Red Hat Red Hat OpenStack Platform 18.0

• CVE-2026-93009 Medium 4.3 Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder 0.2%
• CVE-2026-93010 Medium 4.3 Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check 0.2%
• CVE-2026-93006 Medium 6.8 Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content 0.3%
• CVE-2026-93007 Medium 5.3 Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation 0.4%
• CVE-2026-93011 Medium 5.3 Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms 0.6%
• CVE-2026-93008 Medium 6.8 Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations 0.1%
• CVE-2026-92982 High 8.5 Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection 0.5%
• CVE-2026-83535 High 7.4 Openstack-network-exporter: basic-auth uses plaintext password storage and non-constant-time comparison 0.3%
• CVE-2026-83536 Medium 5.3 Openstack-network-exporter: http.server has no readheadertimeout / readtimeout (slowloris) 0.3%
• CVE-2026-107935 Critical 9.3 Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose 0.2%
• CVE-2026-87872 Medium 6.8 Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure 0.1%
• CVE-2026-87874 High 8.1 Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution on the ansible controller 0.7%
• CVE-2026-80158 Medium 5.5 Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings 0.1%
• CVE-2026-11837 High 7.3 Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown 0.2%
• CVE-2026-34956 Medium 5.9 Openvswitch: open vswitch: denial of service via malformed ftp epasv command 0.4%
• CVE-2025-14010 Medium 5.5 Ansible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose output 0.2%
• CVE-2023-6110 Medium 5.5 Openstack: deleting a non existing access rule deletes another existing access rule in it's scope 0.5%
• CVE-2024-43168 Medium 4.8 Unbound: heap-buffer-overflow in unbound 0.3%
• CVE-2024-43167 Low 2.8 Unbound: null pointer dereference in unbound 0.4%
• CVE-2024-4438 High 7.5 Etcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platform 0.8%
• CVE-2024-4437 High 7.5 Etcd: incomplete fix for cve-2021-44716 in openstack platform 0.8%
• CVE-2024-4436 High 7.5 Etcd: incomplete fix for cve-2022-41723 in openstack platform 0.8%
• CVE-2023-6725 Medium 5.5 Tripleo-ansible: bind keys are world readable 0.2%
• CVE-2024-1141 Medium 5.5 Glance-store: glance store access key logged in debug log level 0.2%
• CVE-2023-3637 Medium 4.3 Openstack-neutron: unrestricted creation of security groups (fix for cve-2022-3277) 1.3%