Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

Red Hat Hardened Images Security Vulnerabilities | CyStack CVE Database

CVE	Exploitation status	Fix	Published	Severity
`CVE-2026-88265`Crun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chown	Exploitation statusNot known exploited	FixNot confirmed	Published09/10/2026	SeverityMedium
`CVE-2026-88264`Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs	Exploitation statusNot known exploited	FixNot confirmed	Published09/10/2026	SeverityMedium
`CVE-2026-84042`Crun: crun: rootful krun with passt executes container payload as host root	Exploitation statusNot known exploited	FixNot confirmed	Published09/10/2026	SeverityHigh
`CVE-2026-87876`Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)	Exploitation statusPublic exploit	FixNot confirmed	Published09/09/2026	SeverityLow
`CVE-2026-87875`Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound	Exploitation statusPublic exploit	FixNot confirmed	Published09/09/2026	SeverityMedium
`CVE-2026-87766`Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup	Exploitation statusNot known exploited	FixYes	Published09/09/2026	SeverityHigh
`CVE-2026-74860`Libxml2: double-free/uaf in libxml2 python bindings	Exploitation statusNot known exploited	FixNot confirmed	Published09/08/2026	SeverityHigh
`CVE-2026-86469`Glib2: toctou symlink race in `g_file_create_replace_destination` fallback path	Exploitation statusPublic exploit	FixNot confirmed	Published09/07/2026	SeverityMedium
`CVE-2026-84838`Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()	Exploitation statusNot known exploited	FixNot confirmed	Published09/02/2026	SeverityHigh
`CVE-2026-84837`Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path	Exploitation statusNot known exploited	FixNot confirmed	Published09/02/2026	SeverityHigh
`CVE-2026-78409`Util-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinks	Exploitation statusPublic exploit	FixNot confirmed	Published09/02/2026	SeverityHigh
`CVE-2026-78410`Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection	Exploitation statusPublic exploit	FixNot confirmed	Published09/02/2026	SeverityHigh
`CVE-2026-78408`Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority	Exploitation statusPublic exploit	FixNot confirmed	Published09/02/2026	SeverityHigh
`CVE-2026-84233`Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames	Exploitation statusNot known exploited	FixNot confirmed	Published09/01/2026	SeverityHigh
`CVE-2026-18743`Popt-devel: popt-static: short realloc in poptconfigfiletostring	Exploitation statusNot known exploited	FixNot confirmed	Published09/01/2026	SeverityLow
`CVE-2026-13732`Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf	Exploitation statusNot known exploited	FixNot confirmed	Published08/31/2026	SeverityHigh
`CVE-2026-82327`Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data	Exploitation statusNot known exploited	FixNot confirmed	Published08/28/2026	SeverityMedium
`CVE-2026-19685`Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615)	Exploitation statusNot known exploited	FixNot confirmed	Published08/24/2026	SeverityCritical
`CVE-2026-78367`Rpm: rpmbuild gettarspec() crafted tar member name → macro injection	Exploitation statusPublic exploit	FixNot confirmed	Published08/24/2026	SeverityHigh
`CVE-2026-19582`CVE-2026-19582	Exploitation statusNot confirmed	FixNot confirmed	Published08/20/2026	SeverityUnknown
`CVE-2026-19617`Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser	Exploitation statusNot known exploited	FixNot confirmed	Published08/14/2026	SeverityMedium
`CVE-2026-19730`Podman: podman: quadlet install --replace non-truncating write retains removed host-access directives	Exploitation statusPublic exploit	FixNot confirmed	Published08/13/2026	SeverityMedium
`CVE-2026-19548`Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing	Exploitation statusNot known exploited	FixNot confirmed	Published08/12/2026	SeverityMedium
`CVE-2026-72693`Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login	Exploitation statusNot known exploited	FixNot confirmed	Published08/11/2026	SeverityHigh
