Known Vulnerabilities for products from Redhat
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Redhat".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Additional devices specifications by Redhat can be found at device.report : Redhat
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-104048 json | A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control (HBAC) ... | Not Provided | 2026-10-06 | 2026-10-09 |
| CVE-2026-104047 json | A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being in... | Not Provided | 2026-10-06 | 2026-10-09 |
| CVE-2026-104046 json | A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is enabled, pre-authe... | Not Provided | 2026-10-06 | 2026-10-13 |
| CVE-2026-104045 json | A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autofs res... | Not Provided | 2026-10-06 | 2026-10-13 |
| CVE-2026-104040 json | A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quotes ar... | Not Provided | 2026-10-06 | 2026-10-16 |
| CVE-2026-102560 json | A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, trunca... | Not Provided | 2026-09-29 | 2026-10-22 |
| CVE-2026-102559 json | A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values... | Not Provided | 2026-09-29 | 2026-10-19 |
| CVE-2026-102558 json | A flaw was found in libsoup. When max-incoming-payload-size is unlimited (0), SoupWebsocketConnection could grow its incoming... | Not Provided | 2026-09-29 | 2026-10-19 |
| CVE-2026-102557 json | A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately ca... | Not Provided | 2026-09-29 | 2026-10-19 |
| CVE-2026-102556 json | A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signa... | Not Provided | 2026-09-29 | 2026-10-19 |
| CVE-2026-102555 json | A flaw was found in libsoup. The soup_uri_decode_data_uri() function incorrectly treated base64 data-URI payloads as NUL-term... | Not Provided | 2026-09-29 | 2026-10-15 |
| CVE-2026-96659 json | A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unaut... | Not Provided | 2026-10-01 | 2026-10-16 |
| CVE-2026-96658 json | A flaw was found in Foreman. This vulnerability allows an authenticated remote attacker with low-level read permissions to ac... | Not Provided | 2026-10-01 | 2026-10-18 |
| CVE-2026-93253 json | Not Provided | 2026-09-24 | 2026-10-19 | |
| CVE-2026-90996 json | A flaw was found in sssd. A local unprivileged user could send a specially crafted request with a zero-length body to the Net... | Not Provided | 2026-09-14 | 2026-10-07 |
| CVE-2026-90995 json | A flaw was found in SSSD (System Security Services Daemon). A local attacker with privileges to connect to the PAM (Pluggable... | Not Provided | 2026-09-14 | 2026-10-14 |
| CVE-2026-90462 json | A flaw was found in SSSD. When configured with the LDAP access provider and `ldap_access_order` including `ppolicy` or `locko... | Not Provided | 2026-09-22 | 2026-10-07 |
| CVE-2026-88252 json | A flaw was found in sssd. A local user can cause a Denial of Service (DoS) by exhausting the responder service's available fi... | Not Provided | 2026-10-06 | 2026-10-20 |
| CVE-2026-82343 json | A flaw was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image file, the plugin does not prop... | Not Provided | 2026-08-28 | 2026-09-01 |
| CVE-2026-82330 json | A flaw was found in the file-pvr plugin in GIMP. When processing a specially crafted PVR image file, the VQ (compressed) deco... | Not Provided | 2026-08-28 | 2026-08-31 |
Known software with vulnerabilities from Redhat
| Type | Vendor | Product | Version |
|---|---|---|---|
| Operating System | Redhat | 389 Directory Server | - |
| Application | Redhat | 3scale | - |
| Application | Redhat | Advanced Cluster Management For Kubernetes | 2.0 |
| Application | Redhat | Aeolus Conductor | - |
| Application | Redhat | Amq | 2.0 |
| Application | Redhat | Amq Online | - |
| Application | Redhat | Analog Real-time Synthesizer | - |
| Application | Redhat | Ansible | 0.0.1 |
| Application | Redhat | Ansible Engine | 0.0.1 |
| Application | Redhat | Ansible Tower | - |
| Application | Redhat | Apicast | 2.0.0 |
| Application | Redhat | Application Server | - |
| Application | Redhat | Automatic Bug Reporting Tool | 0.0.10 |
| Application | Redhat | Automation Manager | 7.3.1 |
| Application | Redhat | Beaker | 0.10.0 |
| Application | Redhat | Bigmem Kernel | - |
| Application | Redhat | Bodhi | 0.2.0 |
| Application | Redhat | Cairo | - |
| Application | Redhat | Ceph | 0.1 |
| Application | Redhat | Ceph-iscsi-cli | - |