Red Hat Linux Security Advisories & CVEs
11267 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
High [CVE-2026-92961] Denial of Service via memory exhaustion
Denial of Service via memory exhaustion. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:76788 with package rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend:1791242697, rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend:1791251282, ansible-automation-platform/automation-portal:1790254963, ansible-automation-platform/automation-portal:1790256405. Affected products named by the advisory: Self-service automation portal 2.
High [CVE-2026-92959] Asynchronous code execution bypass via Promise thenable assimilation
Asynchronous code execution bypass via Promise thenable assimilation. Red Hat rates this important (CVSS 7.1). Weakness: CWE-358. Red Hat lists fixing advisory RHSA-2026:76788 with package rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend:1791242697, rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend:1791251282, ansible-automation-platform/automation-portal:1790254963, ansible-automation-platform/automation-portal:1790256405. Affected products named by the advisory: Self-service automation portal 2.
High [CVE-2026-92960] vm2 before 3.11.6 Process-wide State Exposure via os and dns
vm2 before 3.11.6 Process-wide State Exposure via os and dns. Red Hat rates this important (CVSS 8.3). Weakness: CWE-200. Red Hat lists fixing advisory RHSA-2026:76788 with package rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend:1791242697, rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend:1791251282. Affected products named by the advisory: Red Hat Developer Hub 1.10; Self-service automation portal 2.
High [CVE-2026-92958] Sandbox escape via denylist bypass in NodeVM
Sandbox escape via denylist bypass in NodeVM. Red Hat rates this important (CVSS 8.5). Weakness: CWE-1220. Red Hat lists fixing advisory RHSA-2026:76788 with package rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend:1791242697, rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend:1791251282, ansible-automation-platform/automation-portal:1790254963, ansible-automation-platform/automation-portal:1790256405. Affected products named by the advisory: Self-service automation portal 2.
High [CVE-2026-92954] vm2 3.10.0 through 3.11.5 Denial of Service via Host Promise
vm2 3.10.0 through 3.11.5 Denial of Service via Host Promise. Red Hat rates this important (CVSS 8.6). Weakness: CWE-248. Red Hat lists fixing advisory RHSA-2026:76788 with package rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend:1791242697, rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend:1791251282. Affected products named by the advisory: Red Hat Developer Hub 1.10; Self-service automation portal 2.
High [CVE-2026-92950] vm2 before 3.11.7 Sandbox Escape via CLI require
vm2 before 3.11.7 Sandbox Escape via CLI require. Red Hat rates this important (CVSS 8.6). Weakness: CWE-453. Red Hat lists fixing advisory RHSA-2026:76788 with package rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend:1791242697, rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend:1791251282. Affected products named by the advisory: Red Hat Developer Hub 1.10; Self-service automation portal 2.
High [CVE-2026-92947] vm2 before 3.11.7 Memory Disclosure via Buffer Pool
vm2 before 3.11.7 Memory Disclosure via Buffer Pool. Red Hat rates this important (CVSS 8.3). Weakness: CWE-200. Red Hat lists fixing advisory RHSA-2026:76788 with package rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend:1791242697, rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend:1791251282. Affected products named by the advisory: Red Hat Developer Hub 1.10; Self-service automation portal 2.
High [CVE-2026-92946] vm2 before 3.11.7 Remote Code Execution via require.external
vm2 before 3.11.7 Remote Code Execution via require.external. Red Hat rates this important (CVSS 8.3). Weakness: CWE-913. Red Hat lists fixing advisory RHSA-2026:76788 with package rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend:1791242697, rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend:1791251282. Affected products named by the advisory: Red Hat Developer Hub 1.10; Self-service automation portal 2.
High [CVE-2026-92942] Denial of Service via timeout bypass in sandboxed code
Denial of Service via timeout bypass in sandboxed code. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1100. Red Hat lists fixing advisory RHSA-2026:76788 with package rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend:1791242697, rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend:1791251282, ansible-automation-platform/automation-portal:1790254963, ansible-automation-platform/automation-portal:1790256405. Affected products named by the advisory: Self-service automation portal 2.
High [CVE-2026-92940] vm2 3.11.3 through 3.11.6 HTTPS Credential Exposure via globalAgent
vm2 3.11.3 through 3.11.6 HTTPS Credential Exposure via globalAgent. Red Hat rates this important (CVSS 8.3). Weakness: CWE-668. Red Hat lists fixing advisory RHSA-2026:76788 with package rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend:1791242697, rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend:1791251282. Affected products named by the advisory: Red Hat Developer Hub 1.10; Self-service automation portal 2.
