Red Hat Linux Security Advisories & CVEs
3200 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-58039] Information disclosure due to improper permission enforcement
Information disclosure due to improper permission enforcement. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-73. Red Hat lists fixing advisory RHSA-2026:48273 with package nodejs26-main-26.5.1-1.5.hum1, nodejs22-main-22.23.2-2.3.hum1, nodejs24-main-24.18.1-0.1.hum1.
Medium [CVE-2026-63362] Denial of Service via unsigned integer underflow
Denial of Service via unsigned integer underflow. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-191.
Medium [CVE-2026-68563] Information disclosure of PostgreSQL data via insecure backup permissions
Information disclosure of PostgreSQL data via insecure backup permissions. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-732.
Medium [CVE-2026-68562] Information disclosure via Leapp report tampering
Information disclosure via Leapp report tampering. Red Hat rates this moderate (CVSS 6.2). Weakness: CWE-610.
Medium [CVE-2026-67550] Denial of Service via out-of-bounds read
Denial of Service via out-of-bounds read. Red Hat rates this moderate (CVSS 5.7). Weakness: CWE-125.
Medium [CVE-2026-59881] Denial of Service via unnegotiated WebSocket compression
Denial of Service via unnegotiated WebSocket compression. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-409. Affected products named by the advisory: Exploit Intelligence; Lightspeed Core; Migration Toolkit for Applications 8; OpenShift Lightspeed; and 12 more. Affected products named by the advisory: Red Hat AI Inference Server; Red Hat Ansible Automation Platform 2; Red Hat Ansible Automation Platform Ansible Core 2; Red Hat Discovery 2; and 8 more.
Medium [CVE-2026-12996] Denial of Service or memory leak via crafted packets
Denial of Service or memory leak via crafted packets. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-825.
Medium [CVE-2026-11771] Denial of Service via crafted NTLM proxy response
Denial of Service via crafted NTLM proxy response. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-787.
Medium [CVE-2026-13117] Denial of service or memory leakage via incomplete TLS guard
Denial of service or memory leakage via incomplete TLS guard. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-825.
Medium [CVE-2026-60074] Date::Manip: Incorrect date parsing leads to logic errors
Date::Manip: Incorrect date parsing leads to logic errors. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-681.
Medium [CVE-2026-7260] Denial of Service via circular symbolic links in phar archives
Denial of Service via circular symbolic links in phar archives. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-606. Red Hat lists fixing advisory RHSA-2026:47200 with package php-main-8.5.9-1.hum1.
Medium [CVE-2026-18369] ACME HTTP-01 validation SSRF via IP literal identifiers and unvalidated redirects
ACME HTTP-01 validation SSRF via IP literal identifiers and unvalidated redirects. Red Hat rates this moderate (CVSS 5.8). Weakness: CWE-918.
Medium [CVE-2026-56850] mTLS client identities can be reused due to HTTPS Agent connection flaw
mTLS client identities can be reused due to HTTPS Agent connection flaw. Red Hat rates this moderate (CVSS 4.1). Weakness: CWE-303. Red Hat lists fixing advisory RHSA-2026:48273 with package nodejs26-main-26.5.1-1.5.hum1, nodejs22-main-22.23.2-2.3.hum1, nodejs24-main-24.18.1-0.1.hum1.
Medium [CVE-2026-58040] HTTPS Agent TLS session reuse skips hostname verification
HTTPS Agent TLS session reuse skips hostname verification. Red Hat rates this moderate (CVSS 6.3). Weakness: CWE-322. Red Hat lists fixing advisory RHSA-2026:48273 with package nodejs26-main-26.5.1-1.5.hum1, nodejs22-main-22.23.2-2.3.hum1, nodejs24-main-24.18.1-0.1.hum1.
Medium [CVE-2026-16531] Arbitrary file creation via path traversal in pmproxy logger servlet
Arbitrary file creation via path traversal in pmproxy logger servlet. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-22. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4.
Medium [CVE-2026-16530] Remote denial of service and information leakage
Remote denial of service and information leakage. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4.
Medium [CVE-2026-18019] Side-channel information leakage in Media
Side-channel information leakage in Media. Red Hat rates this low (CVSS 4.3). Weakness: CWE-205.
Medium [CVE-2026-18015] Inappropriate implementation in Tint
Inappropriate implementation in Tint. Red Hat rates this low (CVSS 4.3). Weakness: CWE-653.
Medium [CVE-2026-18017] Use after free in Dawn
Use after free in Dawn. Red Hat rates this low (CVSS 4.3).
Medium [CVE-2026-18012] Use after free in PDFium
Use after free in PDFium. Red Hat rates this low (CVSS 4.3). Weakness: CWE-825.