Red Hat Linux Security Advisories & Vulnerabilities
16040 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited sources checked less often
Get an email when Red Hat publishes the next one.
See Red Hat's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
iPhone and Android apps · New on the App Store
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata, so keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
High [CVE-2026-33898] Privilege escalation and unauthorized access due to improper authentication token validation in web UI
Privilege escalation and unauthorized access due to improper authentication token validation in web UI. Red Hat rates this important (CVSS 8.2). Weakness: CWE-303. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-33711] Local privilege escalation or denial of service via predictable temporary file paths
Local privilege escalation or denial of service via predictable temporary file paths. Red Hat rates this important (CVSS 8.8). Weakness: CWE-59. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-33542] Image cache poisoning due to insufficient image fingerprint validation
Image cache poisoning due to insufficient image fingerprint validation. Red Hat rates this important (CVSS 8.5). Weakness: CWE-354. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-1556] File (Field) Paths: Drupal File (Field) Paths: Information Disclosure via filename-collision uploads
File (Field) Paths: Drupal File (Field) Paths: Information Disclosure via filename-collision uploads. Red Hat rates this important (CVSS 7.7). Weakness: CWE-73. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-32285] Denial of Service via malformed JSON input
Denial of Service via malformed JSON input. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1285. Affected package(s): multicluster-engine/assisted-service, syft-main, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779212259, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1780167118, trivy-main, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1778867753. Resolved in Red Hat advisory RHSA-2026:21769 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Logging Subsystem for Red Hat OpenShift 6.4; Red Hat Advanced Cluster Management for Kubernetes 2.14; Red Hat Advanced Cluster Management for Kubernetes 2.15; Red Hat Hardened Images; and 14 more.
High [CVE-2026-32286] Denial of Service via malicious PostgreSQL server
Denial of Service via malicious PostgreSQL server. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1285. Affected package(s): quay/quay-rhel8:1779689392, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1780167118, multicluster-globalhub/multicluster-globalhub-rhel9-operator:1779209992, multicluster-globalhub/multicluster-globalhub-manager-rhel9:1779210608, advanced-cluster-security/rhacs-scanner-v4-rhel8:1777307791, quay/quay-rhel8:1776752646. Resolved in Red Hat advisory RHSA-2026:11916 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat Advanced Cluster Security for Kubernetes 4.8; Red Hat Quay 3.10; and 20 more.
High [CVE-2026-4926] Denial of Service via crafted regular expressions
Denial of Service via crafted regular expressions. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1333. Affected package(s): ansible-automation-platform, migration-toolkit-virtualization/mtv-console-plugin-rhel9:1779139872, cryostat/cryostat-openshift-console-plugin-rhel9:4.2.0, rhtas/rhtas-console-ui-rhel9:1776673130, rhdh/rhdh-hub-rhel9:1776784286, rhosdt/tempo-jaeger-query-rhel9:1776435608. Resolved in Red Hat advisory RHSA-2026:13826 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Cryostat 4 on RHEL 9; Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Ansible Automation Platform 2.6 for RHEL 9; and 25 more.
High [CVE-2026-33487] Integrity bypass due to incorrect XML Digital Signature validation via loop variable capture issue
Integrity bypass due to incorrect XML Digital Signature validation via loop variable capture issue. Red Hat rates this important (CVSS 7.5). Weakness: CWE-347. Affected package(s): multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779212259, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1780167118, rhacm2/acm-grafana-rhel9:1777142269, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1778867753, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779579439, openshift-gitops. Resolved in Red Hat advisory RHSA-2026:21769 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Advanced Cluster Management for Kubernetes 2.15; Red Hat OpenShift GitOps 1.18; Red Hat OpenShift GitOps 1.19; Red Hat multicluster global hub 1.4.3; and 8 more.
High [CVE-2026-33636] Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion
Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion. Red Hat rates this moderate (CVSS 7.6). Weakness: CWE-124. Affected package(s): libpng, firefox, java, thunderbird, discovery/discovery-ui-rhel9:1782756541, rhaiis/model-opt-cuda-rhel9:1780681984. Resolved in Red Hat advisory RHSA-2026:11805 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 7.
High [CVE-2026-33416] Arbitrary code execution due to use-after-free vulnerability
Arbitrary code execution due to use-after-free vulnerability. Red Hat rates this moderate (CVSS 7.5). Weakness: CWE-825. Affected package(s): libpng, firefox, discovery/discovery-ui-rhel9:1782756541, libpng15, thunderbird, libpng12. Resolved in Red Hat advisory RHSA-2026:18064 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 7.