`CVE-2026-15816`Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()	Exploitation statusNot known exploited	FixNot confirmed	Published08/07/2026	SeverityHigh
`CVE-2026-18938`P11-kit: integer overflow in rpc attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems	Exploitation statusNot known exploited	FixNot confirmed	Published08/07/2026	SeverityMedium
`CVE-2026-19079`Policycoreutils: policycoreutils: toctou race condition in fixfiles allows arbitrary selinux label manipulation	Exploitation statusNot known exploited	FixNot confirmed	Published08/07/2026	SeverityMedium
`CVE-2026-18839`Popt-devel: popt-static: size_t underflow in singleoptionhelp	Exploitation statusNot known exploited	FixNot confirmed	Published08/05/2026	SeverityLow
`CVE-2026-44605`Rpm: heap buffer overflow in ndb slot table parsing	Exploitation statusNot known exploited	FixNot confirmed	Published08/05/2026	SeverityMedium
`CVE-2026-71227`Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return	Exploitation statusNot known exploited	FixYes	Published08/05/2026	SeverityMedium
`CVE-2026-71226`Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path	Exploitation statusNot known exploited	FixYes	Published08/05/2026	SeverityHigh
`CVE-2026-71225`Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries	Exploitation statusNot known exploited	FixYes	Published08/05/2026	SeverityMedium
`CVE-2026-18739`Popt-devel: popt-static: off-by-one in poptstuffargs	Exploitation statusNot known exploited	FixNot confirmed	Published08/04/2026	SeverityLow
`CVE-2026-18477`Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape	Exploitation statusNot known exploited	FixNot confirmed	Published08/03/2026	SeverityMedium
`CVE-2026-18508`Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite	Exploitation statusNot known exploited	FixNot confirmed	Published08/03/2026	SeverityMedium
`CVE-2026-18220`Binutils: binutils: out-of-bounds write in bfd dlx elf backend relocation processing	Exploitation statusNot known exploited	FixNot confirmed	Published07/29/2026	SeverityHigh
`CVE-2026-15003`Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service	Exploitation statusNot known exploited	FixNot confirmed	Published07/27/2026	SeverityMedium
`CVE-2026-16730`Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setup	Exploitation statusNot known exploited	FixNot confirmed	Published07/24/2026	SeverityMedium
`CVE-2026-16552`CVE-2026-16552	Exploitation statusNot confirmed	FixNot confirmed	Published07/22/2026	SeverityUnknown
`CVE-2026-16517`Libarchive: libarchive: signed integer overflow in archive_write_zip_header	Exploitation statusNot known exploited	FixNot confirmed	Published07/21/2026	SeverityLow
`CVE-2026-59851`Libssh: libssh: authentication bypass via missing gssapi principal check	Exploitation statusNot known exploited	FixNot confirmed	Published07/21/2026	SeverityHigh
`CVE-2026-59850`Libssh: libssh: use-after-free via data callbacks on closed channels	Exploitation statusNot known exploited	FixNot confirmed	Published07/21/2026	SeverityMedium
`CVE-2026-59849`Libssh: libssh: denial of service via automatic certificate authentication loop	Exploitation statusNot known exploited	FixNot confirmed	Published07/21/2026	SeverityLow
`CVE-2026-59848`Libssh: libssh: denial of service via sftp responses with unknown request ids	Exploitation statusNot known exploited	FixNot confirmed	Published07/21/2026	SeverityMedium
`CVE-2026-59847`Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification	Exploitation statusNot known exploited	FixNot confirmed	Published07/21/2026	SeverityMedium
`CVE-2026-59846`Libssh: libssh: information disclosure via proxycommand %r username expansion	Exploitation statusNot known exploited	FixNot confirmed	Published07/21/2026	SeverityLow
`CVE-2026-16445`Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module	Exploitation statusNot known exploited	FixNot confirmed	Published07/21/2026	SeverityHigh
`CVE-2026-59844`Libssh: libssh: denial of service via oversized sftp read length	Exploitation statusNot known exploited	FixNot confirmed	Published07/21/2026	SeverityMedium
`CVE-2026-59845`Libssh: libssh: denial of service via unchecked proxycommand fork() failure	Exploitation statusNot known exploited	FixNot confirmed	Published07/21/2026	SeverityMedium
