- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/21/2026, Red Hat Enterprise Linux 7 recorded 214 security vulnerabilities in the last 90 days, of which 71 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Red Hat Enterprise Linux 7 and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-114406Ca-certificates: distrust emudhra intermediate ca certificates due to security concernsCVE-2026-85518Openscap: openscap: arbitrary file write via path traversal in source datastream decompositionCVE-2026-114038Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format stringCVE-2026-112177Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 8CVE-2026-112261Gimp: gimp: use-after-free in xcf loader via prop_selected_path| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-114406Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | Exploitation statusNot confirmed | FixNo |
| SeverityMedium |
CVE-2026-85518Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition | Exploitation statusNot confirmed | FixNo | Published10/21/2026 | SeverityMedium |
|---|
CVE-2026-114038Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string | Exploitation statusNot confirmed | FixNo | Published10/21/2026 | SeverityMedium |
|---|
CVE-2026-112177Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 8 | Exploitation statusNot exploited | FixNo | Published10/20/2026 | SeverityHigh |
|---|
CVE-2026-112261Gimp: gimp: use-after-free in xcf loader via prop_selected_path | Exploitation statusNot exploited | FixNo | Published10/19/2026 | SeverityHigh |
|---|
CVE-2026-112258Gimp: gimp: use-after-free in xcf loader via prop_linked and prop_selection on channels | Exploitation statusNot exploited | FixNo | Published10/19/2026 | SeverityHigh |
|---|
CVE-2026-112257Gimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033) | Exploitation statusNot exploited | FixNo | Published10/19/2026 | SeverityHigh |
|---|
CVE-2026-112260Gimp: gimp: heap out-of-bounds read in xcf text-layer parasite parsing | Exploitation statusNot exploited | FixNo | Published10/19/2026 | SeverityHigh |
|---|
CVE-2026-112259Gimp: gimp: null pointer dereference in swatchbooker (sbz) palette import | Exploitation statusNot confirmed | FixNo | Published10/19/2026 | SeverityMedium |
|---|
CVE-2026-112214Gstreamer1-plugins-ugly-free: gstreamer1-plugins-ugly-free: unbounded memory allocation in asfdemux simple index parser | Exploitation statusNot exploited | FixNo | Published10/19/2026 | SeverityMedium |
|---|
1,435 Results | Page 1 of 144