Red Hat Linux Security Advisories & CVEs
3200 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-13122] From CVEorg collector
From CVEorg collector. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-617.
Medium [CVE-2026-59152] Information Disclosure via Arbitrary Server-Side File Read
Information Disclosure via Arbitrary Server-Side File Read. Red Hat rates this moderate (CVSS 5).
Medium [CVE-2026-58203] NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size
NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-22.
Medium [CVE-2026-13698] From CVEorg collector
From CVEorg collector. Red Hat rates this moderate (CVSS 4.9).
Medium [CVE-2026-56139] Information disclosure via error messages containing sensitive data
Information disclosure via error messages containing sensitive data. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-209.
Medium [CVE-2026-49365] Information disclosure via error messages containing sensitive data
Information disclosure via error messages containing sensitive data. Red Hat rates this important (CVSS 5.3). Weakness: CWE-209.
Medium [CVE-2026-49098] Message redirection and injection via header manipulation
Message redirection and injection via header manipulation. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-20.
Medium [CVE-2026-40047] CLI argument injection and path traversal
CLI argument injection and path traversal. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-78.
Medium [CVE-2026-14757] Integer overflow allows local impact
Integer overflow allows local impact. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-190.
Medium [CVE-2026-14781] OIDC email_verified claim incorrectly applied to userinfo email
OIDC email_verified claim incorrectly applied to userinfo email. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-1288.
Medium [CVE-2026-14684] Denial of Service via uncontrolled memory allocation in decodeFromByteBuffer
Denial of Service via uncontrolled memory allocation in decodeFromByteBuffer. Red Hat rates this low (CVSS 5). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:26989 with package rust-main-1.96.1-1.hum1, netavark-main-2.0.0-1.hum1.
Medium [CVE-2026-14647] Information disclosure via out-of-bounds read
Information disclosure via out-of-bounds read. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-125.
Medium [CVE-2026-14604] Denial of Service vulnerability in PLY Model Handler
Denial of Service vulnerability in PLY Model Handler. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-1341.
Medium [CVE-2026-14631] Denial of Service via malformed headers
Denial of Service via malformed headers. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-248.
Medium [CVE-2026-14620] Arbitrary file opening and denial of service via exposed developer endpoints
Arbitrary file opening and denial of service via exposed developer endpoints. Red Hat rates this moderate (CVSS 4.7). Weakness: CWE-940.
Medium [CVE-2026-14615] FGAP v2 parent group children endpoint bypasses per-child view permission filter
FGAP v2 parent group children endpoint bypasses per-child view permission filter. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-1220.
Medium [CVE-2026-14614] FGAP v2 client scope assignment bypass via ClientResource
FGAP v2 client scope assignment bypass via ClientResource. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-639.
Medium [CVE-2026-14613] FGAP v2 role groups endpoint discloses hidden group metadata without group view permission
FGAP v2 role groups endpoint discloses hidden group metadata without group view permission. Red Hat rates this moderate (CVSS 4.3).
Medium [CVE-2026-14612] off-by-one buffer overflows in ipa-otpd oauth2.c during OAuth2 device authorization
off-by-one buffer overflows in ipa-otpd oauth2.c during OAuth2 device authorization. Red Hat rates this low (CVSS 4.2). Weakness: CWE-787.
Medium [CVE-2026-8926] Information disclosure via incorrect.netrc password lookup
Information disclosure via incorrect.netrc password lookup. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-289. Red Hat lists fixing advisory RHSA-2026:29017 with package rust-main-1.96.1-1.hum1, curl-main-8.21.0-0.1.hum1.