Red Hat Linux Security Advisories & CVEs
3200 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-55577] Heap buffer overflow in MVG decoder allows out-of-bounds write
Heap buffer overflow in MVG decoder allows out-of-bounds write. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-787.
Medium [CVE-2026-55510] Denial of Service via crafted 8BIM profile
Denial of Service via crafted 8BIM profile. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-825.
Medium [CVE-2026-53467] Information disclosure vulnerability in MNG decoder
Information disclosure vulnerability in MNG decoder. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-908.
Medium [CVE-2026-13769] Information disclosure via overly permissive file permissions
Information disclosure via overly permissive file permissions. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-277.
Medium [CVE-2026-53466] Denial of Service via integer overflow in XCF decoder
Denial of Service via integer overflow in XCF decoder. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-125.
Medium [CVE-2026-55628] Unauthorized file access due to missing policy checks in concatenate operation
Unauthorized file access due to missing policy checks in concatenate operation. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-1220.
Medium [CVE-2026-53489] Arbitrary host file read via symlink following in CRI checkpoint restore
Arbitrary host file read via symlink following in CRI checkpoint restore. Red Hat rates this important (CVSS 6.5). Weakness: CWE-59. Red Hat lists fixing advisory RHSA-2026:15862 with package syft-main-1.46.0-0.1.hum1, grype-main-0.115.0-0.1.hum1, trivy-main-0.69.3-1.2.hum1.
Medium [CVE-2026-50195] Arbitrary code execution via CRI checkpoint image tag poisoning
Arbitrary code execution via CRI checkpoint image tag poisoning. Red Hat rates this moderate (CVSS 6.7). Weakness: CWE-1289. Red Hat lists fixing advisory RHSA-2026:35111 with package trivy-main-0.72.0-0.1.hum1.
Medium [CVE-2026-47262] Denial of Service via maliciously crafted image leading to unbounded group parsing
Denial of Service via maliciously crafted image leading to unbounded group parsing. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:26990 with package syft-main-1.46.0-0.1.hum1, kubernetes1-36-main-1.36.2-2.hum1, trivy-main-0.72.0-0.1.hum1, kubernetes1-35-main-1.35.6-1.hum1.
Medium [CVE-2026-5051] Audit device validation bypass via legacy file audit path option
Audit device validation bypass via legacy file audit path option. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-807.
Medium [CVE-2026-12480] Information disclosure via malicious model archive with Virtual Dataset
Information disclosure via malicious model archive with Virtual Dataset. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-22.
Medium [CVE-2026-58031] Cross-site scripting vulnerability due to improper input neutralization
Cross-site scripting vulnerability due to improper input neutralization. Red Hat rates this moderate (CVSS 4.6). Weakness: CWE-79.
Medium [CVE-2026-5138] Information disclosure via improper validation of nested request parameters
Information disclosure via improper validation of nested request parameters. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-639. Red Hat lists fixing advisory RHSA-2026:34366 with package foreman-0:3.14.0.17-1.el9sat, foreman-0:3.18.0.7-1.el9sat, foreman-0:3.12.0.17-1.el9sat, foreman-0:3.12.0.17-1.el8sat. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8.
Medium [CVE-2026-13323] Supply chain attack via cross-site scripting
Supply chain attack via cross-site scripting. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-79.
Medium [CVE-2025-15666] Heap-based buffer overflow via crafted model file
Heap-based buffer overflow via crafted model file. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-787.
Medium [CVE-2026-57962] Denial of Service via malicious LDAP server
A malicious LDAP server, which a Thunderbird user is configured to query for address-book autocomplete, can stash arbitrarily large amounts of attacker-supplied data into the Thunderbird LDAP client until it crashes due to memory exhaustion. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1. A remote attacker, by operating a malicious Lightweight Directory Access Protocol (LDAP) server, can cause a Thunderbird client to crash due to memory exhaustion. This can lead to a Denial of Service (DoS) for the affected user. Red Hat severity: Moderate — CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). Weakness: CWE-1050. Red Hat lists Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9 as not affected.
Medium [CVE-2026-14324] RAOP RTSP NULL Deref
RAOP RTSP NULL Deref. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-476.
Medium [CVE-2026-14330] Pulse Server alloca Stack Overflow
Pulse Server alloca Stack Overflow. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-770.
Medium [CVE-2026-53333] handle non-swap entries before !CONFIG_SWAP guard
handle non-swap entries before!CONFIG_SWAP guard. Red Hat rates this low (CVSS 5.5). Weakness: CWE-393.
Medium [CVE-2026-53353] Remove WARN_ONCE in hsr_addr_is_self
Remove WARN_ONCE() in hsr_addr_is_self(). Red Hat rates this low (CVSS 5.5). Weakness: CWE-826.