Known vulnerabilities in Red Hat Enterprise Linux 10

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-44605	Rpm: heap buffer overflow in ndb slot table parsing	5.5 Medium	Aug 5, 2026
CVE-2026-71227	A flaw was found in libkcapi	5.1 Medium	Aug 5, 2026
CVE-2026-71226	Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path	7.3 High	Aug 5, 2026
CVE-2026-71225	A flaw was found in libkcapi	6.5 Medium	Aug 5, 2026
CVE-2026-68743	Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1	5.5 Medium	Aug 4, 2026
CVE-2026-70368	Stunnel: stack-based out-of-bounds read/write in stunnel s_vlog via oversized log message	6.5 Medium	Aug 4, 2026
CVE-2026-70367	Stunnel: ssrf bypass in stunnel socks proxy via ipv4-mapped ipv6 loopback and unspecified addresses allows access to loopback-only services	5.4 Medium	Aug 4, 2026
CVE-2026-18739	Popt-devel: popt-static: off-by-one in poptstuffargs	2.5 Low	Aug 4, 2026
CVE-2026-68744	Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply	3.3 Low	Aug 4, 2026
CVE-2026-18477	Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape	4.4 Medium	Aug 3, 2026
CVE-2026-18651	389-ds-base: 389-ds-base: sasl plain bind installs connection credentials before account-lock check, allowing continued access as a locked account	5.4 Medium	Aug 3, 2026
CVE-2026-18508	Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite	4.4 Medium	Aug 3, 2026
CVE-2026-68742	Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr	5.5 Medium	Aug 3, 2026
CVE-2026-18358	Gnome-remote-desktop: gnome-remote-desktop system-mode rdp server missing connection throttling allows unauthenticated denial of service	7.5 High	Jul 31, 2026
CVE-2026-11770	389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check	7.5 High	Jul 31, 2026
CVE-2026-15722	389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing	7.5 High	Jul 31, 2026
CVE-2026-18157	Yggdrasil-worker-package-manager: yggdrasil-worker-package-manager: remote code execution via apt argument injection	7.8 High	Jul 31, 2026
CVE-2026-68562	A flaw was found in ansible-collection-redhat-leapp	6.2 Medium	Jul 30, 2026
CVE-2026-68563	A flaw was found in ansible-collection-redhat-leapp	5.5 Medium	Jul 30, 2026
CVE-2026-58216	An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd)…	5.3 Medium	Jul 30, 2026
CVE-2026-58222	A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory…	8.8 High	Jul 30, 2026
CVE-2026-58218	A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the…	5.3 Medium	Jul 30, 2026
CVE-2026-18369	Dogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirects	5.8 Medium	Jul 30, 2026
CVE-2026-16531	Pcp: pcp: arbitrary file creation via path traversal in pmproxy logger servlet	5.3 Medium	Jul 30, 2026
CVE-2026-16530	Pcp: pcp: remote denial of service and information leakage	6.5 Medium	Jul 30, 2026

Other Red Hat products