Skip to content

Known vulnerabilities in Red Hat Container Native Virtualization 4.14

Is your version affected?

CVE Summary Score Published
CVE-2026-13622 A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy 8.8 High Aug 12, 2026
CVE-2026-17527 In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only… 7.7 High Jul 27, 2026
CVE-2026-13201 A flaw was found in KubeVirt's safepath package used by virt-handler 7.3 High Jun 24, 2026
CVE-2026-44495 Axios is a promise based HTTP client for the browser and Node.js 7.0 High Jun 11, 2026
CVE-2026-44494 Axios is a promise based HTTP client for the browser and Node.js 8.7 High Jun 11, 2026
CVE-2026-44492 Axios is a promise based HTTP client for the browser and Node.js 8.6 High Jun 11, 2026
CVE-2026-7374 A flaw was found in KubeVirt's virt-handler component 9.9 Critical May 26, 2026
CVE-2026-40175 Axios is a promise based HTTP client for the browser and Node.js 4.8 Medium Apr 10, 2026

Other Red Hat products