Red Hat Linux Security Advisories & CVEs
3200 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-66402] Server Identity Verification Bypass via TLS Certificate Validation Weaknesses
Server Identity Verification Bypass via TLS Certificate Validation Weaknesses. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-222.
Medium [CVE-2026-67338] Stored cross-site scripting in Extension Manager allows arbitrary code execution
Stored cross-site scripting in Extension Manager allows arbitrary code execution. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-79. Affected products named by the advisory: Migration Toolkit for Applications 8; Red Hat OpenShift AI (RHOAI).
Medium [CVE-2026-67296] Denial of Service due to RDPEI message processing
Denial of Service due to RDPEI message processing. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-20.
Medium [CVE-2026-67304] Denial of Service via null pointer dereference in smartcard cleanup
Denial of Service via null pointer dereference in smartcard cleanup. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-476.
Medium [CVE-2026-67289] HTTP Proxy Request Injection via Redirection
HTTP Proxy Request Injection via Redirection. Red Hat rates this moderate (CVSS 5). Weakness: CWE-93. Red Hat lists fixing advisory RHSA-2026:54487 with package freerdp-2:2.11.7-11.el8_10, freerdp-2:2.11.7-7.el9_8.5, freerdp-2:3.10.3-12.el10_2.8. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 10.
Medium [CVE-2026-67293] Weakens TLS server authentication due to improper wildcard certificate hostname validation
Weakens TLS server authentication due to improper wildcard certificate hostname validation. Red Hat rates this moderate (CVSS 4.2). Weakness: CWE-295.
Medium [CVE-2026-67317] Denial of Service via maxBodyLength bypass with ReadableStream
Denial of Service via maxBodyLength bypass with ReadableStream. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:50826 with package grafana13-1-main-13.1.1-0.5.2.hum1, grafana13-1-main-13.1.1-0.5.hum1.
Medium [CVE-2026-67297] Resource exhaustion due to oversized chunked HTTP responses
Resource exhaustion due to oversized chunked HTTP responses. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-770.
Medium [CVE-2026-67301] Memory disclosure or denial of service via crafted RDP update orders
Memory disclosure or denial of service via crafted RDP update orders. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-125.
Medium [CVE-2026-67290] Denial of Service via malformed media data
Denial of Service via malformed media data. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-125.
Medium [CVE-2026-18321] Denial of Service via buffer overflow in Zyfer refclock
Denial of Service via buffer overflow in Zyfer refclock. Red Hat rates this low (CVSS 4.7). Weakness: CWE-120.
Medium [CVE-2026-17350] pgAdmin 4: Permission bypass allows authenticated users to access restricted tools
pgAdmin 4: Permission bypass allows authenticated users to access restricted tools. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-425.
Medium [CVE-2026-17348] pgAdmin 4: Unauthenticated access allows data manipulation and information disclosure
pgAdmin 4: Unauthenticated access allows data manipulation and information disclosure. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-306.
Medium [CVE-2026-18214] Google external access-token exchange bypasses hosted-domain restriction
Google external access-token exchange bypasses hosted-domain restriction. Red Hat rates this moderate (CVSS 6.8). Weakness: CWE-862.
Medium [CVE-2026-18203] Group policy extendChildren matches sibling group path prefixes
Group policy extendChildren matches sibling group path prefixes. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-863.
Medium [CVE-2026-18211] secure-client-uris policy bypass via localhost-prefixed domains
secure-client-uris policy bypass via localhost-prefixed domains. Red Hat rates this moderate (CVSS 4.2). Weakness: CWE-20.
Medium [CVE-2026-18208] Inactive out-of-audience token introspection leaks signed JWT claim
Inactive out-of-audience token introspection leaks signed JWT claim. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-862.
Medium [CVE-2026-16105] Missing per-role authorization on RoleContainerResource composite endpoints
A flaw was found in the RoleContainerResource component of Keycloak. The issue occurs because certain name-based endpoints in the admin REST API do not properly enforce authorization checks when managing composite roles. This allows a delegated administrator with manage-realm permissions to remove essential child roles from built-in admin roles, potentially disrupting administrative functions within a realm. The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate, given that exploitation requires the attacker to already possess high-level delegated administrative privileges (manage-realm). Successful exploitation allows an attacker to remove child roles from built-in admin roles, leading to a loss of integrity for administrative configurations. The vulnerability's root cause is an incomplete fix for a previous issue, where authorization checks were not consistently applied to name-based REST API endpoints. Affected Red Hat products: Red Hat Build of Keycloak. Red Hat lists Red Hat Data Grid 8; Red Hat JBoss Enterprise Application Platform Expansion Pack; Red Hat Single Sign-On 7 as not affected. Red Hat does not currently list a fixing RHSA for this CVE.
Medium [CVE-2026-18215] Microsoft external access-token exchange bypasses configured tenant
Microsoft external access-token exchange bypasses configured tenant. Red Hat rates this moderate (CVSS 6.8). Weakness: CWE-287.
Medium [CVE-2026-18218] Client not-before revocation ignored when realm not-before is older but nonzero
Client not-before revocation ignored when realm not-before is older but nonzero. Red Hat rates this moderate (CVSS 4.2). Weakness: CWE-862.