Vulnerabilities of Red Hat Red Hat OpenShift Container Platform 5

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-49329	A flaw was found in openshift/oauth-server	7.5 High	Sep 1, 2026
CVE-2026-82327	Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data	5.5 Medium	Aug 28, 2026
CVE-2026-19685	Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615)	7.1 High	Aug 24, 2026
CVE-2026-77176	A flaw was found in Kata Containers	8.1 High	Aug 20, 2026
CVE-2026-43961	Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution	7.8 High	Aug 19, 2026
CVE-2026-13002	A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service	4.4 Medium	Aug 14, 2026
CVE-2026-58224	Samba: ctdb fails to do integrity checking of received packets	6.5 Medium	Aug 14, 2026
CVE-2026-19617	Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser	5.5 Medium	Aug 14, 2026
CVE-2026-19730	Podman: podman: quadlet install --replace non-truncating write retains removed host-access directives	4.2 Medium	Aug 13, 2026
CVE-2026-19548	Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing	5.5 Medium	Aug 12, 2026
CVE-2026-72693	Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login	7.8 High	Aug 11, 2026
CVE-2026-15816	A flaw was found in dracut	7.5 High	Aug 7, 2026
CVE-2026-19079	Policycoreutils: policycoreutils: toctou race condition in fixfiles allows arbitrary selinux label manipulation	4.4 Medium	Aug 7, 2026
CVE-2026-71227	A flaw was found in libkcapi	5.1 Medium	Aug 5, 2026
CVE-2026-71226	Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all…	7.3 High	Aug 5, 2026
CVE-2026-71225	A flaw was found in libkcapi	6.5 Medium	Aug 5, 2026
CVE-2026-68743	Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1	5.5 Medium	Aug 4, 2026
CVE-2026-18477	Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape	4.4 Medium	Aug 3, 2026
CVE-2026-18508	Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite	4.4 Medium	Aug 3, 2026
CVE-2026-68742	Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr	5.5 Medium	Aug 3, 2026
CVE-2026-16531	Pcp: pcp: arbitrary file creation via path traversal in pmproxy logger servlet	5.3 Medium	Jul 30, 2026
CVE-2026-16530	Pcp: pcp: remote denial of service and information leakage	6.5 Medium	Jul 30, 2026
CVE-2026-16529	Pcp: pcp: denial of service due to signed integer overflow	7.5 High	Jul 30, 2026
CVE-2026-16527	Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules	7.3 High	Jul 30, 2026
CVE-2026-16526	Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability	8.8 High	Jul 30, 2026

Other Red Hat products