Vulnerabilities of Red Hat Red Hat OpenShift Update Service

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-92925	Redis: redis: out-of-bounds read via crafted cluster bus packets	7.1 High	Sep 17, 2026
CVE-2026-74247	A flaw was found in Red Hat Quay	4.2 Medium	Aug 14, 2026
CVE-2026-74245	A flaw was found in Red Hat Quay's exported logs feature	5.9 Medium	Aug 14, 2026
CVE-2026-74244	A flaw was found in Red Hat Quay's Stripe billing webhook handler	5.9 Medium	Aug 14, 2026
CVE-2026-74243	A flaw was found in Red Hat Quay	6.5 Medium	Aug 14, 2026
CVE-2026-74242	A flaw was found in Red Hat Quay	5.3 Medium	Aug 14, 2026
CVE-2026-74241	A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP) authentication handling	4.8 Medium	Aug 14, 2026
CVE-2026-74240	A flaw was found in Red Hat Quay's JWT (JSON Web Token) validation for federated robot accounts and single sign-on (SSO)…	5.4 Medium	Aug 14, 2026
CVE-2026-16910	A flaw was found in Red Hat Quay's notification webhook feature	5.5 Medium	Jul 24, 2026
CVE-2026-7598	A security vulnerability has been detected in libssh2 up to 1.11.1	6.9 Medium	May 1, 2026
CVE-2025-57854	A container privilege escalation flaw was found in certain OpenShift Update Service (OSUS) images	6.4 Medium	Apr 8, 2026
CVE-2026-31812	Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol	8.7 High	Mar 10, 2026
CVE-2026-3338	Improper signature validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass signature…	7.5 High	Mar 2, 2026
CVE-2026-3336	Improper certificate validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass certificate chain…	7.5 High	Mar 2, 2026
CVE-2026-21441	urllib3 is an HTTP client library for Python	8.9 High	Jan 7, 2026

Other Red Hat products