Vulnerabilities of Red Hat Red Hat OpenStack Platform 16.2

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-114406	Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns	6.8 Medium	Oct 21, 2026
CVE-2026-92982	A flaw was found in Ansible Operator Plugins	8.5 High	Oct 15, 2026
CVE-2026-92925	Redis: redis: out-of-bounds read via crafted cluster bus packets	7.1 High	Sep 17, 2026
CVE-2026-92091	Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array	5.9 Medium	Sep 16, 2026
CVE-2026-84828	Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token	6.5 Medium	Sep 10, 2026
CVE-2026-84185	Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verification	5.9 Medium	Sep 3, 2026
CVE-2026-80179	Jwcrypto: jwcrypto: denial of service via malformed jwe tokens	5.9 Medium	Aug 27, 2026
CVE-2026-11998	A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies for resource URLs…	7.6 High	Jun 24, 2026
CVE-2026-49759	Stack-based Buffer Overflow vulnerability in Erlang OTP erts (inet_drv) allows an unauthenticated remote attacker to…	8.8 High	Jun 10, 2026
CVE-2026-50589	In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious user could submit a crafted JSON string to some…	5.3 Medium	Jun 4, 2026
CVE-2026-44393	An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0	7.4 High	Jun 4, 2026
CVE-2026-41283	OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed	9.9 Critical	Jun 4, 2026
CVE-2026-27145	(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…	6.5 Medium	Jun 2, 2026
CVE-2026-42999	An issue was discovered in OpenStack Keystone before 29.0.2	6.0 Medium	May 28, 2026
CVE-2026-43000	An issue was discovered in OpenStack Keystone before 29.0.2	6.0 Medium	May 28, 2026
CVE-2026-42790	Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_cert and public_key modules) allows a DNS…	7.6 High	May 27, 2026
CVE-2026-42789	Improper Following of a Certificate's Chain of Trust vulnerability in Erlang OTP public_key (pubkey_cert module)…	7.0 High	May 27, 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critical	May 22, 2026
CVE-2026-42508	Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation	9.1 Critical	May 22, 2026
CVE-2026-46595	Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of…	10.0 Critical	May 22, 2026
CVE-2026-39829	The RSA and DSA public key parsers did not enforce size limits on key parameters	7.5 High	May 22, 2026
CVE-2026-39830	A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the…	9.1 Critical	May 22, 2026
CVE-2026-39835	SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be…	5.3 Medium	May 22, 2026
CVE-2026-39828	When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were…	6.3 Medium	May 22, 2026
CVE-2026-39832	When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not…	9.1 Critical	May 22, 2026

Other Red Hat products