Red Hat Cost Management 4

• CVE-2026-114406 Medium 6.8 Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns 0.3%
• CVE-2026-18382 Medium 6.8 Project-koku/koku-metrics-operator: koku-metrics-operator: service-account client credentials sent to user-controlled token_url 0.5%
• CVE-2026-18378 High 7.6 Project-koku/koku-metrics-operator: koku-metrics-operator: cluster pull-secret token exfiltration via user-controlled api_url (ssrf / confused deputy) 0.5%
• CVE-2026-18381 High 7.6 Project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled prometheus service_address 0.4%
• CVE-2026-13757 Medium 6.2 P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing 0.2%
• CVE-2026-4878 Medium 6.7 Libcap: libcap: privilege escalation via toctou race condition in cap_set_file() 0.2%
• CVE-2026-2100 Medium 5.3 P11-kit: null dereference via c_derivekey with specific null parameters 1.3%
• CVE-2025-5278 Medium 4.4 Coreutils: heap buffer under-read in gnu coreutils sort via key specification 0.3%