Red Hat Linux Security Advisories & CVEs
465 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Low [CVE-2026-94218] 2FA setup enforcement bypass via authentication session restart endpoint
2FA setup enforcement bypass via authentication session restart endpoint. Red Hat rates this low (CVSS 3.1). Weakness: CWE-862. Affected product named by the advisory: Red Hat Build of Keycloak.
Low [CVE-2026-94217] UMA scope merge across resource owners via resource name collision
UMA scope merge across resource owners via resource name collision. Red Hat rates this moderate (CVSS 3.5). Weakness: CWE-862. Affected product named by the advisory: Red Hat Build of Keycloak.
Low [CVE-2026-93989] Cross-request logits corruption via out-of-bounds token indices
Cross-request logits corruption via out-of-bounds token indices. Red Hat rates this low (CVSS 3.1). Weakness: CWE-787. Affected products named by the advisory: Red Hat AI Inference Server; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenShift AI (RHOAI).
Low [CVE-2026-94055] Use-after-free vulnerability in GnuTLS TLS settings leading to denial of service
Use-after-free vulnerability in GnuTLS TLS settings leading to denial of service. Red Hat rates this low. Weakness: CWE-416.
Low [CVE-2026-93986] Path traversal vulnerability
Path traversal vulnerability. Red Hat rates this low (CVSS 3.1). Weakness: CWE-22. Affected products named by the advisory: Cryostat 4; Red Hat Advanced Cluster Management for Kubernetes 2.
Low [CVE-2026-93841] Memory corruption via unvalidated prompt token IDs
Memory corruption via unvalidated prompt token IDs. Red Hat rates this low (CVSS 3.7). Weakness: CWE-787. Affected products named by the advisory: Red Hat AI Inference Server; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenShift AI (RHOAI).
Low [CVE-2026-91142] Integer overflow in `do_lastlog ` offset calculation can misaddress `lastlog` entries on ILP32 builds
Integer overflow in `do_lastlog()` offset calculation can misaddress `lastlog` entries on ILP32 builds. Red Hat rates this low (CVSS 3.6). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: cockpit.
Low [CVE-2026-93676] Xdg-dbus-proxy: xdg-dbus-proxy: filtering for broadcast messages bypasses path/interface/member checks
xdg-dbus-proxy incorrectly filters D-Bus broadcast messages, bypassing configured path, interface, and member restrictions. This allows a sandboxed Flatpak application to intercept broadcast signals on the D-Bus session bus and AT-SPI bus that should be restricted, potentially exposing sensitive information to unauthorized applications. Red Hat severity: Low — CVSS 3.2 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N). Weakness: CWE-284. Red Hat lists Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9 as not affected.
Low [CVE-2026-93601] Name Constraint Bypass in wildcard certificate validation
Name Constraint Bypass in wildcard certificate validation. Red Hat rates this low (CVSS 2.2). Weakness: CWE-1289. Affected products named by the advisory: Ansible Automation Orchestrator 2026; Confidential Cluster Operator; Confidential Compute Attestation; Logging Subsystem for Red Hat OpenShift; and 32 more. Affected products named by the advisory: Migration Toolkit for Applications 8; OpenShift Lightspeed; OpenShift Service Mesh 3; Pen Drive Powered by Red Hat Lightspeed; and 28 more.
Low [CVE-2026-93600] URI Name Constraint Bypass via X.509 Certificate Misissue
URI Name Constraint Bypass via X.509 Certificate Misissue. Red Hat rates this low (CVSS 2.2). Weakness: CWE-295. Affected products named by the advisory: Confidential Cluster Operator; Confidential Compute Attestation; Logging Subsystem for Red Hat OpenShift; Migration Toolkit for Applications 8; and 16 more. Affected products named by the advisory: OpenShift Lightspeed; OpenShift Service Mesh 3; Pen Drive Powered by Red Hat Lightspeed; Red Hat Ansible Automation Platform 2; and 12 more.
Low [CVE-2026-93590] Denial of Service via UHDR encoder policy bypass
Denial of Service via UHDR encoder policy bypass. Red Hat rates this low (CVSS 3.7). Weakness: CWE-131. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-93588] Denial of Service via Null Pointer Dereference in PNM Coder
Denial of Service via Null Pointer Dereference in PNM Coder. Red Hat rates this low (CVSS 3.1). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-93586] Denial of Service via Use After Free in ImagesToBlob
Denial of Service via Use After Free in ImagesToBlob. Red Hat rates this low (CVSS 2.9). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-93587] Local user can cause denial of service via policy bypass in image decoders
Local user can cause denial of service via policy bypass in image decoders. Red Hat rates this low (CVSS 3.3). Weakness: CWE-770. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat package: imagemagick.
Low [CVE-2026-93378] Missing authorization in Storage
Missing authorization in Storage. Red Hat rates this low (CVSS 3). Weakness: CWE-653.
Low [CVE-2026-85716] Server impersonation due to unverified authentication responses
Server impersonation due to unverified authentication responses. Red Hat rates this low (CVSS 3.7). Weakness: CWE-347. Affected product named by the advisory: Red Hat Fuse 7.
Low [CVE-2026-92962] Information disclosure via stack trace interception
Information disclosure via stack trace interception. Red Hat rates this low (CVSS 2.5). Weakness: CWE-915.
Low [CVE-2026-81870] github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Information disclosure via exporter configuration logging
github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Information disclosure via exporter configuration logging. Red Hat rates this low (CVSS 3.3). Weakness: CWE-538. Red Hat lists fixing advisory RHSA-2026:72475 with package cert-manager/cert-manager-istio-csr-rhel9:1790223719, cert-manager/cert-manager-istio-csr-rhel9:1790589914. Affected product named by the advisory: Cert Manager support for Red Hat OpenShift release 1.20.
Low [CVE-2026-77860] Denial of Service via 'serve-expired' code path bypass
Denial of Service via 'serve-expired' code path bypass. Red Hat rates this low (CVSS 3.7). Weakness: CWE-675. Red Hat lists fixing advisory RHSA-2026:68590 with package unbound-main-1.26.1-1.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 1 more. Affected products named by the advisory: Red Hat package: unbound.
Low [CVE-2026-91739] Missing authorization in Transactions Platform
Missing authorization in Transactions Platform. Red Hat rates this low (CVSS 3.9). Weakness: CWE-1021.