- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/26/2026, Red Hat Enterprise Linux 9 recorded 325 security vulnerabilities in the last 90 days, of which 119 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Red Hat Enterprise Linux 9 and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-115486Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoningCVE-2026-115485Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuioCVE-2026-115484Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msgCVE-2026-115449Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guestCVE-2026-115221Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-115486Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning | Exploitation statusNot confirmed | FixNo |
| SeverityHigh |
CVE-2026-115485Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio | Exploitation statusNot confirmed | FixNo | Published10/23/2026 | SeverityMedium |
|---|
CVE-2026-115484Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg | Exploitation statusNot confirmed | FixNo | Published10/23/2026 | SeverityHigh |
|---|
CVE-2026-115449Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guest | Exploitation statusNot exploited | FixNo | Published10/22/2026 | SeverityLow |
|---|
CVE-2026-115221Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership | Exploitation statusNot confirmed | FixNo | Published10/22/2026 | SeverityMedium |
|---|
CVE-2026-111079Goose: goose: shell history and environment leak via terminal integration | Exploitation statusNot exploited | FixNo | Published10/22/2026 | SeverityHigh |
|---|
CVE-2026-115207Patch: filename validation bypass in reversal fallback allows file creation outside the working directory | Exploitation statusNot confirmed | FixNo | Published10/22/2026 | SeverityMedium |
|---|
CVE-2026-114406Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | Exploitation statusNot confirmed | FixNo | Published10/21/2026 | SeverityMedium |
|---|
CVE-2026-85518Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition | Exploitation statusNot confirmed | FixNo | Published10/21/2026 | SeverityMedium |
|---|
CVE-2026-114370Undertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink traversal | Exploitation statusNot exploited | FixNo | Published10/21/2026 | SeverityLow |
|---|
1,827 Results | Page 1 of 183