Red Hat Linux Security Advisories & CVEs
3067 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
High [CVE-2026-13713] YAML::Syck: Denial of Service via crafted YAML document
YAML::Syck: Denial of Service via crafted YAML document. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1341.
High [CVE-2026-5674] Sandbox escape and arbitrary code execution via malicious library loading
Sandbox escape and arbitrary code execution via malicious library loading. Red Hat rates this important (CVSS 8.8). Weakness: CWE-427.
High [CVE-2026-15925] Snowflake Connector for Python: Arbitrary SQL execution and information disclosure via improper TLS hostname verification
Snowflake Connector for Python: Arbitrary SQL execution and information disclosure via improper TLS hostname verification. Red Hat rates this important (CVSS 7.4). Weakness: CWE-295.
High [CVE-2026-53366] account for fraggap on the paged allocation path
account for fraggap on the paged allocation path. Red Hat rates this important (CVSS 7.8). Weakness: CWE-131. Red Hat lists fixing advisory RHSA-2026:34911 with package kernel-0:6.12.0-211.30.1.el10_2, kernel-0:6.12.0-55.86.1.el10_0. Affected product named by the advisory: Red Hat Enterprise Linux 1.
High [CVE-2026-12382] missing requestHeadersToRemove allows mTLS bypass via Subject header spoofing
missing requestHeadersToRemove allows mTLS bypass via Subject header spoofing. Red Hat rates this important (CVSS 8.2). Weakness: CWE-290. Red Hat lists fixing advisory RHSA-2026:42078 with package automation-gateway-0:2.6.20260422-1.el9ap, automation-gateway-0:2.5.20260715-1.el8ap, automation-gateway-0:2.5.20260715-1.el9ap, ansible-automation-platform-26/gateway-rhel9:1777311120. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8.
High [CVE-2026-58659] Remote code execution via malicious checkpoint files
Remote code execution via malicious checkpoint files. Red Hat rates this important (CVSS 7.8). Weakness: CWE-502.
High [CVE-2026-45804] Arbitrary code execution due to trust_remote_code guard bypass
Arbitrary code execution due to trust_remote_code guard bypass. Red Hat rates this important (CVSS 7.5). Weakness: CWE-94.
High [CVE-2026-60005] Memory disclosure and denial of service in ngx_http_slice_module
Memory disclosure and denial of service in ngx_http_slice_module. Red Hat rates this important (CVSS 8.2). Weakness: CWE-824. Red Hat lists fixing advisory RHSA-2026:46012 with package nginx-main-1.30.4-2.hum1.
High [CVE-2026-42533] Arbitrary code execution via crafted HTTP requests
Arbitrary code execution via crafted HTTP requests. Red Hat rates this important (CVSS 7). Weakness: CWE-131. Red Hat lists fixing advisory RHSA-2026:46012 with package nginx-main-1.30.4-2.hum1.
High [CVE-2022-4318 +1] Fix Bypass for CVE-2022-4318 — /etc/passwd Injection via HOME env
Fix Bypass for CVE-2022-4318 — /etc/passwd Injection via HOME env. Red Hat rates this important (CVSS 7.8). Weakness: CWE-134.
High [CVE-2026-14251] Missing allowedNamespace check in ReconcilerHook for ClusterRole/Role cases enables potential privilege escalation and DoS
Missing allowedNamespace check in ReconcilerHook for ClusterRole/Role cases enables potential privilege escalation and DoS. Red Hat rates this important (CVSS 7.7). Weakness: CWE-862.
High [CVE-2026-30623] Remote code execution via unvalidated MCP server configuration
Remote code execution via unvalidated MCP server configuration. Red Hat rates this important (CVSS 8.8). Weakness: CWE-78.
High [CVE-2026-38974] Missing SSH host key verification allows potential impersonation
Missing SSH host key verification allows potential impersonation. Red Hat rates this important (CVSS 8.8). Weakness: CWE-322.
High [CVE-2026-14957] badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process
badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process. Red Hat rates this moderate (CVSS 7.5). Weakness: CWE-617. Red Hat lists fixing advisory RHSA-2026:46397 with package libreswan-0:5.3.2-1.el9fdp, libreswan-0:5.3.2-1.el10_2, libreswan-0:4.15-10.el9_8, libreswan-0:4.12-2.el8_10.6. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8.
High [CVE-2026-59733] Unauthorized access to private repositories via directory traversal
Unauthorized access to private repositories via directory traversal. Red Hat rates this moderate (CVSS 7.5). Weakness: CWE-22.
High [CVE-2026-50651] SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM
SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:41895 with package dotnet8-0-main-8.0.129-2.1.hum1, dotnet9.0-0:9.0.119-1.el9_8, dotnet9.0-0:9.0.119-1.el8_10, dotnet8.0-0:8.0.129-1.el10_2. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 1.
High [CVE-2026-54572] Arbitrary file write via malicious symbolic link handling
Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, with -l/--links, rclone serializes symlinks as.rclonelink text objects and recreates them on a local destination without validating the target, allowing an attacker-controlled remote to plant an escaping symlink and cause a following object write to land outside the destination with attacker-chosen contents. This issue is fixed in version 1.74.4. A remote attacker could exploit this by providing a malicious symlink, allowing subsequent file writes to occur outside the intended destination with content chosen by the attacker. This could lead to unauthorized modification of files on the system. Rclone's -l/--links option serializes symbolic links encountered during a sync as `.rclonelink` text objects containing the link target, and later recreates those links on the destination. Prior to 1.74.4, rclone did not validate that a stored link target stays within the intended destination tree before recreating it. A remote storage backend under an attacker's control can therefore supply a crafted `.rclonelink` object whose target escapes the destination directory (e.g. via a `../` traversal or an absolute path), causing a subsequent write during the same or a later sync to be redirected outside the intended destination with attacker-chosen content.
High [CVE-2026-45363] Authentication bypass due to empty key in HMAC verification
Authentication bypass due to empty key in HMAC verification. Red Hat rates this important (CVSS 7.4). Weakness: CWE-347.
High [CVE-2026-49477] Denial of Service via crafted CSS selector strings
Denial of Service via crafted CSS selector strings. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1333. Red Hat lists fixing advisory RHSA-2026:34119 with package python-rpds-py-main-2026.6.3-1.hum1, python-attrs-main-26.1.0-3.hum1.
High [CVE-2026-15777] Use after free in UI
Use after free in UI. Red Hat rates this important (CVSS 8.8). Weakness: CWE-825.