Red Hat Red Hat OpenShift Container Platform 4

• CVE-2026-4480 Critical 9.0 Samba: samba: remote code execution in printing subsystem via unescaped job description 13.9%
• CVE-2026-9149 Medium 6.5 Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file 0.3%
• CVE-2026-9150 Medium 6.5 Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums 0.4%
• CVE-2026-42009 High 7.5 Gnutls: gnutls: denial of service via dtls packet reordering vulnerability 1.3%
• CVE-2026-42011 High 7.4 Gnutls: gnutls: security bypass due to incorrect name constraint handling 0.5%
• CVE-2026-42010 High 7.1 Gnutls: gnutls: authentication bypass via nul character in username 1.1%
• CVE-2026-34956 Medium 5.9 Openvswitch: open vswitch: denial of service via malformed ftp epasv command 0.4%
• CVE-2026-33846 High 7.5 Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly 1.3%
• CVE-2026-33845 High 7.5 Gnutls: gnutls: denial of service via dtls zero-length fragment 2.1%
• CVE-2026-3832 Low 3.7 Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response 0.8%
• CVE-2026-3833 Medium 6.5 Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison 0.6%
• CVE-2026-7309 Medium 4.3 Openshift-controller-manager: openshift container platform: information disclosure via environment variable injection 0.2%
• CVE-2026-5367 High 8.6 Ovn: ovn: information disclosure via crafted dhcpv6 packets 0.9%
• CVE-2026-6732 Medium 6.5 Libxml2: libxml2: denial of service via crafted xsd-validated document 0.6%
• CVE-2026-6862 Medium 5.5 Efivar: efivar: denial of service due to stack overflow in device path node parsing 0.1%
• CVE-2026-6846 High 7.8 Binutils: binutils: arbitrary code execution via malformed xcoff object file processing 0.2%
• CVE-2026-6844 Medium 5.5 Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files 0.1%
• CVE-2026-6843 Medium 5.5 Nano: nano: format string vulnerability leads to denial of service 0.1%
• CVE-2026-6845 Medium 5.0 Binutils: binutils: denial of service via crafted elf file 0.1%
• CVE-2026-6842 Low 2.5 Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions <0.1%
• CVE-2026-6507 High 7.5 Dnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processing 0.5%
• CVE-2026-6245 Medium 5.5 Sssd: out-of-bounds read in the sssd 0.1%
• CVE-2026-1584 High 7.5 Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder 1.4%
• CVE-2025-14821 High 7.8 Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows 0.1%
• CVE-2026-5745 Medium 5.5 Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive 0.2%
• CVE-2026-3184 Low 3.7 Util-linux: util-linux: access control bypass due to improper hostname canonicalization 0.4%
• CVE-2026-35092 High 7.5 Corosync: corosync: denial of service via integer overflow in join message validation 1.0%
• CVE-2026-35091 High 8.2 Corosync: corosync: denial of service and information disclosure via crafted udp packet 0.9%
• CVE-2026-4948 Medium 5.5 Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization 0.1%
• CVE-2026-0965 Low 3.3 Libssh: libssh: denial of service via improper configuration file handling 0.2%
• CVE-2026-0967 Low 2.2 Libssh: libssh: denial of service via inefficient regular expression processing 0.2%
• CVE-2026-0968 Low 3.1 Libssh: libssh: denial of service due to malformed sftp message 0.5%
• CVE-2026-0964 Medium 5.0 Libssh: improper sanitation of paths received from scp servers 0.4%
• CVE-2026-0966 Medium 6.5 Libssh: libssh: denial of service via zero-length input in ssh_get_hexa() 0.6%
• CVE-2026-2100 Medium 5.3 P11-kit: null dereference via c_derivekey with specific null parameters 1.3%
• CVE-2026-4897 Medium 5.5 Polkit: polkit: denial of service via unbounded input processing through standard input 0.2%
• CVE-2026-4647 Medium 6.1 Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library 0.2%
• CVE-2026-4426 Medium 6.5 Libarchive: libarchive: denial of service via malformed iso file processing 0.3%
• CVE-2026-3441 Medium 6.1 Binutils: gnu binutils: information disclosure via specially crafted xcoff object file 0.2%
• CVE-2026-3442 Medium 6.1 Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker 0.3%
• CVE-2026-4111 High 7.5 Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive 0.7%
• CVE-2026-4105 Medium 6.7 Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method 0.1%
• CVE-2025-12801 Medium 6.5 Nfs-utils: rpc.mountd in the nfs-utils privilege escalation 0.5%
• CVE-2026-2243 Medium 5.1 Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing 0.1%
• CVE-2026-0665 Medium 6.5 Qemu-kvm: heap off-by-one in kvm xen physdevop_map_pirq 0.2%
• CVE-2025-8860 Low 3.3 Qemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callback 0.2%
• CVE-2025-14876 Medium 5.5 Qemu-kvm: unbounded allocation in virtio-crypto 0.2%
• CVE-2025-1272 High 7.7 Kernel: secure boot does not automatically enable kernel lockdown 0.3%
• CVE-2025-14831 Medium 5.3 Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification 0.7%
• CVE-2026-1757 Medium 6.2 Libxml2: memory leak leading to local denial of service in xmllint interactive shell 0.2%