Red Hat Red Hat Hardened Images

• CVE-2026-59851 High 8.8 Libssh: libssh: authentication bypass via missing gssapi principal check 0.5%
• CVE-2026-59850 Medium 4.3 Libssh: libssh: use-after-free via data callbacks on closed channels 0.3%
• CVE-2026-59849 Low 3.1 Libssh: libssh: denial of service via automatic certificate authentication loop 0.4%
• CVE-2026-59848 Medium 5.3 Libssh: libssh: denial of service via sftp responses with unknown request ids 0.3%
• CVE-2026-59847 Medium 5.9 Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification 0.3%
• CVE-2026-59846 Low 3.9 Libssh: libssh: information disclosure via proxycommand %r username expansion 0.1%
• CVE-2026-16445 High 7.5 Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module 3.2%
• CVE-2026-59844 Medium 6.5 Libssh: libssh: denial of service via oversized sftp read length 0.6%
• CVE-2026-59845 Medium 5.3 Libssh: libssh: denial of service via unchecked proxycommand fork() failure 0.1%
• CVE-2026-59843 Medium 6.5 Libssh: libssh: denial of service via zero advertised channel packet size 0.6%
• CVE-2026-59842 Low 3.7 Libssh: libssh: information disclosure via short gssapi curve25519 public key 0.5%
• CVE-2026-15370 Medium 6.7 Libssh: libssh: stack buffer overflow in sftp server longname construction 0.2%
• CVE-2026-15588 Medium 5.3 Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering 0.5%
• CVE-2026-48863 High 7.5 Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service 0.8%
• CVE-2026-15028 Low 3.9 Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header 0.2%
• CVE-2026-12610 Medium 6.4 Sssd: use-after-free crash in sssd' 'sssd_pam' process 0.1%
• CVE-2026-14164 High 7.5 Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack() 0.8%
• CVE-2026-13757 Medium 6.2 P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing 0.2%
• CVE-2026-12912 High 7.3 Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image 0.4%
• CVE-2026-13595 Medium 6.8 Util-linux: util-linux: heap use-after-free in libblkid nested partition probing 0.1%
• CVE-2026-55654 Low 3.7 Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination 0.7%
• CVE-2026-55655 Medium 5.0 Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions 0.1%
• CVE-2026-55653 Medium 4.3 Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service 0.5%
• CVE-2026-56211 High 7.1 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames 0.9%
• CVE-2026-56210 High 7.1 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id 0.6%
• CVE-2026-56208 High 7.6 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode 0.6%
• CVE-2026-56209 High 7.1 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack 0.6%
• CVE-2026-12515 Medium 4.3 Katello: missing repository authorization in content_uploads exposes cross-product content existence 0.2%
• CVE-2026-4367 Medium 5.5 Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing 0.1%
• CVE-2026-42014 Medium 6.6 Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin 0.1%
• CVE-2026-11850 Medium 5.0 Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 0.3%
• CVE-2026-6893 High 7.5 Dracut: dracut: root code execution via dhcp options command injection 1.3%
• CVE-2026-10805 Medium 6.7 Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend 0.2%
• CVE-2026-5419 Low 3.7 Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal 0.5%
• CVE-2026-10118 High 7.8 Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication 0.3%
• CVE-2026-44604 High 7.0 Rpm: command injection in rpmuncompress dountar() via unescaped archive top-level directory name in popen() shell command 0.6%
• CVE-2026-42015 Medium 5.3 Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling 0.7%
• CVE-2026-42013 High 8.2 Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name 0.4%
• CVE-2026-42012 High 7.1 Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans 0.4%
• CVE-2026-5260 High 8.2 Gnutls: gnutls: information disclosure via heap overread in rsa key exchange 0.8%
• CVE-2026-48864 High 7.8 Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data 0.2%
• CVE-2026-9149 Medium 6.5 Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file 0.3%
• CVE-2026-9150 Medium 6.5 Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums 0.4%
• CVE-2026-42009 High 7.5 Gnutls: gnutls: denial of service via dtls packet reordering vulnerability 1.3%
• CVE-2026-42011 High 7.4 Gnutls: gnutls: security bypass due to incorrect name constraint handling 0.5%
• CVE-2026-42010 High 7.1 Gnutls: gnutls: authentication bypass via nul character in username 1.1%
• CVE-2026-33846 High 7.5 Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly 1.3%
• CVE-2026-33845 High 7.5 Gnutls: gnutls: denial of service via dtls zero-length fragment 2.1%
• CVE-2026-3832 Low 3.7 Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response 0.8%
• CVE-2026-3833 Medium 6.5 Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison 0.6%