Red Hat Linux Security Advisories & CVEs
5205 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Linux release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Linux advisories
High [CVE-2026-4926] Denial of Service via crafted regular expressions
Denial of Service via crafted regular expressions. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1333. Affected package(s): ansible-automation-platform, migration-toolkit-virtualization/mtv-console-plugin-rhel9:1779139872, cryostat/cryostat-openshift-console-plugin-rhel9:4.2.0, rhtas/rhtas-console-ui-rhel9:1776673130, rhdh/rhdh-hub-rhel9:1776784286, rhosdt/tempo-jaeger-query-rhel9:1776435608. Resolved in Red Hat advisory RHSA-2026:13826 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Cryostat 4 on RHEL 9; Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Ansible Automation Platform 2.6 for RHEL 9; and 21 more.
High [CVE-2026-33487] Integrity bypass due to incorrect XML Digital Signature validation via loop variable capture issue
Integrity bypass due to incorrect XML Digital Signature validation via loop variable capture issue. Red Hat rates this important (CVSS 7.5). Weakness: CWE-347. Affected package(s): multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779212259, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1780167118, rhacm2/acm-grafana-rhel9:1777142269, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1778867753, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779579439, openshift-gitops. Resolved in Red Hat advisory RHSA-2026:21769 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Advanced Cluster Management for Kubernetes 2.14; Red Hat Advanced Cluster Management for Kubernetes 2.15; Red Hat OpenShift GitOps 1.18; Red Hat OpenShift GitOps 1.19; and 2 more.
High [CVE-2026-33636] Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion
Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion. Red Hat rates this moderate (CVSS 7.6). Weakness: CWE-124. Affected package(s): libpng, firefox, java, thunderbird, discovery/discovery-ui-rhel9:1782756541, rhaiis/model-opt-cuda-rhel9:1780681984. Resolved in Red Hat advisory RHSA-2026:11805 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 7.
High [CVE-2026-33416] Arbitrary code execution due to use-after-free vulnerability
Arbitrary code execution due to use-after-free vulnerability. Red Hat rates this moderate (CVSS 7.5). Weakness: CWE-825. Affected package(s): libpng, firefox, discovery/discovery-ui-rhel9:1782756541, libpng15, thunderbird, libpng12. Resolved in Red Hat advisory RHSA-2026:18064 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 7.
High [CVE-2026-33413] Authorization bypass allows information disclosure and denial of service
Authorization bypass allows information disclosure and denial of service. Red Hat rates this moderate (CVSS 7.7). Weakness: CWE-306. Affected package(s): multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1780167118, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1778867753, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779579439, etcd. Resolved in Red Hat advisory RHSA-2026:21769 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9.
High [CVE-2026-1961] Remote Code Execution via command injection in WebSocket proxy
Remote Code Execution via command injection in WebSocket proxy. Red Hat rates this important (CVSS 8). Weakness: CWE-78. Affected package(s): foreman, rubygem-katello, rubygem-fog-kubevirt, python-pulp-container, python-pulp-rpm, python-django. Resolved in Red Hat advisory RHSA-2026:5968 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Satellite 6.16 for RHEL 8; Red Hat Satellite 6.16 for RHEL 9; Red Hat Satellite 6.17 for RHEL 9; Red Hat Satellite 6.18 for RHEL 9.
High [CVE-2026-33526] Denial of Service via heap Use-After-Free vulnerability in ICP handling
Denial of Service via heap Use-After-Free vulnerability in ICP handling. Red Hat rates this important (CVSS 7.5). Weakness: CWE-825. Affected package(s): squid, squid:4. Resolved in Red Hat advisory RHSA-2026:8880 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 9 more.
High [CVE-2026-32748] Denial of Service via crafted ICP traffic
Denial of Service via crafted ICP traffic. Red Hat rates this important (CVSS 7.5). Weakness: CWE-826. Affected package(s): squid, squid:4. Resolved in Red Hat advisory RHSA-2026:8880 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 9 more.
Medium [CVE-2026-34352] TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions
TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions. Red Hat rates this moderate (CVSS 6.3). Weakness: CWE-279. Affected package(s): tigervnc. Resolved in Red Hat advisory RHSA-2026:24341 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7.
