Red Hat Red Hat OpenShift Container Platform 5

• CVE-2026-68742 Medium 5.5 Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr 0.1%
• CVE-2026-16531 Medium 5.3 Pcp: pcp: arbitrary file creation via path traversal in pmproxy logger servlet 0.5%
• CVE-2026-16530 Medium 6.5 Pcp: pcp: remote denial of service and information leakage 0.5%
• CVE-2026-16529 High 7.5 Pcp: pcp: denial of service due to signed integer overflow 0.5%
• CVE-2026-16527 High 7.3 Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules 0.6%
• CVE-2026-16526 High 8.8 Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability 0.6%
• CVE-2026-16524 High 7.8 Pcp: pcp linux_sockets pmda: arbitrary command execution via command injection 0.7%
• CVE-2026-18107 High 7.8 Criu: criu: container escape via rseq critical section hijack during checkpoint/restore 0.2%
• CVE-2026-16313 High 7.6 Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export 0.3%
• CVE-2026-15003 Medium 5.6 Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service 0.2%
• CVE-2026-16730 Medium 5.5 Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setup 0.2%
• CVE-2026-6390 Medium 6.8 Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling. 0.2%
• CVE-2026-16517 Low 2.9 Libarchive: libarchive: signed integer overflow in archive_write_zip_header 0.1%
• CVE-2026-16445 High 7.5 Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module 3.2%
• CVE-2026-16461 Medium 6.5 Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting 0.3%
• CVE-2026-16277 Medium 6.5 Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist() 0.5%
• CVE-2026-12080 High 7.3 Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys 0.1%
• CVE-2026-15813 Medium 6.5 Kronosnet: kronosnet: memory corruption and out-of-bounds access via malformed network packet defragmentation 0.4%
• CVE-2026-15809 High 7.8 Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env 0.2%
• CVE-2026-15028 Low 3.9 Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header 0.2%
• CVE-2026-14476 High 8.0 Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass 0.7%
• CVE-2026-14474 High 8.8 Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation 0.6%
• CVE-2026-12610 Medium 6.4 Sssd: use-after-free crash in sssd' 'sssd_pam' process 0.1%
• CVE-2026-13757 Medium 6.2 P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing 0.2%
• CVE-2026-13595 Medium 6.8 Util-linux: util-linux: heap use-after-free in libblkid nested partition probing 0.1%
• CVE-2026-55655 Medium 5.0 Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions 0.1%
• CVE-2026-55653 Medium 4.3 Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service 0.5%
• CVE-2026-12725 Medium 5.9 Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies 0.5%
• CVE-2026-12505 High 7.8 Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall 0.2%
• CVE-2026-10649 High 8.6 Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression 0.6%
• CVE-2026-42014 Medium 6.6 Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin 0.1%
• CVE-2026-48914 Medium 6.7 Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling 0.2%
• CVE-2026-11850 Medium 5.0 Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 0.3%
• CVE-2026-10843 High 7.2 Cloud-credential-operator: cco mint-mode credentialsrequest manifests grant account-wide iam access beyond cluster scope on aws 0.3%
• CVE-2026-10805 Medium 6.7 Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend 0.2%
• CVE-2026-5419 Low 3.7 Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal 0.5%
• CVE-2026-42965 High 7.7 Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation 0.4%
• CVE-2026-1933 High 7.1 Samba: missing access check on reparse point operations 0.9%
• CVE-2026-42015 Medium 5.3 Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling 0.7%
• CVE-2026-42013 High 8.2 Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name 0.4%
• CVE-2026-42012 High 7.1 Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans 0.4%
• CVE-2026-5260 High 8.2 Gnutls: gnutls: information disclosure via heap overread in rsa key exchange 0.8%
• CVE-2026-42011 High 7.4 Gnutls: gnutls: security bypass due to incorrect name constraint handling 0.5%