`CVE-2026-59843`Libssh: libssh: denial of service via zero advertised channel packet size	Exploitation statusNot known exploited	FixNot confirmed	Published07/21/2026	SeverityMedium
`CVE-2026-59842`Libssh: libssh: information disclosure via short gssapi curve25519 public key	Exploitation statusNot known exploited	FixNot confirmed	Published07/21/2026	SeverityLow
`CVE-2026-15370`Libssh: libssh: stack buffer overflow in sftp server longname construction	Exploitation statusNot known exploited	FixNot confirmed	Published07/21/2026	SeverityMedium
`CVE-2026-15588`Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering	Exploitation statusPublic exploit	FixNot confirmed	Published07/20/2026	SeverityMedium
`CVE-2026-48863`Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service	Exploitation statusNot known exploited	FixYes	Published07/16/2026	SeverityHigh
`CVE-2026-15028`Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header	Exploitation statusNot known exploited	FixNot confirmed	Published07/10/2026	SeverityLow
`CVE-2026-58016`Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"	Exploitation statusNot known exploited	FixYes	Published06/30/2026	SeverityHigh
`CVE-2026-58015`Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive	Exploitation statusNot known exploited	FixYes	Published06/30/2026	SeverityMedium
`CVE-2026-58014`Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"	Exploitation statusPublic exploit	FixYes	Published06/30/2026	SeverityHigh
`CVE-2026-58013`Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"	Exploitation statusNot known exploited	FixYes	Published06/30/2026	SeverityMedium
`CVE-2026-58012`Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()	Exploitation statusNot known exploited	FixYes	Published06/30/2026	SeverityMedium
`CVE-2026-58011`Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime	Exploitation statusPublic exploit	FixYes	Published06/30/2026	SeverityMedium
`CVE-2026-58010`Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()	Exploitation statusNot known exploited	FixYes	Published06/30/2026	SeverityMedium
`CVE-2026-12610`Sssd: use-after-free crash in sssd' 'sssd_pam' process	Exploitation statusNot known exploited	FixNot confirmed	Published06/30/2026	SeverityMedium
`CVE-2026-14164`Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()	Exploitation statusPublic exploit	FixNot confirmed	Published06/30/2026	SeverityHigh
`CVE-2026-13757`P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing	Exploitation statusNot known exploited	FixNot confirmed	Published06/29/2026	SeverityMedium
`CVE-2026-12912`Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image	Exploitation statusNot known exploited	FixNot confirmed	Published06/29/2026	SeverityHigh
`CVE-2026-54371`attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr	Exploitation statusNot known exploited	FixYes	Published06/29/2026	SeverityHigh
`CVE-2026-54369`acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions	Exploitation statusNot known exploited	FixYes	Published06/29/2026	SeverityHigh
`CVE-2026-13595`Util-linux: util-linux: heap use-after-free in libblkid nested partition probing	Exploitation statusNot known exploited	FixNot confirmed	Published06/29/2026	SeverityMedium
`CVE-2026-48618`CVE-2026-48618	Exploitation statusNot known exploited	FixYes	Published06/26/2026	SeverityHigh
`CVE-2026-48933`CVE-2026-48933	Exploitation statusNot known exploited	FixYes	Published06/26/2026	SeverityHigh
`CVE-2026-55654`Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination	Exploitation statusNot known exploited	FixNot confirmed	Published06/23/2026	SeverityLow
`CVE-2026-55655`Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions	Exploitation statusNot known exploited	FixNot confirmed	Published06/23/2026	SeverityMedium
`CVE-2026-55653`Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service	Exploitation statusNot known exploited	FixNot confirmed	Published06/23/2026	SeverityMedium
`CVE-2026-48746`vLLM: OpenAI auth bypass	Exploitation statusPublic exploit	FixYes	Published06/22/2026	SeverityCritical
`CVE-2026-56211`Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames	Exploitation statusNot known exploited	FixNot confirmed	Published06/19/2026	SeverityHigh
