Known Vulnerabilities for products from Redhat
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Redhat".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Additional devices specifications by Redhat can be found at device.report : Redhat
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-74247 json | A flaw was found in Red Hat Quay. A user with FEATURE_BUILD_SUPPORT enabled and repository write access can exploit a Server-... | Not Provided | 2026-08-14 | 2026-08-20 |
| CVE-2026-74245 json | A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exp... | Not Provided | 2026-08-14 | 2026-08-20 |
| CVE-2026-74244 json | A flaw was found in Red Hat Quay's Stripe billing webhook handler. This vulnerability allows an unauthenticated attacker to f... | Not Provided | 2026-08-14 | 2026-08-20 |
| CVE-2026-74243 json | A flaw was found in Red Hat Quay. When the SECURITY_SCANNER_V4_PSK (pre-shared key) is not set, a remote unauthenticated atta... | Not Provided | 2026-08-14 | 2026-08-20 |
| CVE-2026-74242 json | A flaw was found in Red Hat Quay. An administrator of any repository, by knowing or guessing a target notification's Universa... | Not Provided | 2026-08-14 | 2026-08-20 |
| CVE-2026-74241 json | A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP) authentication handling. When an LDA... | Not Provided | 2026-08-14 | 2026-08-20 |
| CVE-2026-74240 json | A flaw was found in Red Hat Quay's JWT (JSON Web Token) validation for federated robot accounts and single sign-on (SSO) auth... | Not Provided | 2026-08-14 | 2026-08-20 |
| CVE-2026-73434 json | A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_ri... | Not Provided | 2026-08-12 | 2026-08-19 |
| CVE-2026-73433 json | A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux... | Not Provided | 2026-08-12 | 2026-08-19 |
| CVE-2026-73198 json | A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the `/ipa/i18n_messages` endpo... | Not Provided | 2026-08-20 | 2026-08-24 |
| CVE-2026-73197 json | A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST... | Not Provided | 2026-08-20 | 2026-08-24 |
| CVE-2026-73196 json | A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One... | Not Provided | 2026-08-20 | 2026-08-24 |
| CVE-2026-71846 json | A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole granting cluster-wide secrets g... | Not Provided | 2026-08-12 | 2026-08-24 |
| CVE-2026-71845 json | A flaw was found in insights-client. The setDefault() function logs the value of every environment variable it processes, inc... | Not Provided | 2026-08-11 | 2026-08-24 |
| CVE-2026-71475 json | A flaw was found in insights-client. A compromised managed cluster, referred to as a 'spoke', can inject unencoded data into ... | Not Provided | 2026-08-11 | 2026-08-24 |
| CVE-2026-71474 json | A flaw was found in insights-client. When the application receives a non-200 response, it logs the request headers, which can... | Not Provided | 2026-08-11 | 2026-08-24 |
| CVE-2026-71227 json | A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) int... | Not Provided | 2026-08-05 | 2026-08-19 |
| CVE-2026-71226 json | Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted... | Not Provided | 2026-08-05 | 2026-08-24 |
| CVE-2026-71225 json | A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs (over 64 KiB) in stateful ... | Not Provided | 2026-08-05 | 2026-08-19 |
| CVE-2026-68744 json | A flaw was found in SSSD. The sss_nss_protocol_fill_initgr() function in the NSS responder pre-allocates reply space for all ... | Not Provided | 2026-08-04 | 2026-08-18 |
Known software with vulnerabilities from Redhat
| Type | Vendor | Product | Version |
|---|---|---|---|
| Operating System | Redhat | 389 Directory Server | - |
| Application | Redhat | 3scale | - |
| Application | Redhat | Advanced Cluster Management For Kubernetes | 2.0 |
| Application | Redhat | Aeolus Conductor | - |
| Application | Redhat | Amq | 2.0 |
| Application | Redhat | Amq Online | - |
| Application | Redhat | Analog Real-time Synthesizer | - |
| Application | Redhat | Ansible | 0.0.1 |
| Application | Redhat | Ansible Engine | 0.0.1 |
| Application | Redhat | Ansible Tower | - |
| Application | Redhat | Apicast | 2.0.0 |
| Application | Redhat | Application Server | - |
| Application | Redhat | Automatic Bug Reporting Tool | 0.0.10 |
| Application | Redhat | Automation Manager | 7.3.1 |
| Application | Redhat | Beaker | 0.10.0 |
| Application | Redhat | Bigmem Kernel | - |
| Application | Redhat | Bodhi | 0.2.0 |
| Application | Redhat | Cairo | - |
| Application | Redhat | Ceph | 0.1 |
| Application | Redhat | Ceph-iscsi-cli | - |