Known vulnerabilities in Red Hat Enterprise Linux 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-66337	Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until()	6.5 Medium	Jul 24, 2026
CVE-2026-66338	Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()	5.4 Medium	Jul 24, 2026
CVE-2026-66339	Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels	6.5 Medium	Jul 24, 2026
CVE-2026-17039	Pki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment path	3.1 Low	Jul 24, 2026
CVE-2026-16743	A flaw was found in accountsservice	5.5 Medium	Jul 24, 2026
CVE-2026-16730	Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setup	5.5 Medium	Jul 24, 2026
CVE-2026-12353	Rhcs: memory leak during https connection leads to denial of service	5.3 Medium	Jul 23, 2026
CVE-2026-16768	Gdk-pixbuf: out-of-bounds read in ico parser	5.3 Medium	Jul 23, 2026
CVE-2026-64611	Libcupsfilters: cups-filters: libcupsfilters: cpu exhaustion via infinite loop in cfieee1284normalizemakemodel()	7.5 High	Jul 23, 2026
CVE-2026-6390	Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling.	6.8 Medium	Jul 23, 2026
CVE-2026-16552	A flaw was found in systemd-tmpfiles	6.3 Medium	Jul 22, 2026
CVE-2026-16560	389-ds-base: 389-ds-base: heap-buffer-overflow in rdn_av_swap on quoted multivalued rdn	5.3 Medium	Jul 22, 2026
CVE-2026-16473	Sbc: sbc: heap out-of-bounds read via crafted sbc audio frame	4.3 Medium	Jul 22, 2026
CVE-2026-16517	Libarchive: libarchive: signed integer overflow in archive_write_zip_header	2.9 Low	Jul 21, 2026
CVE-2026-16493	Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)	7.8 High	Jul 21, 2026
CVE-2026-59851	Libssh: libssh: authentication bypass via missing gssapi principal check	8.8 High	Jul 21, 2026
CVE-2026-59850	A flaw was found in libssh	4.3 Medium	Jul 21, 2026
CVE-2026-59849	Libssh: libssh: denial of service via automatic certificate authentication loop	3.1 Low	Jul 21, 2026
CVE-2026-59848	A flaw was found in libssh	5.3 Medium	Jul 21, 2026
CVE-2026-59847	A flaw was found in libssh	5.9 Medium	Jul 21, 2026
CVE-2026-59846	Libssh: libssh: information disclosure via proxycommand %r username expansion	3.9 Low	Jul 21, 2026
CVE-2026-16445	Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module	7.5 High	Jul 21, 2026
CVE-2026-16461	Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting	6.5 Medium	Jul 21, 2026
CVE-2026-59844	A flaw was found in libssh	6.5 Medium	Jul 21, 2026
CVE-2026-59845	A flaw was found in libssh	5.3 Medium	Jul 21, 2026

Other Red Hat products