Vulnerabilities of Red Hat Red Hat OpenStack Services on OpenShift 18.0

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-114406	Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns	6.8 Medium	Oct 21, 2026
CVE-2026-42790	Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_cert and public_key modules) allows a DNS…	7.6 High	May 27, 2026
CVE-2026-42789	Improper Following of a Certificate's Chain of Trust vulnerability in Erlang OTP public_key (pubkey_cert module)…	7.0 High	May 27, 2026
CVE-2026-33811	When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…	7.5 High	May 7, 2026
CVE-2026-43001	An issue was discovered in OpenStack Keystone before 29.0.2	7.9 High	May 1, 2026
CVE-2026-32280	During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…	7.5 High	Apr 8, 2026
CVE-2026-32283	If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection…	7.5 High	Apr 8, 2026
CVE-2026-33810	When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to…	7.5 High	Apr 8, 2026
CVE-2026-34881	OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF)	5.0 Medium	Mar 31, 2026
CVE-2026-25679	url.Parse insufficiently validated the host/authority component and accepted some invalid URLs	7.5 High	Mar 6, 2026
CVE-2026-27137	When verifying a certificate chain which contains a certificate containing multiple email address constraints which…	7.5 High	Mar 6, 2026
CVE-2026-24708	An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1	8.2 High	Feb 18, 2026
CVE-2025-61726	The net/url package does not set a limit on the number of query parameters in a query	7.5 High	Jan 28, 2026
CVE-2026-23490	pyasn1 is a generic ASN.1 library for Python	7.5 High	Jan 16, 2026

Other Red Hat products