Red Hat Linux Security Advisories & CVEs
11555 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-92627] Memory corruption via crafted HDF5 file
Memory corruption via crafted HDF5 file. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-825. Red Hat lists fixing advisory RHSA-2026:61630 with package hdf5-main-2.2.0-0.1.1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenStack Platform 13 (Queens).
Medium [CVE-2026-77407] RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Fields
RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Fields. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-256. Red Hat lists fixing advisory RHSA-2026:68290 with package opentelemetry-collector-contrib-main-0.161.0-0.1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Cryostat 4; Custom Metric Autoscaler operator for Red Hat Openshift; Multicluster Global Hub; and 4 more. Affected products named by the advisory: OpenShift Serverless; Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat OpenStack Platform 18.0; Red Hat Quay 3.
Medium [CVE-2026-77119] DNSSEC bypass via NSEC3 insecure-referral proof
DNSSEC bypass via NSEC3 insecure-referral proof. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-290. Red Hat lists fixing advisory RHSA-2026:68279 with package bind-main-9.20.29-0.1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 4 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: bind9.16; Red Hat package: bind9.18.
Medium [CVE-2026-75029] Denial of Service via crafted query responses
Denial of Service via crafted query responses. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:68279 with package bind-main-9.20.29-0.1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 4 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: bind9.16; Red Hat package: bind9.18.
Medium [CVE-2026-19668] Denial of Service via invalid DNSSEC records
Denial of Service via invalid DNSSEC records. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:68279 with package bind-main-9.20.29-0.1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 4 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: bind9.16; Red Hat package: bind9.18.
Medium [CVE-2026-19033] Unauthorized zone content updates via unauthenticated IXFR deltas
Unauthorized zone content updates via unauthenticated IXFR deltas. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-347. Red Hat lists fixing advisory RHSA-2026:68279 with package bind-main-9.20.29-0.1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 4 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: bind9.16; Red Hat package: bind9.18.
Medium [CVE-2026-61709] Unauthorized access due to ListUsers API returning deliberately excluded users.
Unauthorized access due to ListUsers API returning deliberately excluded users. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-783. Red Hat lists fixing advisory RHSA-2026:68777 with package grafana13-2-main-13.2.1-0.4.hum1, grafana12-4-main-12.4.10-0.5.hum1, grafana12-4-main-12.4.10-0.6.hum1, grafana13-1-main-13.1.6-0.4.hum1. Affected products named by the advisory: Red Hat Hardened Images; Multicluster Global Hub; Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Ceph Storage 6; and 5 more. Affected products named by the advisory: Red Hat Ceph Storage 7; Red Hat Ceph Storage 8; Red Hat Ceph Storage 9; Red Hat Enterprise Linux 10; and 1 more.
Medium [CVE-2026-78301] DNS cache poisoning via malformed zone insertion
DNS cache poisoning via malformed zone insertion. Red Hat rates this moderate (CVSS 5.8). Weakness: CWE-168. Red Hat lists fixing advisory RHSA-2026:68279 with package bind-main-9.20.29-0.1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 4 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: bind9.16; Red Hat package: bind9.18.
Medium [CVE-2026-19941] DNS wildcard record existence can be masked by an attacker via inapplicable NSEC records
DNS wildcard record existence can be masked by an attacker via inapplicable NSEC records. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-346. Red Hat lists fixing advisory RHSA-2026:68279 with package bind-main-9.20.29-0.1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 4 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: bind9.16; Red Hat package: bind9.18.
Medium [CVE-2026-19662] Denial of Service via crafted DNSSEC responses
Denial of Service via crafted DNSSEC responses. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-825. Red Hat lists fixing advisory RHSA-2026:68279 with package bind-main-9.20.29-0.1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 4 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: bind9.16; Red Hat package: bind9.18.
Medium [CVE-2026-84501] Operational log forgery via newline injection
Operational log forgery via newline injection. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-117. Affected products named by the advisory: Red Hat AMQ Broker 7; Red Hat build of Apache Camel for Spring Boot 4; Red Hat Fuse 7; Red Hat JBoss Enterprise Application Platform 8; and 3 more. Affected products named by the advisory: Red Hat JBoss Enterprise Application Platform Expansion Pack; Red Hat Offline Knowledge Portal; Red Hat OpenShift AI (RHOAI).
Medium [CVE-2026-59739] Information disclosure via SetWatches reconnect replay
Information disclosure via SetWatches reconnect replay. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-425. Affected products named by the advisory: Red Hat AMQ Broker 7; Red Hat build of Apache Camel 4 for Quarkus 3; Red Hat build of Apache Camel for Spring Boot 4; Red Hat Fuse 7; and 6 more. Affected products named by the advisory: Red Hat JBoss Enterprise Application Platform 8; Red Hat JBoss Enterprise Application Platform Expansion Pack; Red Hat Offline Knowledge Portal; Red Hat OpenShift AI (RHOAI); and 2 more.
Medium [CVE-2026-92081] Denial of Service via unhandled exception on HTTP/2 trailer responses
Denial of Service via unhandled exception on HTTP/2 trailer responses. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-248. Affected products named by the advisory: Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenShift AI (RHOAI); Red Hat OpenShift Dev Spaces.
Medium [CVE-2026-85501] Denial of Service via algorithmic complexity attacks on DNSSEC
Denial of Service via algorithmic complexity attacks on DNSSEC. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:68590 with package unbound-main-1.26.1-1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 4 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: unbound.
Medium [CVE-2026-82720] Denial of Service via use-after-free in DoH stream cleanup
Denial of Service via use-after-free in DoH stream cleanup. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-416. Red Hat lists fixing advisory RHSA-2026:68590 with package unbound-main-1.26.1-1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: unbound.
Medium [CVE-2026-80225] Denial of Service via continuous queries on TCP/DoT connection
Denial of Service via continuous queries on TCP/DoT connection. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-1050. Red Hat lists fixing advisory RHSA-2026:68590 with package unbound-main-1.26.1-1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 4 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: unbound.
Medium [CVE-2026-78227] Denial of Service via use-after-free in DoQ stream output buffer
Denial of Service via use-after-free in DoQ stream output buffer. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-416. Red Hat lists fixing advisory RHSA-2026:68590 with package unbound-main-1.26.1-1.hum1. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-77955] ZONEMD verification bypass due to asynchronous DNSSEC resolution
ZONEMD verification bypass due to asynchronous DNSSEC resolution. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-345. Red Hat lists fixing advisory RHSA-2026:68590 with package unbound-main-1.26.1-1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat package: unbound.
Medium [CVE-2026-92091] denial of service via O(n^2) duplicate check on unbounded JWK key_ops array
denial of service via O(n^2) duplicate check on unbounded JWK key_ops array. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-407. Affected products named by the advisory: Red Hat Ansible Automation Platform 2; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 5 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat OpenShift AI (RHOAI); Red Hat OpenStack Platform 16.2; Red Hat OpenStack Platform 17.1; and 1 more.
Medium [CVE-2026-19248] Denial of Service vulnerability in XML parsing
Denial of Service vulnerability in XML parsing. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-776. Red Hat lists fixing advisory RHSA-2026:59393 with package qt6-qtbase-main-6.11.2-2.hum1, qt5-qtbase-main-5.15.18-5.2.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: qt6-qtbase; Red Hat package: qt5-qtbase.