Known vulnerabilities in Red Hat OpenShift Container Platform 4

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-26017	CoreDNS is a DNS server that chains plugins	7.7 High	Mar 6, 2026
CVE-2026-26018	CoreDNS is a DNS server that chains plugins	7.5 High	Mar 6, 2026
CVE-2026-29074	SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files	7.5 High	Mar 6, 2026
CVE-2025-69534	Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser…	7.5 High	Mar 5, 2026
CVE-2025-15558	Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not…	7.0 High	Mar 4, 2026
CVE-2025-12801	Nfs-utils: rpc.mountd in the nfs-utils privilege escalation	6.5 Medium	Mar 4, 2026
CVE-2026-3338	Improper signature validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass signature…	7.5 High	Mar 2, 2026
CVE-2026-3336	Improper certificate validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass certificate chain…	7.5 High	Mar 2, 2026
CVE-2026-2293	A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when…	8.2 High	Feb 27, 2026
CVE-2026-27606	Rollup is a module bundler for JavaScript	8.8 High	Feb 25, 2026
CVE-2026-2243	A flaw was found in QEMU	5.1 Medium	Feb 19, 2026
CVE-2026-24834	Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs)…	9.4 Critical	Feb 19, 2026
CVE-2026-0665	An off-by-one error was found in QEMU's KVM Xen guest support	6.5 Medium	Feb 18, 2026
CVE-2025-8860	A flaw was found in QEMU in the uefi-vars virtual device	3.3 Low	Feb 18, 2026
CVE-2025-14876	A flaw was found in the virtio-crypto device of QEMU	5.5 Medium	Feb 18, 2026
CVE-2025-1272	The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode…	7.7 High	Feb 18, 2026
CVE-2025-69873	ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the…	2.9 Low	Feb 11, 2026
CVE-2026-25639	Axios is a promise based HTTP client for the browser and Node.js	7.5 High	Feb 9, 2026
CVE-2025-14831	Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification	5.3 Medium	Feb 9, 2026
CVE-2026-1757	Libxml2: memory leak leading to local denial of service in xmllint interactive shell	6.2 Medium	Feb 2, 2026
CVE-2025-61726	The net/url package does not set a limit on the number of query parameters in a query	7.5 High	Jan 28, 2026
CVE-2026-24842	node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink…	8.2 High	Jan 28, 2026
CVE-2025-15467	Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can…	Not rated	Jan 27, 2026
CVE-2025-9820	A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11…	4.0 Medium	Jan 26, 2026
CVE-2025-9615	A flaw was found in NetworkManager	3.3 Low	Jan 26, 2026

Other Red Hat products