Vulnerabilities of Red Hat Red Hat OpenStack Platform 16.2

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-41292	NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to…	6.6 Medium	May 20, 2026
CVE-2026-33811	When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…	7.5 High	May 7, 2026
CVE-2026-39820	Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion…	7.5 High	May 7, 2026
CVE-2026-42499	Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322	7.5 High	May 7, 2026
CVE-2026-33814	When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it…	7.5 High	May 7, 2026
CVE-2026-34956	Openvswitch: open vswitch: denial of service via malformed ftp epasv command	5.9 Medium	May 5, 2026
CVE-2026-42997	An issue was discovered in idrac in OpenStack Ironic before 35.0.1	7.7 High	May 5, 2026
CVE-2026-43001	An issue was discovered in OpenStack Keystone before 29.0.2	7.9 High	May 1, 2026
CVE-2026-32280	During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…	7.5 High	Apr 8, 2026
CVE-2026-32283	If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection…	7.5 High	Apr 8, 2026
CVE-2026-33810	When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to…	7.5 High	Apr 8, 2026
CVE-2026-28808	Incorrect Authorization vulnerability in Erlang OTP (inets modules) allows unauthenticated access to CGI scripts…	8.3 High	Apr 7, 2026
CVE-2026-32144	Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_ocsp module) allows OCSP…	7.6 High	Apr 7, 2026
CVE-2026-34881	OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF)	5.0 Medium	Mar 31, 2026
CVE-2026-33186	gRPC-Go is the Go language implementation of gRPC	9.1 Critical	Mar 20, 2026
CVE-2026-32875	UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+	7.5 High	Mar 20, 2026
CVE-2026-32874	UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+	7.5 High	Mar 20, 2026
CVE-2026-25679	url.Parse insufficiently validated the host/authority component and accepted some invalid URLs	7.5 High	Mar 6, 2026
CVE-2026-27137	When verifying a certificate chain which contains a certificate containing multiple email address constraints which…	7.5 High	Mar 6, 2026
CVE-2025-15558	Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not…	7.0 High	Mar 4, 2026
CVE-2026-24708	An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1	8.2 High	Feb 18, 2026
CVE-2026-1312	An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28	Not rated	Feb 3, 2026
CVE-2026-1287	An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28	Not rated	Feb 3, 2026
CVE-2026-1207	An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28	Not rated	Feb 3, 2026
CVE-2025-61726	The net/url package does not set a limit on the number of query parameters in a query	7.5 High	Jan 28, 2026

Other Red Hat products