`CVE-2026-56210`Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id	Exploitation statusNot known exploited	FixNot confirmed	Published06/19/2026	SeverityHigh
`CVE-2026-56208`Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode	Exploitation statusNot known exploited	FixNot confirmed	Published06/19/2026	SeverityHigh
`CVE-2026-56209`Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack	Exploitation statusNot known exploited	FixNot confirmed	Published06/19/2026	SeverityHigh
`CVE-2026-9697`undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent	Exploitation statusNot known exploited	FixYes	Published06/17/2026	SeverityHigh
`CVE-2026-6734`undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse	Exploitation statusNot known exploited	FixYes	Published06/17/2026	SeverityHigh
`CVE-2026-12151`undici WebSocket client vulnerable to denial of service via fragment count bypass	Exploitation statusNot known exploited	FixYes	Published06/17/2026	SeverityHigh
`CVE-2026-12515`Katello: missing repository authorization in content_uploads exposes cross-product content existence	Exploitation statusNot known exploited	FixNot confirmed	Published06/17/2026	SeverityMedium
`CVE-2026-42055`NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability	Exploitation statusNot known exploited	FixYes	Published06/17/2026	SeverityCritical
`CVE-2026-48779`ws: Memory exhaustion DoS from tiny fragments and data chunks	Exploitation statusPublic exploit	FixYes	Published06/16/2026	SeverityHigh
`CVE-2026-4367`Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing	Exploitation statusNot known exploited	FixNot confirmed	Published06/16/2026	SeverityMedium
`CVE-2026-42014`Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin	Exploitation statusNot known exploited	FixNot confirmed	Published06/16/2026	SeverityMedium
`CVE-2026-44990`Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`	Exploitation statusPublic exploit	FixNot confirmed	Published06/12/2026	SeverityCritical
`CVE-2026-12143`form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)	Exploitation statusPublic exploit	FixYes	Published06/12/2026	SeverityHigh
`CVE-2026-49261`MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`	Exploitation statusNot known exploited	FixYes	Published06/11/2026	SeverityCritical
`CVE-2026-11850`Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read	Exploitation statusNot known exploited	FixNot confirmed	Published06/11/2026	SeverityMedium
`CVE-2026-6893`Dracut: dracut: root code execution via dhcp options command injection	Exploitation statusNot known exploited	FixNot confirmed	Published06/10/2026	SeverityHigh
`CVE-2026-45591`ASP.NET Core Denial of Service Vulnerability	Exploitation statusNot known exploited	FixYes	Published06/09/2026	SeverityHigh
`CVE-2026-45490`.NET SDK Elevation of Privilege Vulnerability	Exploitation statusNot known exploited	FixYes	Published06/09/2026	SeverityHigh
`CVE-2026-49975`Apache HTTP Server: mod_http2 denial of service	Exploitation statusPublic exploit	FixYes	Published06/08/2026	SeverityHigh
`CVE-2026-42536`Apache HTTP Server: mod_xml2enc heap overflow	Exploitation statusNot known exploited	FixYes	Published06/08/2026	SeverityHigh
`CVE-2026-44185`Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`	Exploitation statusNot known exploited	FixYes	Published06/08/2026	SeverityHigh
`CVE-2026-34355`Apache HTTP Server: mod_proxy_html buffer overflow	Exploitation statusNot known exploited	FixYes	Published06/08/2026	SeverityHigh
`CVE-2026-10732`CVE-2026-10732	Exploitation statusNot known exploited	FixNot confirmed	Published06/05/2026	SeverityMedium
`CVE-2026-41567`Docker: `PUT /containers/{id}/archive` executes container binary on the host	Exploitation statusNot known exploited	FixYes	Published06/05/2026	SeverityHigh

100 / 258 Results

Security vulnerabilities in Red Hat Hardened Images

Red Hat Hardened Images

Verify to analyze this security profile

How many security vulnerabilities does Red Hat Hardened Images have?

Does the latest Red Hat Hardened Images version have known vulnerabilities?

Run an in-depth assessment with complete web risk management