Red Hat Linux Security Advisories & CVEs
10922 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-102270] Denial of Service via regular expression backtracking in is_pem_format
Denial of Service via regular expression backtracking in is_pem_format. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-1333.
Medium [CVE-2026-102269] Token revocation bypass via non-canonical signature decoding
Token revocation bypass via non-canonical signature decoding. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-1286.
Medium [CVE-2026-101918] Denial of Service via deeply nested JSON token payload
Denial of Service via deeply nested JSON token payload. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-248.
Medium [CVE-2026-101917] Denial of Service via outbound request amplification on unknown key identifiers
Denial of Service via outbound request amplification on unknown key identifiers. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-408.
Medium [CVE-2026-101913] Security bypass via incomplete IPv6 link-local address validation
Security bypass via incomplete IPv6 link-local address validation. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-184. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-101912] Access control bypass via cross-family subnet comparison
Access control bypass via cross-family subnet comparison. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-1024. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-101911] Denial of Service via unbounded IPv6 address parsing
Denial of Service via unbounded IPv6 address parsing. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-101910] Security boundary bypass via unclassified NAT64 local-use address range
Security boundary bypass via unclassified NAT64 local-use address range. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-184. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-101101] Denial of Service via uncaught JSON parsing exception
Denial of Service via uncaught JSON parsing exception. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-248. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-101908] Outbound HTTP request manipulation via fetch adapter prototype pollution
Outbound HTTP request manipulation via fetch adapter prototype pollution. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-628. Red Hat lists fixing advisory RHSA-2026:74872 with package grafana12-4-main-12.4.12-0.3.hum1, grafana13-1-main-13.1.6-0.6.hum1, grafana13-2-main-13.2.1-0.9.hum1. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-101907] Server-Side Request Forgery via bypassed redirect restrictions in fetch adapter
Server-Side Request Forgery via bypassed redirect restrictions in fetch adapter. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-918. Red Hat lists fixing advisory RHSA-2026:74872 with package grafana12-4-main-12.4.12-0.3.hum1, grafana13-1-main-13.1.6-0.6.hum1, grafana13-2-main-13.2.1-0.9.hum1. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-101100] @ag-ui/client: ag-ui-protocol ag-ui Middleware filter-tool-calls.ts FilterToolCallsMiddleware cleanup
@ag-ui/client: ag-ui-protocol ag-ui Middleware filter-tool-calls.ts FilterToolCallsMiddleware cleanup. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-459.
Medium [CVE-2026-101904] HTTP header injection via inherited prototype properties
HTTP header injection via inherited prototype properties. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-915. Red Hat lists fixing advisory RHSA-2026:74872 with package grafana12-4-main-12.4.12-0.3.hum1, grafana13-1-main-13.1.6-0.6.hum1, grafana13-2-main-13.2.1-0.9.hum1. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-101902] Unintended HTTP method override via prototype pollution gadget
Unintended HTTP method override via prototype pollution gadget. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-454. Red Hat lists fixing advisory RHSA-2026:74872 with package grafana12-4-main-12.4.12-0.3.hum1, grafana13-1-main-13.1.6-0.6.hum1, grafana13-2-main-13.2.1-0.9.hum1. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-101900] Outbound HTTP header injection via prototype pollution in fetch adapter
Outbound HTTP header injection via prototype pollution in fetch adapter. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-1287. Red Hat lists fixing advisory RHSA-2026:74872 with package grafana12-4-main-12.4.12-0.3.hum1, grafana13-1-main-13.1.6-0.6.hum1, grafana13-2-main-13.2.1-0.9.hum1. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-101898] Security control bypass via unapplied HTTP/2 proxy and DNS settings
Security control bypass via unapplied HTTP/2 proxy and DNS settings. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-918. Red Hat lists fixing advisory RHSA-2026:74872 with package grafana12-4-main-12.4.12-0.3.hum1, grafana13-1-main-13.1.6-0.6.hum1, grafana13-2-main-13.2.1-0.9.hum1. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-96740] Streams for Apache Kafka Console: Unfiltered Kafka client properties → SA-token exfiltration via config.providers
Streams for Apache Kafka Console: Unfiltered Kafka client properties → SA-token exfiltration via config.providers. Red Hat rates this important (CVSS 6.5). Weakness: CWE-470. Affected products named by the advisory: streams for Apache Kafka 2; streams for Apache Kafka 3.
Medium [CVE-2026-88816] Denial of Service via numeric FetchHashKeyName attribute
Denial of Service via numeric FetchHashKeyName attribute. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-843. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 2 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: perl-dbi.
Medium [CVE-2026-19444] Kubernetes kubectl: Arbitrary file write via path traversal on Windows
Kubernetes kubectl: Arbitrary file write via path traversal on Windows. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-22. Affected products named by the advisory: DPU kit for NVIDIA; Multicluster Engine for Kubernetes; Red Hat OpenShift Container Platform 4.
Medium [CVE-2026-101017] Denial of Service via NULL pointer dereference during subdomain walking in opendmarc_policy.c
Denial of Service via NULL pointer dereference during subdomain walking in opendmarc_policy.c. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-476.