Red Hat Linux Security Advisories & CVEs
3200 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-16089] Authorization codes can be retargeted to another client session
Authorization codes can be retargeted to another client session. Red Hat rates this moderate (CVSS 5.4).
Medium [CVE-2026-16072] Organization invitation link exposure allows unauthorized member creation
Organization invitation link exposure allows unauthorized member creation. Red Hat rates this moderate (CVSS 4.9).
Medium [CVE-2026-15943] OIDC IdP update reuses masked client secret after token URL change
OIDC IdP update reuses masked client secret after token URL change. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-1288.
Medium [CVE-2026-52584] Information disclosure via Buffer Overflow in DecodeImageAPNG function
Information disclosure via Buffer Overflow in DecodeImageAPNG function. Red Hat rates this moderate (CVSS 5). Weakness: CWE-120.
Medium [CVE-2026-57077] YAML::Syck: YAML::Syck: Information disclosure via out-of-bounds read
YAML::Syck: YAML::Syck: Information disclosure via out-of-bounds read. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-125.
Medium [CVE-2026-57076] YAML::Syck: Heap use-after-free via anchor name reuse
YAML::Syck: Heap use-after-free via anchor name reuse. Red Hat rates this moderate (CVSS 6.3). Weakness: CWE-825.
Medium [CVE-2026-57075] YAML::Syck: YAML::Syck: Information disclosure via out-of-bounds read in base64 decoder
YAML::Syck: YAML::Syck: Information disclosure via out-of-bounds read in base64 decoder. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-125.
Medium [CVE-2026-46338] Information disclosure via crafted Markdown snippets
Information disclosure via crafted Markdown snippets. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-22.
Medium [CVE-2026-15945] Group hierarchy search discloses hidden parent groups under FGAP v2
Group hierarchy search discloses hidden parent groups under FGAP v2. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-639.
Medium [CVE-2026-45695] Arbitrary code execution via unauthenticated SFTP configuration in HTTP server.
Arbitrary code execution via unauthenticated SFTP configuration in HTTP server. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-78.
Medium [CVE-2026-47085] Information disclosure via URLAUTH token forgery
Information disclosure via URLAUTH token forgery. Red Hat rates this moderate (CVSS 4). Weakness: CWE-341.
Medium [CVE-2026-47084] Unauthorized mailbox deletion via ACL bypass
Unauthorized mailbox deletion via ACL bypass. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-266.
Medium [CVE-2026-47082] ACL bypass in vacation 'fcc' feature allows unauthorized mailbox writes
ACL bypass in vacation 'fcc' feature allows unauthorized mailbox writes. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-279.
Medium [CVE-2026-47083] Information disclosure via ESEARCH command
Information disclosure via ESEARCH command. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-201.
Medium [CVE-2026-47089] Information disclosure via LISTRIGHTS
Information disclosure via LISTRIGHTS. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-266.
Medium [CVE-2026-47086] Information disclosure via URLAUTH token bypass of Access Control Lists
Information disclosure via URLAUTH token bypass of Access Control Lists. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-639.
Medium [CVE-2026-56434] Heap buffer over-read allows memory modification or denial of service
Heap buffer over-read allows memory modification or denial of service. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-125. Red Hat lists fixing advisory RHSA-2026:46012 with package nginx-main-1.30.4-2.hum1.
Medium [CVE-2026-15779] pam_winbind mkhomedir chowns critical system paths without validation
pam_winbind mkhomedir chowns critical system paths without validation. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-732.
Medium [CVE-2026-15812] access control list bypass via link ID spoofing on unencrypted dynamic links
access control list bypass via link ID spoofing on unencrypted dynamic links. Red Hat rates this low (CVSS 4.8). Weakness: CWE-290.
Medium [CVE-2026-15811] encryption key exposure in memory after cryptographic configuration changes
encryption key exposure in memory after cryptographic configuration changes. Red Hat rates this low (CVSS 5.8). Weakness: CWE-212.