Red Hat Linux Security Advisories & CVEs
5706 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-77159] Unsafe chown in qemuTPMEmulatorPrepareHost allows arbitrary file ownership change via symlink
Unsafe chown in qemuTPMEmulatorPrepareHost() allows arbitrary file ownership change via symlink. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-61. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: libvirt.
Medium [CVE-2026-81005] Fix NULL pointer dereference after failed registration
Fix NULL pointer dereference after failed registration. Red Hat rates this moderate (CVSS 4.1). Weakness: CWE-476.
Medium [CVE-2026-49838] Denial of Service via malformed BGP UPDATE message
Denial of Service via malformed BGP UPDATE message. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-125. Affected product named by the advisory: Red Hat OpenShift Container Platform 4.
Medium [CVE-2026-45767] File overwrite via malicious rule load
File overwrite via malicious rule load. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-73.
Medium [CVE-2026-89298] Confidential client secret disclosed to view-clients role via Client Registration GET
Confidential client secret disclosed to view-clients role via Client Registration GET. Red Hat rates this moderate (CVSS 4.9). Weakness: CWE-200. Affected products named by the advisory: Red Hat Build of Keycloak; Red Hat Single Sign-On 7.
Medium [CVE-2026-88059] Information Leak via HttpTransferCache Bypass
Information Leak via HttpTransferCache Bypass. Red Hat rates this moderate (CVSS 4). Weakness: CWE-524. Affected products named by the advisory: A-MQ Interconnect 1; Red Hat Ceph Storage 4; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; and 11 more. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Fuse 7; Red Hat OpenStack Platform 16.2; and 7 more.
Medium [CVE-2026-88057] @angular/core: @angular/compiler: Angular: Arbitrary code execution via sanitization bypass in host bindings
@angular/core: @angular/compiler: Angular: Arbitrary code execution via sanitization bypass in host bindings. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-79. Affected products named by the advisory: Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat build of Apicurio Registry 3; Red Hat Ceph Storage 4; Red Hat Enterprise Linux 10; and 12 more. Affected products named by the advisory: Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Fuse 7; and 8 more.
Medium [CVE-2026-88032] Denial of Service via use-after-free in client-side encryption cancellation
Denial of Service via use-after-free in client-side encryption cancellation. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-825. Affected products named by the advisory: Exploit Intelligence; Red Hat build of Apache Camel 4 for Quarkus 3; Red Hat build of Quarkus.
Medium [CVE-2026-88054] Denial of Service via crafted model with empty stack dereference
Denial of Service via crafted model with empty stack dereference. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-125. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: tesseract.
Medium [CVE-2026-89045] Denial of Service via negative length parameter
Denial of Service via negative length parameter. Red Hat rates this moderate (CVSS 4). Weakness: CWE-835. Affected products named by the advisory: Exploit Intelligence; OpenShift Developer Tools and Services; Red Hat build of Apache Camel 4 for Quarkus 3; Red Hat build of Apache Camel for Spring Boot 4; and 11 more. Affected products named by the advisory: Red Hat build of Apicurio Registry 3; Red Hat build of Debezium 3; Red Hat build of Quarkus; Red Hat Ceph Storage 9; and 7 more.
Medium [CVE-2026-88050] Out-of-bounds write leads to Denial of Service
Out-of-bounds write leads to Denial of Service. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-787. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat package: tesseract.
Medium [CVE-2026-88046] Unauthorized data modification via path traversal in source object names
Unauthorized data modification via path traversal in source object names. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-22. Affected products named by the advisory: Cryostat 4; Red Hat Advanced Cluster Management for Kubernetes 2.
Medium [CVE-2026-88015] Denial of Service via crafted Range request against translated symlink
Denial of Service via crafted Range request against translated symlink. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-125. Affected products named by the advisory: OpenShift Service Mesh 3; Red Hat OpenShift Container Platform 4; Red Hat OpenShift Virtualization 4.
Medium [CVE-2026-88014] Arbitrary file write via Zip Slip vulnerability
Arbitrary file write via Zip Slip vulnerability. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-22. Affected products named by the advisory: Cryostat 4; Red Hat Advanced Cluster Management for Kubernetes 2.
Medium [CVE-2026-88004] Security bypass and identity spoofing via unsanitized request trailers
Security bypass and identity spoofing via unsanitized request trailers. Red Hat rates this moderate (CVSS 6.8). Weakness: CWE-444. Affected product named by the advisory: Red Hat OpenShift Dev Spaces.
Medium [CVE-2026-88914] integer overflow and out-of-bounds read in qtdemux CEA-608 closed-caption parser
integer overflow and out-of-bounds read in qtdemux CEA-608 closed-caption parser. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-190. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; and 3 more. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat package: gstreamer1-plugins-good; Red Hat package: gstreamer-plugins-good.
Medium [CVE-2026-88884] Security control bypass via digest updates
Security control bypass via digest updates. Red Hat rates this moderate (CVSS 5.8). Weakness: CWE-807.
Medium [CVE-2026-88883] Information disclosure of TLS private keys via incomplete log sanitization
Information disclosure of TLS private keys via incomplete log sanitization. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-117.
Medium [CVE-2026-84828] non-root haclient users can read arbitrary files via pcs host auth --token
non-root haclient users can read arbitrary files via pcs host auth --token. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-732. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat OpenShift Container Platform 4; and 3 more. Affected products named by the advisory: Red Hat OpenStack Platform 16.2; Red Hat OpenStack Platform 17.1; Red Hat package: pcs.
Medium [CVE-2026-88859] javascript execution via spoofed vCard control bypasses mail script-markup restriction
javascript execution via spoofed vCard control bypasses mail script-markup restriction. Red Hat rates this moderate (CVSS 6.3). Weakness: CWE-84. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: evolution.