Red Hat Linux Security Advisories & CVEs
4450 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
High [CVE-2026-75092] scan_mysql runs mysqld --validate-config as root and can load mysql-writable plugins
scan_mysql runs mysqld --validate-config as root and can load mysql-writable plugins. Red Hat rates this important (CVSS 7.3). Weakness: CWE-250. Red Hat lists fixing advisory RHSA-2026:67609 with package leapp-repository-0:0.24.0-1.el9_8.1, leapp-repository-0:0.22.0-1.el9_6.2. Affected product named by the advisory: Red Hat Enterprise Linux 9.
High [CVE-2026-90852] luben zstd-jni: Remote use-after-free vulnerability in dictionary sharing
luben zstd-jni: Remote use-after-free vulnerability in dictionary sharing. Red Hat rates this important (CVSS 7.3). Weakness: CWE-825. Red Hat lists fixing advisory RHSA-2026:71675 with package zstd-jni. Affected products named by the advisory: Exploit Intelligence; OpenShift Developer Tools and Services; Red Hat build of Apache Camel 4 for Quarkus 3; Red Hat build of Apache Camel for Spring Boot 4; and 10 more. Affected products named by the advisory: Red Hat build of Apicurio Registry 3; Red Hat build of Debezium 3; Red Hat build of Quarkus; Red Hat Ceph Storage 9; and 6 more.
High [CVE-2026-91771] Arbitrary code execution via path traversal in file download
Arbitrary code execution via path traversal in file download. Red Hat rates this important (CVSS 8.8). Weakness: CWE-22. Affected products named by the advisory: Exploit Intelligence; Red Hat AI Inference Server.
High [CVE-2026-92248] integer overflow when generating a thumbnail preview for a PSD file
integer overflow when generating a thumbnail preview for a PSD file. Red Hat rates this important (CVSS 7.8). Weakness: CWE-190. Red Hat lists fixing advisory RHSA-2026:75575 with package gimp-2:3.0.4-4.el9_8.14. Affected product named by the advisory: Red Hat Enterprise Linux 9.
High [CVE-2026-68489] Plesk Extensions Ruby and Node.js Toolkit: Arbitrary Code Execution via Static Code Injection
Plesk Extensions Ruby and Node.js Toolkit: Arbitrary Code Execution via Static Code Injection. Red Hat rates this important (CVSS 8.8). Weakness: CWE-94. Affected products named by the advisory: Red Hat OpenShift AI (RHOAI); Red Hat OpenShift Container Platform 4; Red Hat OpenShift Dev Spaces.
High [CVE-2026-53714] Information Disclosure via Unauthenticated xDS gRPC Server
Information Disclosure via Unauthenticated xDS gRPC Server. Red Hat rates this important (CVSS 7.4). Weakness: CWE-306.
High [CVE-2026-82049] Python tarfile module: File modification and content disclosure via crafted archives
Python tarfile module: File modification and content disclosure via crafted archives. Red Hat rates this important (CVSS 7.1). Weakness: CWE-59. Red Hat lists fixing advisory RHSA-2026:68135 with package python3-11-main-3.11.16-1.4.hum1, python3-12-main-3.12.14-1.3.hum1, python3-10-main-3.10.21-1.3.hum1, python3-13-main-3.13.15-1.3.hum1. Affected product named by the advisory: Red Hat Hardened Images.
High [CVE-2026-82035] Arbitrary file write via path traversal vulnerability
Arbitrary file write via path traversal vulnerability. Red Hat rates this important (CVSS 7.1). Weakness: CWE-22. Affected product named by the advisory: Red Hat Enterprise Linux AI (RHEL AI) 3.
High [CVE-2026-53659] Denial of Service via unbounded gzip decompression
Denial of Service via unbounded gzip decompression. Red Hat rates this important (CVSS 7.5). Weakness: CWE-409.
High [CVE-2026-55451] Denial of Service via Prototype Pollution
Denial of Service via Prototype Pollution. Red Hat rates this important (CVSS 8.2). Weakness: CWE-915. Affected products named by the advisory: Red Hat OpenShift Container Platform 4; Red Hat Openshift Data Foundation 4.
