| CVE-2026-4480 | 9 | critical | openshift container platform | A flaw was found in the Samba printing subsystem. | 148d ago |
| CVE-2026-4408 | 9 | critical | openshift container platform | A flaw was found in Samba. | 146d ago |
| CVE-2026-1784 | 8.8 | high | openshift container platform | The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy. | 141d ago |
| CVE-2026-15572 | 8.8 | high | build of keycloak | A flaw was found in Keycloak's Dynamic Client Registration (DCR) security policy management. | 77d ago |
| CVE-2026-5136 | 8.8 | high | satellite | A flaw was found in Foreman. | 112d ago |
| CVE-2026-12856 | 8.8 | high | openshift dev spaces | A flaw was found in the vscode-java extension, which provides Java language support for Visual Studio Code. | 114d ago |
| CVE-2026-54099 | 8.8 | high | openshift container platform | A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. | 121d ago |
| CVE-2026-13097 | 8.7 | high | enterprise linux | A privilege escalation flaw was found in FreeIPA. | 62d ago |
| CVE-2026-12975 | 8.5 | high | build of apicurio registry | A flaw was found in Apicurio Registry. | 118d ago |
| CVE-2026-54100 | 8.3 | high | openshift container platform | A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. | 121d ago |
| CVE-2026-19550 | 8.2 | high | enterprise linux | A flaw was found in FreeIPA. | 71d ago |
| CVE-2026-9800 | 8.1 | high | build of keycloak | A flaw was found in Keycloak Policy Enforcer. | 118d ago |
| CVE-2026-7504 | 8.1 | high | build of keycloak | A flaw was found in Keycloak's URL validation logic during redirect operations. | 155d ago |
| CVE-2026-1609 | 8.1 | high | build of keycloak | A flaw was found in Keycloak. | 98d ago |
| CVE-2026-16102 | 8.1 | high | build of keycloak | A flaw was found in the Dynamic Client Registration (DCR) component of Keycloak, an identity and access management | 77d ago |
| CVE-2026-2603 | 8.1 | high | build of keycloak | A flaw was found in Keycloak. | 218d ago |
| CVE-2026-15573 | 8.1 | high | build of keycloak | A flaw was found in Keycloak's Authorization Services. | 77d ago |
| CVE-2026-11800 | 8.1 | high | build of keycloak | A flaw was found in Keycloak. | 118d ago |
| CVE-2026-3012 | 8 | high | openshift container platform | A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. | 147d ago |
| CVE-2026-42170 | 7.8 | high | enterprise linux | A heap-based buffer overflow vulnerability exists in the GIMP DDS (DirectDraw Surface) file parser. | 74d ago |
| CVE-2026-12112 | 7.8 | high | satellite | A flaw was found in the foreman-mcp-server. | 120d ago |
| CVE-2026-42965 | 7.7 | high | openshift container platform | A flaw was found in the OpenShift Router. | 145d ago |
| CVE-2026-2092 | 7.7 | high | build of keycloak | A flaw was found in Keycloak. | 218d ago |
| CVE-2026-9099 | 7.7 | high | build of keycloak | A flaw was found in Keycloak. | 118d ago |
| CVE-2026-18381 | 7.6 | high | cost management metrics operator | A flaw was found in the koku-metrics-operator for Red Hat OpenShift. | 83d ago |
| CVE-2026-18378 | 7.6 | high | cost management metrics operator | A flaw was found in koku-metrics-operator. | 83d ago |
| CVE-2026-15722 | 7.5 | high | directory server | A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). | 82d ago |
| CVE-2026-7307 | 7.5 | high | build of keycloak | A flaw was found in Keycloak. | 155d ago |
| CVE-2026-7507 | 7.5 | high | build of keycloak | A session fixation vulnerability was found in Keycloak's login-actions endpoints. | 155d ago |
| CVE-2026-9064 | 7.5 | high | directory server | A flaw was found in 389-ds-base. | 154d ago |
| CVE-2026-11770 | 7.5 | high | directory server | A flaw was found in 389 Directory Server. | 82d ago |
| CVE-2026-73197 | 7.5 | high | enterprise linux | A flaw was found in FreeIPA. | 62d ago |
| CVE-2026-73198 | 7.5 | high | enterprise linux | A flaw was found in FreeIPA. | 62d ago |
| CVE-2026-46579 | 7.4 | high | openshift container platform | A flaw was found in the OpenShift Router. | 145d ago |
| CVE-2026-16443 | 7.4 | high | build of keycloak | A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core e | 77d ago |
| CVE-2026-16442 | 7.4 | high | build of keycloak | A flaw was found in the SAML broker component of Keycloak, which is used to manage identity federation and user au | 77d ago |
| CVE-2026-12992 | 7.4 | high | build of apicurio registry | A flaw was found in Apicurio Registry. | 118d ago |
| CVE-2026-71226 | 7.3 | high | hardened images | Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before al | 77d ago |
| CVE-2026-9795 | 7.3 | high | build of keycloak | A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) feature. | 147d ago |
| CVE-2026-9086 | 7.3 | high | build of keycloak | A flaw was found in Keycloak. | 118d ago |
| CVE-2026-7571 | 7.1 | high | build of keycloak | A flaw was found in Keycloak. | 155d ago |
| CVE-2026-71474 | 7.1 | high | advanced cluster management for kubernetes | A flaw was found in insights-client. | 71d ago |
| CVE-2026-13601 | 7.1 | high | enterprise linux | A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp | 114d ago |
| CVE-2026-1933 | 7.1 | high | openshift container platform | A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. | 147d ago |
| CVE-2026-54230 | 7 | high | automatic bug reporting tool | A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. | 131d ago |
| CVE-2025-57849 | 6.4 | medium | fuse | A container privilege escalation flaw was found in certain Fuse images. | 222d ago |
| CVE-2025-8766 | 6.4 | medium | openshift data foundation | A container privilege escalation flaw was found in certain Multi-Cloud Object Gateway Core images. | 222d ago |
| CVE-2026-4366 | 5.8 | medium | build of keycloak | A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP red | 218d ago |
| CVE-2026-2575 | 5.3 | medium | build of keycloak | A flaw was found in Keycloak. | 218d ago |
| CVE-2026-2376 | 4.9 | medium | quay | A flaw was found in mirror-registry where an authenticated user can trick the system into accessing unintended inte | 223d ago |
| CVE-2026-4628 | 4.3 | medium | build of keycloak | A flaw was found in Keycloak. | 212d ago |
| CVE-2026-3429 | 4.2 | medium | build of keycloak | A flaw was identified in the Account REST API of Keycloak that allows a user authenticated at a lower security leve | 224d ago |
| CVE-2026-4633 | 3.7 | low | build of keycloak | A flaw was found in Keycloak. | 212d ago |
| CVE-2026-2366 | 3.1 | low | build of keycloak | A flaw was found in Keycloak. | 223d ago |
