Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how redhat compares to other vendors in security performance

View Risk Score →

Software

redhat enterprise linux
560
redhat enterprise linux desktop
337
redhat enterprise linux server
308
redhat enterprise linux workstation
299
redhat enterprise linux server aus
187
redhat enterprise linux server tus
160
redhat enterprise linux eus
151
redhat enterprise linux server eus
81
redhat satellite
64
redhat openshift container platform
62
redhat linux
61
redhat openstack
53
redhat jboss enterprise application platform
47
redhat build of keycloak
36
redhat linux advanced workstation
34
redhat fedora core
30
redhat enterprise linux for ibm z systems
26
redhat enterprise linux for power little endian
24
redhat keycloak
24
redhat single sign-on
24
redhat enterprise mrg
22
redhat software collections
22
redhat openshift
20
redhat enterprise linux for ibm z systems eus
19
redhat enterprise linux for power little endian eus
19
redhat virtualization host
17
redhat ansible tower
15
redhat virtualization
15
redhat 389 directory server
14
redhat enterprise linux for arm 64
14
redhat hardened images
14
redhat ansible automation platform
13
redhat directory server
13
redhat enterprise linux hpc node
13
redhat enterprise linux for real time
12
redhat enterprise linux for real time for nfv
12
redhat enterprise linux server for power little endian update services for sap solutions
12
redhat libvirt
12
redhat ansible
11
redhat storage
11
redhat ceph storage
10
redhat enterprise linux for arm 64 eus
9
redhat enterprise linux hpc node eus
9
redhat undertow
9
redhat cloudforms
8
redhat cloudforms management engine
8
redhat jboss fuse
8
redhat codeready linux builder
7
redhat data grid
7
redhat enterprise linux for scientific computing
7

guardrails-detectorsGuardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regex

Risk 38
Severity
6.5
First published (updated )
CVE-2026-15154

redhat Enterprise Linux389-ds-base: 389-ds-base: static initialization vector in aes-cbc/3des-cbc attribute encryption

Risk 26
Severity
4.4
First published (updated )
CVE-2026-14969

redhat Enterprise Linux389-ds-base: 389-ds-base: heap-buffer-overflow in dn normalization via quoted multivalued rdn

Risk 27
Severity
5.3
First published (updated )
CVE-2026-14940

redhat Enterprise LinuxGimp: gimp: denial of service via integer overflow in playstation tim loader

Risk 31
Severity
5.5
First published (updated )
CVE-2026-59089

Keycloak keycloak-admin-uiKeycloak-admin-ui: keycloak-admin-ui:admin ui extension brute-force-user endpoint bypasses fgapv2 user view restrictions

Risk 22
Severity
4.3
First published (updated )
CVE-2026-14209
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat Enterprise LinuxP11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing

Risk 36
Severity
6.2
First published (updated )
CVE-2026-13757

redhat Enterprise LinuxUtil-linux: util-linux: heap use-after-free in libblkid nested partition probing

Risk 45
Severity
6.8
First published (updated )
CVE-2026-13595

redhat Enterprise LinuxSpice-vdagent: integer overflow in udscs_write() leading to heap buffer overflow

Risk 35
Severity
5.1
First published (updated )
CVE-2026-57965

redhat Enterprise LinuxSpice-vdagent: path traversal in file transfer via unsanitized filename

Risk 26
Severity
4.4
First published (updated )
CVE-2026-57966

KubeVirtVirt-controller-rhel9: kubevirt: kubevirt: multus default-network annotation injection via unvalidated tenant networkname when externalnetresourceinjection is enabled

Risk 32
Severity
4.9
First published (updated )
CVE-2026-13434
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

KubeVirt virt-apiVirt-api-rhel9: kubevirt: kubevirt: ssrf in virt-api port-forward via unvalidated guest-agent-reported ip

Risk 39
Severity
6.4
First published (updated )
CVE-2026-13318

Kubevirt virt-handlerKubevirt: kubevirt: symlink following in writetocachedfile allows host file overwrite from virt-launcher

Risk 28
Severity
4.2
First published (updated )
CVE-2026-13218

Kubevirt virt-handlerKubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request body

Risk 36
Severity
6.5
First published (updated )
CVE-2026-13208

Pen DrivePen-drive: pen-drive: stored xss via unescaped cluster data in html report

Risk 43
Severity
6.9
First published (updated )
CVE-2026-13083

Apicurio Apicurio RegistryApicurio/apicurio-registry: apicurio-registry: xml entity-expansion denial of service via internal dtd subset

Risk 38
Severity
6.5
First published (updated )
CVE-2026-12993
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Dnsmasq DnsmasqDnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validation

Risk 27
Severity
5.3
First published (updated )
CVE-2026-12969

redhat Enterprise LinuxGstreamer1-plugins-bad: gstreamer1-plugins-bad: 1-byte heap out-of-bounds read in h.264 nal extension slice parser

Risk 28
Severity
4.4
First published (updated )
CVE-2026-12892

redhat Enterprise LinuxGstreamer1-plugins-bad: gstreamer1-plugins-bad: global buffer overflow (oob read) in h.266/vvc vui parameter parser

Risk 22
Severity
4.3
First published (updated )
CVE-2026-12891

redhat Enterprise LinuxDnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies

Risk 35
Severity
5.9
First published (updated )
CVE-2026-12725

foremanForeman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config

Risk 26
Severity
4.4
First published (updated )
CVE-2026-13316
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat Enterprise LinuxSssd: use-after-free crash in sssd' 'sssd_pam' process

Risk 56
Severity
6.4
First published (updated )
CVE-2026-12610

redhat Enterprise LinuxLibsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserver

Risk 32
Severity
4.8
First published (updated )
CVE-2026-12549

redhat Enterprise Linux389-ds-base: 389-ds-base: heap-buffer-overflows in __aclp__normalize_acltxt()

Risk 34
Severity
5.4
First published (updated )
CVE-2026-12528

Keycloak Identity Provider (IdP) mapper componentKeycloak-broker: keycloak: privilege escalation to realm administrator via improper authorization in identity provider mapper

Risk 49
Severity
6.5
First published (updated )
CVE-2026-12388

redhat Enterprise LinuxCommunity.general: community.general nexmo — api credentials exposed in get url query string[security] community.general nexmo — api credentials exposed in get url query string

Risk 38
Severity
6.5
First published (updated )
CVE-2026-11820
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

MariaDB MariaDBMariaDB: mysql_real_escape_string() incorrectly handled big5

Risk 66
Severity
6.9
First published (updated )
CVE-2026-44172

ansible/community/generalCommunity.general: community.general keyring_info — os keyring passphrase returned in plaintext

Risk 32
Severity
5.5
First published (updated )
CVE-2026-11819

redhat Enterprise Linux389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditions

Risk 38
Severity
6.5
First published (updated )
CVE-2026-11611

redhat Enterprise Linux389-ds-base: 389-ds-base: heap out-of-bounds read in ldif parser str2entry_state_information_from_type()

Risk 38
Severity
6.5
First published (updated )
CVE-2026-11786

redhat Enterprise Linux389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsing

Risk 46
Severity
6.3
First published (updated )
CVE-2026-11787
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203