High [CVE-2026-84445] Denial of Service via malformed RPC requests
Denial of Service via malformed RPC requests. Red Hat rates this important (CVSS 7.5). Weakness: CWE-125. Red Hat lists fixing advisory RHSA-2026:72884 with package rhoai/odh-kserve-agent-rhel9:1789570413, rhacm2/multicluster-role-assignment-rhel9:1790198006, cluster-observability-operator/prometheus-rhel9:1790857922, multicluster-engine/hypershift-addon-rhel9-operator:1790117675. Affected product named by the advisory: Red Hat Enterprise Linux 7.
High [CVE-2026-90947] out-of-bounds write in lighting effects plugin via crafted preset file
out-of-bounds write in lighting effects plugin via crafted preset file. Red Hat rates this important (CVSS 7.8). Weakness: CWE-787. Red Hat lists fixing advisory RHSA-2026:75575 with package gimp-2:3.0.4-4.el9_8.14. Affected product named by the advisory: Red Hat Enterprise Linux 9.
High [CVE-2026-90949] heap-based buffer overflow in PSP loader due to selection-channel geometry mismatch
heap-based buffer overflow in PSP loader due to selection-channel geometry mismatch. Red Hat rates this important (CVSS 7.8). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8.
High [CVE-2026-90948] heap-based buffer overflow in ICO loader via integer overflow in embedded PNG dimensions
heap-based buffer overflow in ICO loader via integer overflow in embedded PNG dimensions. Red Hat rates this important (CVSS 7.8). Weakness: CWE-787. Red Hat lists fixing advisory RHSA-2026:75575 with package gimp-2:3.0.4-4.el9_8.14. Affected product named by the advisory: Red Hat Enterprise Linux 9.
High [CVE-2023-32803] Failure to remove TrustCor root certificates
Failure to remove TrustCor root certificates. Red Hat rates this important (CVSS 8.1). Weakness: CWE-459. Red Hat lists fixing advisory RHSA-2026:40570 with package ca-certificates-main-2025.2.80_v9.0.304-9.hum1. Affected products named by the advisory: Red Hat Hardened Images; Red Hat OpenShift Container Platform 4.
High [CVE-2026-84635] Processing maliciously crafted web content may lead to an unexpected process termination
Processing maliciously crafted web content may lead to an unexpected process termination. Red Hat rates this important (CVSS 8.8). Weakness: CWE-664. Red Hat lists fixing advisory RHSA-2026:69098 with package webkit2gtk3-0:2.54.0-1.el9_8, webkit2gtk3-0:2.54.0-1.el8_10. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8.
High [CVE-2026-90776] Denial of Service via crafted email headers
Denial of Service via crafted email headers. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1333. Affected product named by the advisory: Self-service automation portal 2.
High [CVE-2026-90678] HTTP Request Smuggling via HTTP/3 Multiplexer Desynchronization
HTTP Request Smuggling via HTTP/3 Multiplexer Desynchronization. Red Hat rates this important (CVSS 8.9). Weakness: CWE-444. Red Hat lists fixing advisory RHSA-2026:60634 with package haproxy-main-3.0.27-0.1.hum1. Affected product named by the advisory: Red Hat Hardened Images.
High [CVE-2026-90616] Arbitrary code execution via missing symlink protection
Arbitrary code execution via missing symlink protection. Red Hat rates this important (CVSS 7.8). Weakness: CWE-59. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: flatpak.
High [CVE-2026-90560] Denial of Service via out-of-bounds read in ZstdDictDecompress
Denial of Service via out-of-bounds read in ZstdDictDecompress. Red Hat rates this important (CVSS 8.2). Weakness: CWE-125. Red Hat lists fixing advisory RHSA-2026:71675 with package zstd-jni. Affected products named by the advisory: Exploit Intelligence; OpenShift Developer Tools and Services; Red Hat build of Apache Camel 4 for Quarkus 3; Red Hat build of Apache Camel for Spring Boot 4; and 10 more. Affected products named by the advisory: Red Hat build of Apicurio Registry 3; Red Hat build of Debezium 3; Red Hat build of Quarkus; Red Hat Ceph Storage 9; and 6 more.