High [CVE-2026-92937] vm2 3.11.6 Remote Code Execution via Promise call/apply
vm2 3.11.6 Remote Code Execution via Promise call/apply. Red Hat rates this important (CVSS 8.3). Weakness: CWE-94. Red Hat lists fixing advisory RHSA-2026:76788 with package rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend:1791242697, rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend:1791251282. Affected products named by the advisory: Red Hat Developer Hub 1.10; Self-service automation portal 2.
High [CVE-2026-77874] SQL Injection via unescaped JSON path segment allows data exfiltration and authorization bypass
SQL Injection via unescaped JSON path segment allows data exfiltration and authorization bypass. Red Hat rates this important (CVSS 8.6). Weakness: CWE-89. Affected products named by the advisory: Cryostat 4; Red Hat build of Debezium 3; Red Hat Build of Keycloak; Red Hat JBoss Enterprise Application Platform 7; and 4 more. Affected products named by the advisory: Red Hat OpenShift AI (RHOAI); Red Hat OpenStack Platform 13 (Queens); Red Hat Satellite 6; Red Hat Single Sign-On 7.
High [CVE-2026-89418] Denial of Service via uncontrolled recursion in protobuf group field parsing
Denial of Service via uncontrolled recursion in protobuf group field parsing. Red Hat rates this important (CVSS 7.5). Weakness: CWE-606. Affected product named by the advisory: Red Hat OpenShift AI (RHOAI).
High [CVE-2026-87743] Authorization Bypass via Path Normalization Discrepancy in Quarkus HTTP Security
Authorization Bypass via Path Normalization Discrepancy in Quarkus HTTP Security. Red Hat rates this important (CVSS 7.5). Weakness: CWE-551. Affected products named by the advisory: Red Hat build of Apache Camel 4 for Quarkus 3; Red Hat build of Apicurio Registry 3; Red Hat build of Debezium 3; Red Hat Build of Keycloak; and 2 more. Affected products named by the advisory: Red Hat Fuse 7; Red Hat OpenShift Dev Spaces.
High [CVE-2026-92925] Out-of-bounds read via crafted cluster bus packets
Out-of-bounds read via crafted cluster bus packets. Red Hat rates this important (CVSS 7.1). Weakness: CWE-125. Red Hat lists fixing advisory RHSA-2026:65120 with package redis:7-9060020260917140656.9, redis:7-9080020260821173335.9, redis:7-9040020260917140622.9. Affected products named by the advisory: Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions; Red Hat Enterprise Linux 9.6 Extended Update Support; Pen Drive Powered by Red Hat Lightspeed; Red Hat 3scale API Management Platform 2; and 1 more. Affected products named by the advisory: Red Hat Hardened Images.
High [CVE-2026-86320] Flatpak-builder: host code execution via `git am` hook execution in patch source extraction (`use-git-am`)
A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary code execution with the privileges of the user running flatpak-builder. Red Hat Product Security has rated this flaw as having an Important security impact. Exploitation requires the target build process to process an attacker-controlled or otherwise untrusted source using this option. In typical interactive builds, user interaction is required to initiate the build, while automated build services that process untrusted manifests may be exposed without additional user interaction. Successful exploitation provides code execution with the privileges of the flatpak-builder process and may allow access to or modification of data available to that process. Red Hat severity: Important — CVSS 7.8 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Weakness: CWE-94. Affected Red Hat products: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9. Red Hat does not currently list a fixing RHSA for this CVE. Affected products named by the advisory: Red Hat package: flatpak-builder.
High [CVE-2026-90227] check SUBMIT_IO with nvme_cmd_allowed
check SUBMIT_IO with nvme_cmd_allowed(). Red Hat rates this important (CVSS 7). Weakness: CWE-266. Red Hat lists fixing advisory RHSA-2026:75746 with package kernel-0:4.18.0-553.171.1.el8_10, kernel-rt-0:4.18.0-553.171.1.rt7.512.el8_10. Affected product named by the advisory: Red Hat Enterprise Linux 8.
High [CVE-2026-90236] Release the export reference when reaping open stateids
Release the export reference when reaping open stateids. Red Hat rates this moderate (CVSS 7). Weakness: CWE-772. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat package: kernel.
High [CVE-2026-90315] Add lockdown checks to legacy I/O and memory handlers
Add lockdown checks to legacy I/O and memory handlers. Red Hat rates this important (CVSS 7). Weakness: CWE-414. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.
High [CVE-2026-90111] do not clone dst in ip6mr_cache_report
do not clone dst in ip6mr_cache_report(). Red Hat rates this important (CVSS 7). Weakness: CWE-825. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; Red Hat package: kernel-rt.