Medium [CVE-2026-33671] Regular Expression Denial of Service via crafted extglob patterns
Regular Expression Denial of Service via crafted extglob patterns. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-1333. Affected package(s): cluster-observability-operator/logging-console-plugin-pf4-rhel9:1782839279, cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9:1782839996, cluster-observability-operator/logging-console-plugin-pf5-rhel9:1782840539. Resolved in Red Hat advisory RHSA-2026:34342 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-32287] Denial of Service due to infinite loop via boolean XPath expressions
Denial of Service due to infinite loop via boolean XPath expressions. Red Hat rates this moderate (CVSS 6.2). Weakness: CWE-606. Affected package(s): rhosdt/opentelemetry-collector-rhel9:1776185379. Resolved in Red Hat advisory RHSA-2026:9388 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-4923] Denial of Service via specially crafted paths with multiple wildcards
Denial of Service via specially crafted paths with multiple wildcards. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-1333. Affected package(s): rhdh/rhdh-hub-rhel9:1780930740. Resolved in Red Hat advisory RHSA-2026:24841 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-4867] Denial of Service via catastrophic backtracking from malformed URL parameters
Denial of Service via catastrophic backtracking from malformed URL parameters. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-1333. Affected package(s): cluster-observability-operator/logging-console-plugin-pf4-rhel9:1782839279, cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9:1782839996, cluster-observability-operator/logging-console-plugin-pf5-rhel9:1782840539. Resolved in Red Hat advisory RHSA-2026:34342 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-4887] GIMP:Memory disclosure and denial of service via specially crafted PCX image
GIMP:Memory disclosure and denial of service via specially crafted PCX image. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-193. Affected package(s): gimp, gimp:2.8. Resolved in Red Hat advisory RHSA-2026:17533 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 7.
Low [CVE-2026-4874] Server-Side Request Forgery via OIDC token endpoint manipulation
Server-Side Request Forgery via OIDC token endpoint manipulation. Red Hat rates this low (CVSS 3.1). Weakness: CWE-918. Affected package(s): rhbk/keycloak-operator-bundle:26.4.13, rhbk/keycloak-rhel9-operator:26.4, rhbk/keycloak-rhel9, rhbk/keycloak-rhel9:26.4, rhbk/keycloak-operator-bundle:26.6.3, rhbk/keycloak-rhel9:26.6. Resolved in Red Hat advisory RHSA-2026:30049 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Critical [CVE-2025-70888] Remote privilege escalation
Remote privilege escalation. Red Hat rates this critical (CVSS 10). Weakness: CWE-266. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-30892] Privilege escalation due to incorrect parsing of the `--user` option
Privilege escalation due to incorrect parsing of the `--user` option. Red Hat rates this moderate (CVSS 7.8). Weakness: CWE-115. Affected package(s): crun. Resolved in Red Hat advisory RHSA-2026:28036 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 1.
High [CVE-2026-33247] Information disclosure of credentials via monitoring port and command-line arguments
Information disclosure of credentials via monitoring port and command-line arguments. Red Hat rates this important (CVSS 7.5). Weakness: CWE-214. Affected package(s): multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1780167118, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1778867753, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779579439. Resolved in Red Hat advisory RHSA-2026:21769 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat multicluster global hub 1.4.3; Red Hat multicluster global hub 1.5.2.
High [CVE-2026-34881] Server-Side Request Forgery leading to unauthorized internal network access
Server-Side Request Forgery leading to unauthorized internal network access. Red Hat rates this important (CVSS 7.1). Weakness: CWE-918. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat OpenStack Platform 16.2; Red Hat OpenStack Platform 17.1; Red Hat OpenStack Platform 18.0.
High [CVE-2026-33219] Denial of Service via unbounded memory use in WebSockets
Denial of Service via unbounded memory use in WebSockets. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Affected package(s): multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1780167118, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1778867753, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779579439. Resolved in Red Hat advisory RHSA-2026:21769 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat multicluster global hub 1.4.3; Red Hat multicluster global hub 1.5.2.