Red Hat Linux Security Advisories & CVEs
3200 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-57204] Denial of Service via crafted PDF with missing stream length
Denial of Service via crafted PDF with missing stream length. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-770.
Medium [CVE-2026-49478] Server-Side Request Forgery and Kubernetes ServiceAccount token leakage
Server-Side Request Forgery and Kubernetes ServiceAccount token leakage. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-918.
Medium [CVE-2026-49835] Denial of Service via unbounded metric label cardinality
Denial of Service via unbounded metric label cardinality. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-770.
Medium [CVE-2026-13455] Information Disclosure via brute-force attack on hash function
Information Disclosure via brute-force attack on hash function. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-916.
Medium [CVE-2026-58015] path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context parameter received from the server. A malicious D-Bus server can supply a cookie_context containing path traversal sequences, causing the client to read an arbitrary file and exfiltrate sensitive data by verifying guessed file contents against a generated hash. To exploit this flaw, an attacker must be in a position to perform a man-in-the-middle (MitM) attack on the connection or operate a malicious server that the client connects to. Furthermore, extracting data requires an oracle attack (guessing and hashing), increasing the complexity of exploitation. However, if successful, this issue allows the exfiltration of sensitive secrets, such as SSH keys or API tokens, from the filesystem. Due to these reasons, this vulnerability has been rated with a moderate severity. Red Hat severity: Moderate — CVSS 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). Weakness: CWE-22. Affected Red Hat products: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9. Red Hat lists Red Hat Hardened Images as not affected. Red Hat does not currently list a fixing RHSA for this CVE.
Medium [CVE-2026-58013] buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 1 more. Affected products named by the advisory: Red Hat Enterprise Linux 9.
Medium [CVE-2026-58012] buffer over-read in g_regex_replace via glib/gregex.c:string_append and g_utf8_next_char
A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change replacement escapes because the string_append function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the string is treated as raw bytes. This vulnerability can cause a minor information disclosure of 1-5 bytes and a denial of service when the buffer over-read crosses a page boundary. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 1 more. Affected products named by the advisory: Red Hat Enterprise Linux 9.
Medium [CVE-2026-58011] out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime
A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the g_date_time_add_full function is processed. This flaw can corrupt the date output and potentially cause logic errors that may lead to a denial of service. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 1 more. Affected products named by the advisory: Red Hat Enterprise Linux 9.
Medium [CVE-2026-58010] buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal
A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; and 1 more. Affected products named by the advisory: Red Hat Enterprise Linux 9.
Medium [CVE-2026-53432] Denial of Service via Integer Overflow in FuzzyMatchV2 function
Denial of Service via Integer Overflow in FuzzyMatchV2 function. Red Hat rates this moderate (CVSS 5). Weakness: CWE-190.
Medium [CVE-2026-4629] privilege escalation through hardcoded role mapper injection
A flaw was found in Keycloak. A highly privileged user with `manage-clients` permission can exploit this vulnerability by injecting a hardcoded role mapper into any client. This action allows the user to bypass existing scope restrictions and inject the `realm-admin` role into generated tokens, resulting in privilege escalation and full administrative access to the realm. Affected product named by the advisory: Red Hat build of Keycloak 26.4.
Medium [CVE-2026-12388] Privilege escalation to realm administrator via improper authorization in identity provider mapper
Privilege escalation to realm administrator via improper authorization in identity provider mapper. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-266.
Medium [CVE-2026-14209] keycloak-admin-ui:Admin UI extension brute-force-user endpoint bypasses FGAPv2 user view restrictions
keycloak-admin-ui:Admin UI extension brute-force-user endpoint bypasses FGAPv2 user view restrictions. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-639.
Medium [CVE-2026-53917] Denial of Service via crafted OpenWire Message
Denial of Service via crafted OpenWire Message. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-770.
Medium [CVE-2026-12610] Sssd: use-after-free crash in sssd' 'sssd_pam' process
A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this flaw by manipulating smartcard or YubiKey contents, leading to a denial of service that disrupts authentication. This vulnerability also presents a potential for privilege escalation, although it is difficult to exploit. Red Hat severity: Moderate — CVSS 6.4 (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H). Weakness: CWE-825. Affected Red Hat products: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4. Red Hat lists Red Hat Hardened Images as not affected. Will not fix / out of support: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7. Red Hat does not currently list a fixing RHSA for this CVE. Affected products named by the advisory: Red Hat package: pam; Red Hat package: sssd.
Medium [CVE-2026-14101] Insufficient policy enforcement in Sandbox
Insufficient policy enforcement in Sandbox. Red Hat rates this low (CVSS 5.7). Weakness: CWE-653.
Medium [CVE-2026-55956] Improper Authorization Allows Security Constraint Bypass
Improper Authorization Allows Security Constraint Bypass. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-551. Red Hat lists fixing advisory RHSA-2026:39189 with package tomcat11-main-11.0.23-0.1.hum1, tomcat-catalina, jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws, jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws. Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
Medium [CVE-2026-55955] Replay attack via improper authentication in EncryptionInterceptor
Replay attack via improper authentication in EncryptionInterceptor. Red Hat rates this moderate (CVSS 4.2). Weakness: CWE-294. Red Hat lists fixing advisory RHSA-2026:29203 with package tomcat11-main-11.0.23-0.1.hum1, tomcat10-main-10.1.56-1.hum1.
Medium [CVE-2026-53404] Incorrect control flow in rewrite valve allows unexpected rule processing
Incorrect control flow in rewrite valve allows unexpected rule processing. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-358. Red Hat lists fixing advisory RHSA-2026:29203 with package tomcat11-main-11.0.23-0.1.hum1, tomcat10-main-10.1.56-1.hum1.
Medium [CVE-2026-50229] Cross-Site Scripting vulnerability in number guess example
Cross-Site Scripting vulnerability in number guess example. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-79. Red Hat lists fixing advisory RHSA-2026:32960 with package tomcat11-main-11.0.23-0.1.hum1.