High [CVE-2026-33413] Authorization bypass allows information disclosure and denial of service
Authorization bypass allows information disclosure and denial of service. Red Hat rates this moderate (CVSS 7.7). Weakness: CWE-306. Affected package(s): multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1780167118, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1778867753, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779579439, etcd. Resolved in Red Hat advisory RHSA-2026:21769 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9.
High [CVE-2026-1961] Remote Code Execution via command injection in WebSocket proxy
Remote Code Execution via command injection in WebSocket proxy. Red Hat rates this important (CVSS 8). Weakness: CWE-78. Affected package(s): foreman, rubygem-katello, rubygem-fog-kubevirt, python-pulp-container, python-pulp-rpm, python-django. Resolved in Red Hat advisory RHSA-2026:5968 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Satellite 6.16 for RHEL 8; Red Hat Satellite 6.16 for RHEL 9; Red Hat Satellite 6.17 for RHEL 9; Red Hat Satellite 6.18 for RHEL 9.
High [CVE-2026-33526] Denial of Service via heap Use-After-Free vulnerability in ICP handling
Denial of Service via heap Use-After-Free vulnerability in ICP handling. Red Hat rates this important (CVSS 7.5). Weakness: CWE-825. Affected package(s): squid, squid:4. Resolved in Red Hat advisory RHSA-2026:8880 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 9 more.
High [CVE-2026-32748] Denial of Service via crafted ICP traffic
Denial of Service via crafted ICP traffic. Red Hat rates this important (CVSS 7.5). Weakness: CWE-826. Affected package(s): squid, squid:4. Resolved in Red Hat advisory RHSA-2026:8880 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 9 more.
Medium [CVE-2026-34352] TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions
TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions. Red Hat rates this moderate (CVSS 6.3). Weakness: CWE-279. Affected package(s): tigervnc. Resolved in Red Hat advisory RHSA-2026:24341 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7.
Medium [CVE-2026-33671] Regular Expression Denial of Service via crafted extglob patterns
Regular Expression Denial of Service via crafted extglob patterns. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-1333. Affected package(s): cluster-observability-operator/logging-console-plugin-pf4-rhel9:1782839279, cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9:1782839996, cluster-observability-operator/logging-console-plugin-pf5-rhel9:1782840539. Resolved in Red Hat advisory RHSA-2026:34342 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-2272] Gimp: gimp: memory corruption due to integer overflow in ico file handling
A flaw was found in GIMP. An integer overflow vulnerability exists when processing ICO image files, specifically in the `ico_read_info` and `ico_read_icon` functions. This issue arises because a size calculation for image buffers can wrap around due to a 32-bit integer evaluation, allowing oversized image headers to bypass security checks. A remote attacker could exploit this by providing a specially crafted ICO file, leading to a buffer overflow and memory corruption, which may result in an application level denial of service. This MODERATE impact flaw in GIMP allows a remote attacker to cause an application denial of service. The vulnerability occurs due to an integer overflow when processing specially crafted ICO image files, leading to memory corruption. User interaction is required for exploitation, as a malicious ICO file must be opened by the GIMP application. Red Hat severity: Moderate — CVSS 4.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L). Weakness: CWE-190. Affected Red Hat products: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9. Will not fix / out of support: Red Hat Enterprise Linux 6. Red Hat does not currently list a fixing RHSA for this CVE. Affected products named by the advisory: Red Hat package: gimp.
Medium [CVE-2026-32287] Denial of Service due to infinite loop via boolean XPath expressions
Denial of Service due to infinite loop via boolean XPath expressions. Red Hat rates this moderate (CVSS 6.2). Weakness: CWE-606. Affected package(s): rhosdt/opentelemetry-collector-rhel9:1776185379. Resolved in Red Hat advisory RHSA-2026:9388 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-2436] Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake
A flaw was found in libsoup's SoupServer. A remote attacker could exploit a use-after-free vulnerability where the `soup_server_disconnect()` function frees connection objects prematurely, even if a TLS handshake is still pending. If the handshake completes after the connection object has been freed, a dangling pointer is accessed, leading to a server crash and a Denial of Service. Red Hat severity: Moderate — CVSS 6.5 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H). Weakness: CWE-825. Affected Red Hat products: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9. Red Hat does not currently list a fixing RHSA for this CVE. Affected products named by the advisory: Red Hat package: libsoup3.
Medium [CVE-2026-4923] Denial of Service via specially crafted paths with multiple wildcards
Denial of Service via specially crafted paths with multiple wildcards. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-1333. Affected package(s): rhdh/rhdh-hub-rhel9:1780930740. Resolved in Red Hat advisory RHSA-2026:24841 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
Free weekly CVE digest
Every Monday: the week's critical and high advisories for Red Hat or every vendor, new CISA KEV entries and upcoming end-of-life dates.