Red Hat Linux Security Advisories & CVEs
4787 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
High [CVE-2026-47139] Sandbox escape via internal HTTP built-ins leading to network restriction bypass
Sandbox escape via internal HTTP built-ins leading to network restriction bypass. Red Hat rates this moderate (CVSS 8.6). Weakness: CWE-1100. Affected package(s): rhdh/rhdh-hub-rhel9:1782761244. Resolved in Red Hat advisory RHSA-2026:33574 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-47135] Sandbox escape allows arbitrary code execution on the host system
Sandbox escape allows arbitrary code execution on the host system. Red Hat rates this moderate (CVSS 8.7). Weakness: CWE-1100. Affected package(s): rhdh/rhdh-hub-rhel9:1782761244. Resolved in Red Hat advisory RHSA-2026:33574 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-47209] Integrity bypass via incorrect property assignment leading to potential arbitrary code execution
Integrity bypass via incorrect property assignment leading to potential arbitrary code execution. Red Hat rates this moderate (CVSS 8.6). Weakness: CWE-915. Affected package(s): rhdh/rhdh-hub-rhel9:1782761244. Resolved in Red Hat advisory RHSA-2026:33574 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-45416] Denial of Service due to eager buffer allocation in TLS handshake
Denial of Service due to eager buffer allocation in TLS handshake. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Affected package(s): netty-handler, offline-knowledge-portal/rhokp-rhel9:1782239370. Resolved in Red Hat advisory RHSA-2026:26586 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Offline Knowledge Portal 1.2.7; OpenShift Serverless; Red Hat AMQ Broker 7; Red Hat AMQ Clients; and 26 more.
High [CVE-2026-44894] Denial of Service amplification via improper QUIC token validation
Denial of Service amplification via improper QUIC token validation. Red Hat rates this important (CVSS 7.5). Weakness: CWE-346. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat build of Apache Camel - HawtIO 4.
High [CVE-2026-44893] Denial of Service via malformed HAProxy message
Denial of Service via malformed HAProxy message. Red Hat rates this important (CVSS 7.5). Weakness: CWE-805. Affected package(s): netty-codec-haproxy. Resolved in Red Hat advisory RHSA-2026:26586 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Build of Apache Camel 3.33 for Quarkus 3.33.2.SP1; Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16; Red Hat build of Quarkus 3.27.4.SP1; Red Hat build of Quarkus 3.33.2.SP1; and 20 more.
High [CVE-2026-50633] Arbitrary code execution via JNDI Injection
Arbitrary code execution via JNDI Injection. Red Hat rates this important (CVSS 8.1). Weakness: CWE-502. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16; Red Hat Fuse 7.
High [CVE-2026-50632] Arbitrary code execution via untrusted JMS configuration
Arbitrary code execution via untrusted JMS configuration. Red Hat rates this important (CVSS 8.8). Weakness: CWE-502. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16; Red Hat Fuse 7; Red Hat JBoss Enterprise Application Platform 7; Red Hat JBoss Enterprise Application Platform 8; and 1 more.
High [CVE-2026-50628] Unauthorized access due to logic error in OAuthRequestFilter
Unauthorized access due to logic error in OAuthRequestFilter. Red Hat rates this important (CVSS 7.4). Weakness: CWE-358. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16; Red Hat Fuse 7; Red Hat JBoss Web Server 5.
High [CVE-2026-50627] Token Confusion/Routing attacks due to improper validation of JWT audience claims
Token Confusion/Routing attacks due to improper validation of JWT audience claims. Red Hat rates this important (CVSS 8.1). Weakness: CWE-303. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16; Red Hat Fuse 7; Red Hat JBoss Web Server 5.
High [CVE-2026-49875] Information disclosure via out-of-band external entity resolution due to missing JAXP hardening
Information disclosure via out-of-band external entity resolution due to missing JAXP hardening. Red Hat rates this important (CVSS 7.5). Weakness: CWE-611. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat build of Apache Camel 4 for Quarkus 3; Red Hat Fuse 7; Red Hat JBoss Enterprise Application Platform 7; Red Hat JBoss Enterprise Application Platform 8; and 3 more.
High [CVE-2026-53705] Heap buffer overflow in WavPack decoder via integer overflow
Heap buffer overflow in WavPack decoder via integer overflow. Red Hat rates this important (CVSS 7.6). Weakness: CWE-190. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions; Red Hat Enterprise Linux 9.6 Extended Update Support; Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions; and 7 more.
High [CVE-2026-44890] Denial of Service via crafted Redis payloads
Denial of Service via crafted Redis payloads. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16; Red Hat Fuse 7; Red Hat JBoss Enterprise Application Platform Expansion Pack; Red Hat Data Grid 8.6.2; and 5 more.
High [CVE-2026-44250] Denial of Service via crafted Redis payload with deeply nested arrays
Denial of Service via crafted Redis payload with deeply nested arrays. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16; Red Hat Fuse 7; Red Hat JBoss Enterprise Application Platform Expansion Pack; Red Hat Data Grid 8.6.2; and 5 more.
High [CVE-2026-12034] Insufficient validation of untrusted input Linux Toolkit Theming
Insufficient validation of untrusted input Linux Toolkit Theming. Red Hat rates this important (CVSS 8.3). Weakness: CWE-1289. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-12035] Use after free Views
Use after free Views. Red Hat rates this important (CVSS 8.8). Weakness: CWE-825. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-12031] Inappropriate implementation Views
Inappropriate implementation Views. Red Hat rates this important (CVSS 8.3). Weakness: CWE-266. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-12030] Heap buffer overflow GPU
Heap buffer overflow GPU. Red Hat rates this important (CVSS 8.3). Weakness: CWE-787. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-12029] Use after free Video
Use after free Video. Red Hat rates this important (CVSS 8.3). Weakness: CWE-825. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-12028] Use after free GPU
Use after free GPU. Red Hat rates this important (CVSS 8.3). Weakness: CWE-825. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.