Red Hat Linux Security Advisories & CVEs
3067 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
High [CVE-2026-42583] Denial of Service via excessive memory allocation in LZ4FrameDecoder
Denial of Service via excessive memory allocation in LZ4FrameDecoder. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Resolved in Red Hat advisory RHSA-2026:34608 — update the affected packages (`sudo dnf update`). Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-42579] High integrity impact due to improper DNS domain name constraint enforcement
High integrity impact due to improper DNS domain name constraint enforcement. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1286. Affected package(s): netty-codec-dns, devspaces/pluginregistry-rhel9:1780696380, cryostat/jfr-datasource-rhel9:4.2.0, devspaces/openvsx-rhel9:1780948325, devspaces/server-rhel9:1780694994, cryostat/cryostat-reports-rhel9:4.2.0. Resolved in Red Hat advisory RHSA-2026:23808 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Cryostat 4 on RHEL 9; Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16; Red Hat build of Quarkus 3.27.4; Red Hat OpenShift Dev Spaces 3.28; and 4 more.
High [CVE-2026-42578] HTTP Header Injection via HttpProxyHandler Disabled Validation
HTTP Header Injection via HttpProxyHandler Disabled Validation. Red Hat rates this important (CVSS 7.5). Weakness: CWE-93. Affected package(s): netty-handler-proxy, devspaces/pluginregistry-rhel9:1780696380, cryostat/jfr-datasource-rhel9:4.2.0, devspaces/openvsx-rhel9:1780948325, devspaces/server-rhel9:1780694994, cryostat/cryostat-reports-rhel9:4.2.0. Resolved in Red Hat advisory RHSA-2026:23808 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Cryostat 4 on RHEL 9; Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16; Red Hat build of Quarkus 3.27.4; Red Hat OpenShift Dev Spaces 3.28; and 19 more.
High [CVE-2026-42581] HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers
HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers. Red Hat rates this important (CVSS 7.2). Weakness: CWE-444. Affected package(s): devspaces/pluginregistry-rhel9:1780696380, cryostat/jfr-datasource-rhel9:4.2.0, netty-codec-http, devspaces/openvsx-rhel9:1780948325, devspaces/server-rhel9:1780694994, cryostat/cryostat-reports-rhel9:4.2.0. Resolved in Red Hat advisory RHSA-2026:23808 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Cryostat 4 on RHEL 9; Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16; Red Hat build of Quarkus 3.27.4; Red Hat OpenShift Dev Spaces 3.28; and 5 more.
High [CVE-2026-44004] Denial of Service via host memory exhaustion
Denial of Service via host memory exhaustion. Red Hat rates this important (CVSS 8.6). Weakness: CWE-1285. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Ansible Automation Platform 2.1.
High [CVE-2026-44001] Sandbox escape leads to Denial of Service
Sandbox escape leads to Denial of Service. Red Hat rates this important (CVSS 8.6). Weakness: CWE-248. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Ansible Automation Platform 2.1.
High [CVE-2026-43998] Remote code execution due to path restriction bypass via symlinks
Remote code execution due to path restriction bypass via symlinks. Red Hat rates this important (CVSS 8.5). Weakness: CWE-59. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Ansible Automation Platform 2.1.
High [CVE-2026-45109] Information disclosure via security fix bypass in middleware with Turbopack
Information disclosure via security fix bypass in middleware with Turbopack. Red Hat rates this important (CVSS 7.5). Weakness: CWE-358. Affected package(s): next. Resolved in Red Hat advisory RHSA-2026:34608 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Trusted Artifact Signer 1.4; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat Trusted Artifact Signer 1.3.
High [CVE-2026-44579] Denial of Service via crafted POST requests to server actions
Denial of Service via crafted POST requests to server actions. Red Hat rates this important (CVSS 7.5). Weakness: CWE-833. Affected package(s): next. Resolved in Red Hat advisory RHSA-2026:34608 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Trusted Artifact Signer 1.4; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat Trusted Artifact Signer 1.3.
