Red Hat Enterprise Linux 8
- Software type
- Operating system
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/26/2026, Red Hat Enterprise Linux 8 recorded 294 security vulnerabilities in the last 90 days, of which 107 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Red Hat Enterprise Linux 8 and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-115486Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoningCVE-2026-115485Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuioCVE-2026-115484Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msgCVE-2026-115449Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guestCVE-2026-115221Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-115486Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning | Exploitation statusNot confirmed | FixNo |
| SeverityHigh |
CVE-2026-115485Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio | Exploitation statusNot confirmed | FixNo | Published10/23/2026 | SeverityMedium |
|---|
CVE-2026-115484Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg | Exploitation statusNot confirmed | FixNo | Published10/23/2026 | SeverityHigh |
|---|
CVE-2026-115449Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guest | Exploitation statusNot exploited | FixNo | Published10/22/2026 | SeverityLow |
|---|
CVE-2026-115221Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership | Exploitation statusNot confirmed | FixNo | Published10/22/2026 | SeverityMedium |
|---|
CVE-2026-115207Patch: filename validation bypass in reversal fallback allows file creation outside the working directory | Exploitation statusNot confirmed | FixNo | Published10/22/2026 | SeverityMedium |
|---|
CVE-2026-114406Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | Exploitation statusNot confirmed | FixNo | Published10/21/2026 | SeverityMedium |
|---|
CVE-2026-85518Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition | Exploitation statusNot confirmed | FixNo | Published10/21/2026 | SeverityMedium |
|---|
CVE-2026-114370Undertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink traversal | Exploitation statusNot exploited | FixNo | Published10/21/2026 | SeverityLow |
|---|
CVE-2026-92824Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts | Exploitation statusNot confirmed | FixNo | Published10/21/2026 | SeverityMedium |
|---|
1,797 Results | Page 1 of 180