Red Hat Linux Security Advisories & CVEs
5466 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Linux release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Linux advisories
High [CVE-2026-13713] YAML::Syck: Denial of Service via crafted YAML document
YAML::Syck: Denial of Service via crafted YAML document. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1341.
High [CVE-2026-5674] Sandbox escape and arbitrary code execution via malicious library loading
Sandbox escape and arbitrary code execution via malicious library loading. Red Hat rates this important (CVSS 8.8). Weakness: CWE-427.
High [CVE-2026-15925] Snowflake Connector for Python: Arbitrary SQL execution and information disclosure via improper TLS hostname verification
Snowflake Connector for Python: Arbitrary SQL execution and information disclosure via improper TLS hostname verification. Red Hat rates this important (CVSS 7.4). Weakness: CWE-295.
High [CVE-2026-53366] account for fraggap on the paged allocation path
account for fraggap on the paged allocation path. Red Hat rates this important (CVSS 7.8). Weakness: CWE-131. Red Hat lists fixing advisory RHSA-2026:34911 with package kernel-0:6.12.0-211.30.1.el10_2, kernel-0:6.12.0-55.86.1.el10_0. Affected product named by the advisory: Red Hat Enterprise Linux 1.
Medium [CVE-2026-57077] YAML::Syck: YAML::Syck: Information disclosure via out-of-bounds read
YAML::Syck: YAML::Syck: Information disclosure via out-of-bounds read. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-125.
Medium [CVE-2026-57076] YAML::Syck: Heap use-after-free via anchor name reuse
YAML::Syck: Heap use-after-free via anchor name reuse. Red Hat rates this moderate (CVSS 6.3). Weakness: CWE-825.
Medium [CVE-2026-57075] YAML::Syck: YAML::Syck: Information disclosure via out-of-bounds read in base64 decoder
YAML::Syck: YAML::Syck: Information disclosure via out-of-bounds read in base64 decoder. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-125.
Medium [CVE-2026-46338] Information disclosure via crafted Markdown snippets
Information disclosure via crafted Markdown snippets. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-22.
Medium [CVE-2026-15945] Group hierarchy search discloses hidden parent groups under FGAP v2
Group hierarchy search discloses hidden parent groups under FGAP v2. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-639.
Medium [CVE-2026-45695] Arbitrary code execution via unauthenticated SFTP configuration in HTTP server.
Arbitrary code execution via unauthenticated SFTP configuration in HTTP server. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-78.
Medium [CVE-2026-47085] Information disclosure via URLAUTH token forgery
Information disclosure via URLAUTH token forgery. Red Hat rates this moderate (CVSS 4). Weakness: CWE-341.
Medium [CVE-2026-47084] Unauthorized mailbox deletion via ACL bypass
Unauthorized mailbox deletion via ACL bypass. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-266.
Medium [CVE-2026-47082] ACL bypass in vacation 'fcc' feature allows unauthorized mailbox writes
ACL bypass in vacation 'fcc' feature allows unauthorized mailbox writes. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-279.
Medium [CVE-2026-47083] Information disclosure via ESEARCH command
Information disclosure via ESEARCH command. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-201.
Medium [CVE-2026-47089] Information disclosure via LISTRIGHTS
Information disclosure via LISTRIGHTS. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-266.
Medium [CVE-2026-47086] Information disclosure via URLAUTH token bypass of Access Control Lists
Information disclosure via URLAUTH token bypass of Access Control Lists. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-639.
Low [CVE-2026-47081] Information disclosure of mailbox existence via XAPPLEPUSHSERVICE command
Information disclosure of mailbox existence via XAPPLEPUSHSERVICE command. Red Hat rates this low (CVSS 3.1). Weakness: CWE-497.
Low [CVE-2026-47088] Information disclosure via heap exposure in MIME comment parsing
Information disclosure via heap exposure in MIME comment parsing. Red Hat rates this low (CVSS 3.1). Weakness: CWE-125.
Low [CVE-2026-47087] Unauthorized access due to URLAUTH not honoring revoked authorizer access
Unauthorized access due to URLAUTH not honoring revoked authorizer access. Red Hat rates this low (CVSS 3.5). Weakness: CWE-613.
High [CVE-2026-12382] missing requestHeadersToRemove allows mTLS bypass via Subject header spoofing
missing requestHeadersToRemove allows mTLS bypass via Subject header spoofing. Red Hat rates this important (CVSS 8.2). Weakness: CWE-290. Red Hat lists fixing advisory RHSA-2026:42078 with package automation-gateway-0:2.6.20260422-1.el9ap, automation-gateway-0:2.5.20260715-1.el8ap, automation-gateway-0:2.5.20260715-1.el9ap, ansible-automation-platform-26/gateway-rhel9:1777311120. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 8.