High [CVE-2026-44578] Server-Side Request Forgery via crafted WebSocket upgrade requests
Server-Side Request Forgery via crafted WebSocket upgrade requests. Red Hat rates this important (CVSS 8.6). Weakness: CWE-918. Affected package(s): next. Resolved in Red Hat advisory RHSA-2026:34608 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Trusted Artifact Signer 1.4; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat Trusted Artifact Signer 1.3.
High [CVE-2026-44577] Denial of Service via Image Optimization API
Denial of Service via Image Optimization API. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Affected package(s): next. Resolved in Red Hat advisory RHSA-2026:34608 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Trusted Artifact Signer 1.4; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat Trusted Artifact Signer 1.3.
High [CVE-2026-44574] Authorization bypass via crafted query parameters
Authorization bypass via crafted query parameters. Red Hat rates this important (CVSS 8.1). Weakness: CWE-551. Affected package(s): next. Resolved in Red Hat advisory RHSA-2026:34608 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Trusted Artifact Signer 1.4; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat Trusted Artifact Signer 1.3.
High [CVE-2026-44575] Unauthorized access to protected content via middleware bypass
Unauthorized access to protected content via middleware bypass. Red Hat rates this important (CVSS 7.5). Weakness: CWE-551. Affected package(s): next. Resolved in Red Hat advisory RHSA-2026:34608 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Trusted Artifact Signer 1.4; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat Trusted Artifact Signer 1.3.
High [CVE-2026-44573] Information disclosure due to middleware bypass in Pages Router with i18n
Information disclosure due to middleware bypass in Pages Router with i18n. Red Hat rates this important (CVSS 7.5). Weakness: CWE-551. Affected package(s): next. Resolved in Red Hat advisory RHSA-2026:34608 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Trusted Artifact Signer 1.4; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat Trusted Artifact Signer 1.3.
High [CVE-2026-44432] Denial of Service due to excessive HTTP response decompression
Denial of Service due to excessive HTTP response decompression. Red Hat rates this important (CVSS 7.5). Weakness: CWE-409. Affected package(s): rhaiis/model-opt-cuda-rhel9:1782352950, rhaiis/vllm-spyre-rhel9:1782352919, satellite/iop-yuptoo-rhel9:1782380482, satellite/iop-insights-engine-rhel9:1782448455, quay/quay-rhel8:1781878070, satellite/iop-puptoo-rhel9:1779792651. Resolved in Red Hat advisory RHSA-2026:24483 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Ansible Automation Platform 2.6 for RHEL 9; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 24 more.
High [CVE-2026-42266] Arbitrary code execution due to improper enforcement of extension allow-list
Arbitrary code execution due to improper enforcement of extension allow-list. Red Hat rates this important (CVSS 8.8). Weakness: CWE-88. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat OpenShift AI (RHOAI); Red Hat Migration Toolkit for Applications 8.2.
High [CVE-2026-42557] Arbitrary code execution via deceptive button in HTML output
Arbitrary code execution via deceptive button in HTML output. Red Hat rates this important (CVSS 8.8). Weakness: CWE-79. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat OpenShift AI (RHOAI); Red Hat Migration Toolkit for Applications 8.2.
High [CVE-2026-45740] Denial of Service via crafted JSON descriptors
Denial of Service via crafted JSON descriptors. Red Hat rates this important (CVSS 7.5). Weakness: CWE-776. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-44293] Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors
Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors. Red Hat rates this important (CVSS 7.1). Weakness: CWE-94. Affected package(s): automation-platform-ui, rhdh/rhdh-hub-rhel9:1781187342, openshift-service-mesh/kiali-ossmc-rhel9:1780997382, ansible-automation-platform, openshift4/ose-console-rhel9:1782224390, openshift-service-mesh/kiali-rhel9:1780997438. Resolved in Red Hat advisory RHSA-2026:34160 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Ansible Automation Platform 2.6 for RHEL 9; Red Hat Enterprise Linux Extensions Channel (v. 10); Red Hat Developer Hub 1.9; Red Hat OpenShift Container Platform 4.21; and 10 more.
High [CVE-2026-44292] Data integrity impact due to prototype pollution
Data integrity impact due to prototype pollution. Red Hat rates this important (CVSS 7.5). Weakness: CWE-915. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.