rhel9:1789656884. Affected products named by the advisory: Gatekeeper 3; Node HealthCheck Operator; OpenShift Pipelines; Red Hat Ansible Automation Platform 2; and 19 more. Affected products named by the advisory: Red Hat build of Apache Camel for Spring Boot 4; Red Hat Build of Podman Desktop; Red Hat Ceph Storage 4; Red Hat Developer Hub; and 15 more.
High [CVE-2026-71221] stack out-of-bounds write via unchecked height in savemeta
stack out-of-bounds write via unchecked height in savemeta. Red Hat rates this moderate (CVSS 7). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: gfs2-utils.