Red Hat Linux Security Advisories & CVEs
5475 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Linux release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Linux advisories
Medium [CVE-2026-16733] bahmutov find-cypress-specs: OS Command Injection via Branch Argument Manipulation
bahmutov find-cypress-specs: OS Command Injection via Branch Argument Manipulation. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-78.
Medium [CVE-2026-65903] Security bypass allows injection of malicious content
Security bypass allows injection of malicious content. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-79.
Medium [CVE-2026-15037] XML injection via improper output neutralization in QDom serialization.
XML injection via improper output neutralization in QDom serialization. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-91.
Medium [CVE-2026-59677] Denial of Service via missing authorization in seunshares
Denial of Service via missing authorization in seunshares. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-266. Red Hat lists fixing advisory RHSA-2026:44343 with package policycoreutils-main-3.11-2.1.hum1.
Medium [CVE-2026-59676] Arbitrary file deletion via TOCTOU race condition in seunshare
Arbitrary file deletion via TOCTOU race condition in seunshare. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-367. Red Hat lists fixing advisory RHSA-2026:44343 with package policycoreutils-main-3.11-2.1.hum1.
Medium [CVE-2026-6390] GNU nano: Arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling.
GNU nano: Arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling. Red Hat rates this moderate (CVSS 6.8). Weakness: CWE-134.
Medium [CVE-2026-21723] Denial of Service via uncontrolled memory usage in alertmanager templates
Denial of Service via uncontrolled memory usage in alertmanager templates. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770.
Low [CVE-2026-52686] DNSSEC validation bypass due to unsigned wildcard expansion proofs
DNSSEC validation bypass due to unsigned wildcard expansion proofs. Red Hat rates this low (CVSS 3.7). Weakness: CWE-347.
Critical [CVE-2026-65601] Privilege Escalation via Kubernetes Gateway API Namespace Confusion
Privilege Escalation via Kubernetes Gateway API Namespace Confusion. Red Hat rates this important (CVSS 9.6). Weakness: CWE-348.
Critical [CVE-2026-65600] Authentication bypass via path traversal in ReplacePathRegex middleware
Authentication bypass via path traversal in ReplacePathRegex middleware. Red Hat rates this critical (CVSS 10). Weakness: CWE-22.
High [CVE-2026-64835] Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files
Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files. Red Hat rates this important (CVSS 8.8). Weakness: CWE-125. Red Hat lists fixing advisory RHSA-2026:51180 with package ffmpeg-0:6.1.6-3.el9ai. Affected product named by the advisory: Red Hat Enterprise Linux 9.
High [CVE-2026-64834] Denial of Service via crafted RTP/ASF stream
Denial of Service via crafted RTP/ASF stream. Red Hat rates this important (CVSS 7.5). Weakness: CWE-835.
High [CVE-2026-64831] Arbitrary code execution via crafted HEVC/H.265 bitstream
Arbitrary code execution via crafted HEVC/H.265 bitstream. Red Hat rates this important (CVSS 8.8). Weakness: CWE-120.
High [CVE-2026-44191] Visual Studio Code Ansible Lightspeed extension: Remote Code Execution via command injection in configuration settings
Visual Studio Code Ansible Lightspeed extension: Remote Code Execution via command injection in configuration settings. Red Hat rates this important (CVSS 7.8). Weakness: CWE-78.
High [CVE-2026-44190] Ansible Lightspeed Visual Studio Code extension: Arbitrary code execution via command injection in activation script setting
Ansible Lightspeed Visual Studio Code extension: Arbitrary code execution via command injection in activation script setting. Red Hat rates this important (CVSS 7.8). Weakness: CWE-78.
High [CVE-2026-44189] Visual Studio Code Ansible Lightspeed Extension: Arbitrary Code Execution via Malicious Playbook Filename
Visual Studio Code Ansible Lightspeed Extension: Arbitrary Code Execution via Malicious Playbook Filename. Red Hat rates this important (CVSS 7.8). Weakness: CWE-88.
High [CVE-2026-40691] Denial of Service via crafted DNSCrypt query
Denial of Service via crafted DNSCrypt query. Red Hat rates this important (CVSS 7.5). Red Hat lists fixing advisory RHSA-2026:43588 with package unbound-main-1.25.2-0.1.hum1.
High [CVE-2026-11331] Potential wildcard CNAME RPZ policy bypass
Potential wildcard CNAME RPZ policy bypass. Red Hat rates this important (CVSS 7.5).
High [CVE-2026-13321] DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field
DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field. Red Hat rates this important (CVSS 8.6).
High [CVE-2026-11605] Unnecessary validation of DNSSEC signed records
Unnecessary validation of DNSSEC signed records. Red Hat rates this important (CVSS 7.5). Weakness: CWE-400. Red Hat lists fixing advisory RHSA-2026:42853 with package bind-main-9.18.50-22.hum1.