Red Hat Hardened Images
- Software type
- Software application
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/25/2026, Red Hat Hardened Images recorded 74 security vulnerabilities in the last 90 days, of which 29 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Red Hat Hardened Images and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-115207Patch: filename validation bypass in reversal fallback allows file creation outside the working directoryCVE-2026-114406Ca-certificates: distrust emudhra intermediate ca certificates due to security concernsCVE-2026-85518Openscap: openscap: arbitrary file write via path traversal in source datastream decompositionCVE-2026-114236Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layersCVE-2026-92824Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-115207Patch: filename validation bypass in reversal fallback allows file creation outside the working directory | Exploitation statusNot confirmed | FixNo |
| SeverityMedium |
CVE-2026-114406Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | Exploitation statusNot confirmed | FixNo | Published10/21/2026 | SeverityMedium |
|---|
CVE-2026-85518Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition | Exploitation statusNot confirmed | FixNo | Published10/21/2026 | SeverityMedium |
|---|
CVE-2026-114236Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers | Exploitation statusNot confirmed | FixNo | Published10/21/2026 | SeverityLow |
|---|
CVE-2026-92824Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts | Exploitation statusNot confirmed | FixNo | Published10/21/2026 | SeverityMedium |
|---|
CVE-2026-92822Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml | Exploitation statusActively exploited | FixNo | Published10/21/2026 | SeverityMedium |
|---|
CVE-2026-92823Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml | Exploitation statusNot exploited | FixNo | Published10/21/2026 | SeverityMedium |
|---|
CVE-2026-16460Bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization | Exploitation statusNot exploited | FixNo | Published10/19/2026 | SeverityHigh |
|---|
CVE-2026-16487CVE-2026-16487 | Exploitation statusNot confirmed | FixNo | Published10/19/2026 | SeverityUnknown |
|---|
CVE-2026-17591Libarchive: libarchive: use-after-free via aliased mac metadata copy | Exploitation statusNot exploited | FixNo | Published10/16/2026 | SeverityLow |
|---|
368 Results | Page 1 of 37