Vulnerabilities of Red Hat Red Hat OpenShift Container Platform 4.16

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-44488	Axios is a promise based HTTP client for the browser and Node.js	7.5 High	Jun 11, 2026
CVE-2026-44496	Axios is a promise based HTTP client for the browser and Node.js	7.5 High	Jun 11, 2026
CVE-2026-44495	Axios is a promise based HTTP client for the browser and Node.js	7.0 High	Jun 11, 2026
CVE-2026-44494	Axios is a promise based HTTP client for the browser and Node.js	8.7 High	Jun 11, 2026
CVE-2026-44492	Axios is a promise based HTTP client for the browser and Node.js	8.6 High	Jun 11, 2026
CVE-2026-6893	A flaw was found in dracut	7.5 High	Jun 10, 2026
CVE-2025-10263	Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925,…	9.1 Critical	Jun 9, 2026
CVE-2026-1784	The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy	8.8 High	Jun 2, 2026
CVE-2026-46243	In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego…	7.1 High	Jun 1, 2026
CVE-2026-46579	A flaw was found in the OpenShift Router	7.4 High	May 29, 2026
CVE-2026-4408	Samba: remote code execution in samr	9.0 Critical	May 28, 2026
CVE-2026-1933	Samba: missing access check on reparse point operations	7.1 High	May 27, 2026
CVE-2026-2340	Samba: vfs_worm does not block directory modification	6.5 Medium	May 27, 2026
CVE-2026-3012	Samba: group policy certificate enrollment uses http:// without validation	8.0 High	May 27, 2026
CVE-2026-42013	Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name	8.2 High	May 26, 2026
CVE-2026-5260	Gnutls: gnutls: information disclosure via heap overread in rsa key exchange	8.2 High	May 26, 2026
CVE-2026-48864	A flaw was found in libsolv	7.8 High	May 26, 2026
CVE-2026-46300	Exploited Linux Kernel Missing Initialization of a Variable Vulnerability	7.8 High	May 23, 2026
CVE-2026-43503	In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through…	8.8 High	May 23, 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critical	May 22, 2026
CVE-2026-9277	shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`	8.1 High	May 22, 2026
CVE-2026-5946	Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet…	7.5 High	May 20, 2026
CVE-2026-3039	BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive…	7.5 High	May 20, 2026
CVE-2026-42009	Gnutls: gnutls: denial of service via dtls packet reordering vulnerability	7.5 High	May 18, 2026
CVE-2025-54518	Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to…	7.3 High	May 15, 2026

Other Red Hat products